Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=
Subject key identifier:   E9:02:D2:80:EA:92:54:A1:38:A3:B0:E2:25:B4:D5:8F:3F:E9:8D:59
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       7E8856D9DE2F34D3B88C2C96B5375B888D79C9E6
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Fri 04 Jul 2025 10:47:27 +0000
ROA not before:           Fri 04 Jul 2025 10:42:27 +0000
ROA not after:            Fri 03 Jul 2026 10:47:27 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:88:56:d9:de:2f:34:d3:b8:8c:2c:96:b5:37:5b:88:8d:79:c9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jul  4 10:42:27 2025 GMT
            Not After : Jul  3 10:47:27 2026 GMT
        Subject: CN=E902D280EA9254A138A3B0E225B4D58F3FE98D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:67:b3:1f:d0:91:7c:67:48:57:a2:a5:83:
                    bf:7b:c9:29:14:86:7a:a0:dd:39:b1:57:6c:28:6f:
                    3c:6a:83:73:58:30:de:f2:4a:7e:9b:aa:77:b5:b6:
                    1e:27:a9:30:0c:af:87:1d:c5:23:29:3c:6e:ec:5d:
                    59:0d:9b:2d:fc:a0:5a:61:80:b0:ed:d9:3b:6b:f4:
                    b8:4e:c4:e6:1b:54:09:7f:af:82:85:2b:12:69:09:
                    8d:6d:2a:f3:7c:45:ff:69:7e:46:65:36:6d:ef:23:
                    05:91:83:99:20:f8:91:83:97:71:b7:ba:1a:03:b7:
                    17:49:03:e6:ba:16:50:52:5d:96:a3:12:b7:f5:d7:
                    4d:fe:1b:08:19:95:8f:1f:2a:3d:85:0e:a3:71:5e:
                    fd:0a:2b:85:e6:7d:0a:fd:2a:51:d3:05:52:a7:b1:
                    6e:8e:f4:87:6f:53:0f:32:ab:34:dd:27:e3:e2:5d:
                    6e:e3:53:2a:07:47:5e:46:c7:ef:7c:7b:a2:87:12:
                    0f:95:64:d0:00:1d:62:3a:98:12:79:ea:f9:ae:26:
                    53:9d:8d:6b:5f:9c:a1:34:45:5d:36:24:b4:e3:5c:
                    81:f3:db:12:8c:4a:ba:c7:3d:83:41:b3:93:8d:c7:
                    e7:f3:44:a3:9d:aa:31:dc:63:69:1b:a8:7f:f5:0a:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:02:D2:80:EA:92:54:A1:38:A3:B0:E2:25:B4:D5:8F:3F:E9:8D:59
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:52:33:30:9c:3d:63:5e:27:99:cd:a7:07:12:bf:fc:4e:6f:
         0e:23:52:60:cf:9f:14:3e:5f:81:ee:72:6d:50:e3:ad:a1:6a:
         ef:40:09:54:b3:18:08:b3:43:52:bc:da:2d:ee:d0:ef:64:af:
         6a:9f:95:bd:b2:fc:7b:56:e3:33:ad:34:24:54:09:b2:9a:94:
         c7:30:2e:22:38:15:2a:0f:4b:b0:d5:e1:e8:90:2a:a9:b0:0c:
         f9:81:b6:6c:cb:ac:f5:53:b8:b7:2b:e3:47:5e:71:80:53:68:
         bf:30:eb:01:b1:d5:18:18:21:a2:2d:c7:1d:35:1a:05:d1:87:
         99:55:94:96:be:07:1e:04:4a:1c:6f:3e:e3:0b:53:62:d3:99:
         95:11:9c:2e:af:bd:1c:47:a2:11:96:ff:ae:3d:57:a2:32:17:
         0d:2d:51:be:85:87:2d:73:a9:2c:53:9e:46:de:bc:3b:3b:9f:
         a7:ee:dd:0d:47:c9:a5:9f:0a:26:46:2f:16:34:38:d2:55:90:
         35:3a:91:54:73:98:19:ee:ad:84:ba:97:01:e7:df:7b:c8:fa:
         7c:f9:de:2c:a2:fa:a2:27:95:a8:f1:3a:e9:4c:15:79:cb:08:
         b4:39:85:14:a7:a2:fb:ce:50:a5:2b:69:bc:3f:45:0a:37:5c:
         52:7a:2a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 13:08:22 2025 by rpki-client