Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=
Subject key identifier:   EC:DC:F9:B9:C2:F9:E5:12:F8:D3:67:2F:B5:03:B5:4E:FB:D0:29:B5
Certificate issuer:       /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
Certificate serial:       61C4961C1D58E933ACB60998E937F108B7042CC3
Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa
Signing time:             Tue 10 Sep 2024 19:15:17 +0000
ROA not before:           Tue 10 Sep 2024 19:10:17 +0000
ROA not after:            Tue 09 Sep 2025 19:15:17 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 08:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c4:96:1c:1d:58:e9:33:ac:b6:09:98:e9:37:f1:08:b7:04:2c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
        Validity
            Not Before: Sep 10 19:10:17 2024 GMT
            Not After : Sep  9 19:15:17 2025 GMT
        Subject: CN=ECDCF9B9C2F9E512F8D3672FB503B54EFBD029B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:39:c5:f5:8c:1e:6a:2b:70:a7:a5:67:6e:
                    b2:a1:0a:fa:15:87:89:14:73:94:a0:90:2e:5c:67:
                    64:9a:6d:f7:30:6d:4c:48:8c:de:79:a4:cb:bb:48:
                    94:9a:18:fc:f2:5c:14:1e:db:6e:25:ea:07:7c:e9:
                    6d:66:44:72:5d:67:d5:18:64:d0:60:53:1d:17:94:
                    29:36:2f:b2:08:84:a8:de:8b:5e:27:5c:7d:cf:e3:
                    35:b1:58:96:56:49:18:0b:02:7a:f6:16:05:f7:1b:
                    2c:89:c6:29:ec:19:cb:9f:2c:1a:30:4c:98:eb:b6:
                    f8:4b:91:b9:c2:d3:dc:0b:e2:c8:b1:be:d1:d8:f5:
                    2f:20:29:98:48:9a:f9:e0:0e:36:8b:8e:24:2f:58:
                    6e:39:d6:eb:6f:94:a9:19:34:7d:13:7b:85:7e:d0:
                    d9:36:f1:41:48:14:dd:f5:77:b6:25:ee:ea:c6:84:
                    66:6c:8a:c0:62:b0:e4:4f:64:68:5d:ac:c2:7f:e4:
                    c5:33:ac:e0:73:17:c3:99:c6:0e:59:1a:d4:2c:d3:
                    7b:5c:90:1e:98:0b:f5:4d:c2:3b:81:9c:e5:15:c4:
                    5f:d3:70:40:e3:1b:3e:2d:a0:85:7e:61:22:39:06:
                    b5:78:b6:da:bb:bd:ec:ae:57:03:c3:cf:52:1d:4e:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DC:F9:B9:C2:F9:E5:12:F8:D3:67:2F:B5:03:B5:4E:FB:D0:29:B5
            X509v3 Authority Key Identifier:
                keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:d5:34:54:7d:a1:fe:fe:fa:02:ec:40:fa:bd:f7:e6:2a:
         38:01:78:d7:61:c4:96:74:08:10:bb:22:44:f4:f8:a5:94:2b:
         d4:e0:02:65:31:73:12:b1:8f:cf:4e:3a:93:14:7c:ec:05:f8:
         69:21:0b:1c:95:e6:a4:2c:e2:a9:13:42:5c:4d:02:a7:c9:b0:
         79:59:e5:59:40:69:df:55:c7:55:5f:c9:d1:e7:67:a9:8e:45:
         83:49:da:ca:04:17:92:5f:ec:0d:4e:a0:40:0f:59:55:52:a8:
         89:37:ac:4d:92:f4:8d:70:07:38:1e:69:25:9a:79:45:80:09:
         24:b2:aa:09:9f:10:c9:f5:0b:2e:2a:36:ca:db:bc:5c:8e:51:
         29:62:c8:4c:80:9a:d9:2f:c3:84:2b:7b:c4:3f:8d:a6:31:22:
         cd:39:67:3f:49:56:60:f3:4f:93:e6:d7:05:1a:51:31:d8:49:
         61:cf:8a:1f:81:65:b1:68:13:ab:d2:55:fd:01:4a:54:ac:40:
         64:f7:a6:68:aa:bc:72:bf:52:52:60:02:7b:61:71:d7:95:09:
         b5:d7:13:30:36:90:64:3a:02:67:27:d4:47:15:aa:a0:1d:20:
         b6:1a:e8:dc:8b:c5:18:69:d7:3c:a7:4c:d1:27:bc:d6:84:0a:
         23:0b:c4:89
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUYcSWHB1Y6TOstgmY6TfxCLcELMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUz
MTA0RkU3NjAeFw0yNDA5MTAxOTEwMTdaFw0yNTA5MDkxOTE1MTdaMDMxMTAvBgNV
BAMTKEVDRENGOUI5QzJGOUU1MTJGOEQzNjcyRkI1MDNCNTRFRkJEMDI5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04jnF9Yweaitwp6VnbrKhCvoV
h4kUc5SgkC5cZ2SabfcwbUxIjN55pMu7SJSaGPzyXBQe224l6gd86W1mRHJdZ9UY
ZNBgUx0XlCk2L7IIhKjei14nXH3P4zWxWJZWSRgLAnr2FgX3GyyJxinsGcufLBow
TJjrtvhLkbnC09wL4sixvtHY9S8gKZhImvngDjaLjiQvWG451utvlKkZNH0Te4V+
0Nk28UFIFN31d7Yl7urGhGZsisBisORPZGhdrMJ/5MUzrOBzF8OZxg5ZGtQs03tc
kB6YC/VNwjuBnOUVxF/TcEDjGz4toIV+YSI5BrV4ttq7veyuVwPDz1IdTj8VAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU7Nz5ucL55RL402cvtQO1TvvQKbUwHwYDVR0j
BBgwFoAUMJwl57GP8opguWslVy+KnjEE/nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1
Y2U3LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzMwOUMyNUU3QjE4RkYy
OEE2MEI5NkIyNTU3MkY4QTlFMzEwNEZFNzYuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzJhY2EzY2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNl
Ny8wLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjIzMTY2MzYzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTMwMzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgQLH2MA0GCSqGSIb3DQEB
CwUAA4IBAQAYPtU0VH2h/v76AuxA+r335io4AXjXYcSWdAgQuyJE9PillCvU4AJl
MXMSsY/PTjqTFHzsBfhpIQscleakLOKpE0JcTQKnybB5WeVZQGnfVcdVX8nR52ep
jkWDSdrKBBeSX+wNTqBAD1lVUqiJN6xNkvSNcAc4HmklmnlFgAkksqoJnxDJ9Qsu
KjbK27xcjlEpYshMgJrZL8OEK3vEP42mMSLNOWc/SVZg80+T5tcFGlEx2Elhz4of
gWWxaBOr0lX9AUpUrEBk96Zoqrxyv1JSYAJ7YXHXlQm11xMwNpBkOgJnJ9RHFaqg
HSC2Gujci8UYadc8p0zRJ7zWhAojC8SJ
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:44 2024 by rpki-client on console-ams.rpki-client.org