Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=
Subject key identifier:   6F:99:AF:F9:51:5E:38:04:BB:5B:18:AE:6D:CF:E9:C4:15:17:02:14
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       19F3982DDE02F503289599ADFDFD7CF90AE346F6
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Fri 04 Jul 2025 10:47:29 +0000
ROA not before:           Fri 04 Jul 2025 10:42:29 +0000
ROA not after:            Fri 03 Jul 2026 10:47:29 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f3:98:2d:de:02:f5:03:28:95:99:ad:fd:fd:7c:f9:0a:e3:46:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jul  4 10:42:29 2025 GMT
            Not After : Jul  3 10:47:29 2026 GMT
        Subject: CN=6F99AFF9515E3804BB5B18AE6DCFE9C415170214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:1e:9d:d9:dc:9b:e3:af:de:c9:9d:9e:26:
                    65:86:2b:34:26:e1:aa:96:0a:08:c5:1a:b7:22:e7:
                    5d:7c:87:1d:57:e7:b9:88:36:3a:18:52:90:02:2b:
                    05:70:e0:56:91:43:3d:e7:8d:f5:17:70:6d:1c:c8:
                    79:64:f5:d7:df:88:b9:ad:06:0d:20:26:e0:60:ac:
                    d1:cf:e8:af:f5:7f:57:69:a0:30:2c:81:93:02:79:
                    8f:86:51:bb:cc:0b:64:46:d3:78:84:f2:84:0e:d6:
                    95:73:70:79:a7:79:2e:ed:b6:76:f7:73:b2:ca:24:
                    a7:e4:54:a8:4e:76:1a:ed:92:32:b2:92:82:8c:76:
                    07:c5:20:68:16:e7:e1:06:10:51:ea:df:b1:e7:a1:
                    e6:9b:3f:69:1f:70:73:7b:51:45:cd:06:a1:4b:f4:
                    ed:22:1a:4a:c6:a2:52:67:9d:fd:2c:7b:83:08:02:
                    6f:29:f3:93:4e:9f:69:b3:bd:ee:48:9c:0a:c7:d4:
                    9b:01:26:d1:02:c0:b6:d4:0e:e2:98:67:54:c3:35:
                    a4:f6:6c:62:99:a7:c6:ca:82:f0:4c:bc:99:f7:2b:
                    4e:03:3c:14:82:a0:8b:c9:d6:02:a8:8a:25:5a:47:
                    52:39:71:9b:40:1b:26:b0:86:8b:31:72:6e:21:9d:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:99:AF:F9:51:5E:38:04:BB:5B:18:AE:6D:CF:E9:C4:15:17:02:14
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f2::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:64:58:83:f1:cc:f7:52:ec:5b:39:3f:98:b8:df:2e:02:12:
         26:b9:5b:5f:2d:97:cd:8c:16:47:4e:e6:b4:c7:f7:34:d8:59:
         9f:13:a4:0c:79:dc:57:3c:4b:aa:30:e0:2e:eb:3d:11:74:5b:
         23:56:11:04:df:49:15:31:85:2b:b7:f2:1e:c0:93:07:e3:b9:
         c8:8c:fa:42:a8:11:dd:44:17:6a:83:1f:5f:1b:a5:c9:06:03:
         a3:51:a1:01:88:e1:8f:f6:a4:7c:86:a3:be:a2:f6:1a:1a:5a:
         65:0c:0f:ae:ba:2c:b8:c4:a2:75:b3:0e:6c:e9:a9:3a:dd:8c:
         6b:ee:3d:f5:cc:3a:3a:6d:bf:7d:29:b1:8e:6d:61:26:99:b6:
         5b:f0:dd:a1:53:4e:b9:0a:99:44:3e:fa:ab:6b:d7:22:4b:f7:
         ea:ac:1c:ab:bf:b6:36:da:ad:06:13:80:72:e3:8b:08:82:77:
         91:3c:38:25:fc:bb:18:3f:0e:bf:28:ae:57:b1:3a:32:19:7d:
         44:94:1d:f6:80:96:30:ea:19:c4:8c:b6:0d:0d:7d:58:f0:2c:
         30:bb:ed:83:39:28:e2:c0:4e:84:67:36:9f:e4:d9:af:d3:a1:
         81:1b:0a:38:3f:f9:71:9e:59:da:f2:fc:ed:6c:79:6a:9c:3f:
         2a:9d:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:58:18 2025 by rpki-client