Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=
Subject key identifier:   80:53:D4:5A:93:44:C2:12:79:78:E4:52:8B:7E:09:2C:76:48:37:39
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       38FBDEDDB5C22A9E9332E47493D6913C614DC216
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Fri 04 Jul 2025 10:47:28 +0000
ROA not before:           Fri 04 Jul 2025 10:42:28 +0000
ROA not after:            Fri 03 Jul 2026 10:47:28 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:de:dd:b5:c2:2a:9e:93:32:e4:74:93:d6:91:3c:61:4d:c2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jul  4 10:42:28 2025 GMT
            Not After : Jul  3 10:47:28 2026 GMT
        Subject: CN=8053D45A9344C2127978E4528B7E092C76483739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:f4:76:19:10:82:81:e3:2f:f1:22:14:9f:
                    7c:f9:44:19:e8:47:24:97:cb:7b:2b:c1:7e:52:3d:
                    f4:84:62:6a:8b:c9:ac:f2:1b:46:0e:3b:ff:75:1b:
                    6d:d0:fd:cf:de:cf:a6:06:d5:26:17:45:6e:de:f8:
                    0b:bc:76:d8:01:17:b1:78:f3:f6:d3:da:f9:bb:d3:
                    ae:08:ea:4a:b9:1f:43:11:f0:4a:fa:0f:04:e6:40:
                    74:f8:15:3b:03:b7:7f:d4:8d:4c:bb:7e:cc:fb:54:
                    02:71:9b:ff:b8:50:87:00:da:e5:e9:69:74:5d:74:
                    25:4b:ac:4c:3e:71:73:60:3f:ee:24:00:38:72:d8:
                    cc:b9:99:88:97:a0:87:76:cf:40:60:18:0f:a8:50:
                    98:6b:a7:96:2b:2c:df:20:a8:d2:f3:c1:92:34:6e:
                    f4:e0:eb:cd:c3:6d:6a:74:f1:20:7c:7d:9a:78:ad:
                    56:b4:13:16:83:c3:d8:80:e5:a6:9a:ab:8b:25:97:
                    28:01:da:08:7a:cd:4b:4f:74:ae:6f:e9:f3:00:f2:
                    8d:af:06:6f:c6:1e:d7:8c:cf:67:be:57:76:7d:b3:
                    0c:1a:d4:a4:80:0e:a8:a8:b2:ae:91:4b:91:2d:85:
                    4d:21:77:d9:20:31:7b:1f:f8:10:c2:1b:72:43:0b:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:D4:5A:93:44:C2:12:79:78:E4:52:8B:7E:09:2C:76:48:37:39
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:ab:7f:49:d3:f4:69:8d:ea:9b:02:3c:a7:1f:a1:da:88:
         03:4b:b1:b2:75:6c:b4:39:30:00:07:76:14:7a:6b:8a:f7:35:
         26:a8:3f:a1:18:ae:77:0b:17:88:bf:c6:a6:ab:0a:f4:e5:b6:
         65:b8:e3:71:47:b7:29:bf:53:74:e5:cc:9e:f1:60:dd:27:08:
         5b:bf:07:2c:09:d3:e2:71:a0:29:20:c7:06:56:8f:87:e3:2f:
         73:64:17:4a:10:03:74:6e:a1:3c:60:7c:b3:6e:66:6e:79:94:
         5d:11:ed:95:12:f4:33:13:9f:ec:47:0c:5d:f4:7a:73:59:3b:
         a9:79:40:80:11:72:2c:ae:47:28:7f:31:5e:c4:c7:4c:87:10:
         49:e3:8e:fe:d7:50:36:b7:9d:e6:be:24:a5:60:fb:56:03:4e:
         a3:27:b9:c1:c4:b6:44:7d:24:c5:f8:83:ea:fb:1d:48:f7:0f:
         66:56:ea:33:b3:fb:76:26:da:a0:52:0c:7b:de:04:cb:5d:a2:
         31:68:16:dd:d3:d1:30:8f:a2:d3:36:b1:30:a9:f4:c6:a8:9a:
         f9:5f:95:35:fe:60:a7:25:45:b4:32:e4:fe:6f:74:ba:79:05:
         db:48:12:e6:17:7b:d8:83:33:e0:50:3d:17:b7:c8:be:9b:67:
         5e:1a:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 13:09:40 2025 by rpki-client