Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=
Subject key identifier:   AC:27:20:B2:4A:26:82:85:6A:D7:F9:EB:B7:FB:D5:9E:DC:F7:F2:3A
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       18E05A3C949080BF8A01A49557A50291BBDA4FDC
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Fri 04 Jul 2025 10:47:28 +0000
ROA not before:           Fri 04 Jul 2025 10:42:28 +0000
ROA not after:            Fri 03 Jul 2026 10:47:28 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e0:5a:3c:94:90:80:bf:8a:01:a4:95:57:a5:02:91:bb:da:4f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jul  4 10:42:28 2025 GMT
            Not After : Jul  3 10:47:28 2026 GMT
        Subject: CN=AC2720B24A2682856AD7F9EBB7FBD59EDCF7F23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:6d:e7:45:a4:95:e0:93:65:7b:50:d5:e9:
                    a2:19:b2:5c:88:6f:ea:3b:e8:a6:9e:7f:7b:96:00:
                    d4:dd:fd:07:db:86:55:af:65:f2:96:73:b2:59:fc:
                    fd:98:62:b7:77:73:d3:60:1e:5f:e4:02:fe:69:37:
                    58:44:7e:06:11:42:2b:34:41:95:2c:b7:7b:7f:51:
                    15:73:62:f8:c2:46:7f:4e:83:01:55:e0:5e:ec:a2:
                    f6:f2:d2:8e:01:d7:0c:ca:c1:7b:86:b4:76:0b:38:
                    c6:5e:7d:46:29:43:4b:55:86:25:a9:c3:ee:e5:7d:
                    7a:e1:56:28:55:ce:e7:f2:16:b8:e3:0e:1b:55:99:
                    2b:fb:d0:70:93:ca:44:e9:dc:c9:31:f2:19:4f:3e:
                    23:c4:b2:6a:4b:b5:f2:59:ac:56:a9:04:4f:4a:7a:
                    8f:71:4e:ca:f9:4c:81:14:d4:c2:26:f1:a6:42:50:
                    88:d8:d1:fd:7c:ae:29:27:7f:93:76:04:d8:e7:37:
                    70:bc:36:6e:9e:fe:7a:d5:63:cc:5e:ea:97:64:c3:
                    51:f8:a7:96:6f:c8:93:89:b1:29:f9:d8:2e:f4:9a:
                    56:47:25:a9:d9:81:e0:b7:51:cd:df:0e:11:e2:3a:
                    52:5d:80:eb:f9:06:f4:f2:c0:9b:1b:5d:bc:ff:03:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:27:20:B2:4A:26:82:85:6A:D7:F9:EB:B7:FB:D5:9E:DC:F7:F2:3A
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:72:86:19:73:e3:fd:67:6b:a8:7c:7a:01:35:81:0d:a4:8a:
         0d:46:0f:16:5f:ea:6d:9e:bd:2c:f2:ff:0f:3a:18:78:a8:69:
         1a:82:ae:b8:2b:df:47:35:a3:e8:11:f5:ce:16:ec:08:20:d0:
         ec:d4:c1:00:0f:17:de:d5:bf:94:50:24:4e:3f:f6:47:7f:bf:
         20:a3:ce:7a:e5:41:8e:ba:47:49:d6:ac:b5:81:49:db:1b:8b:
         d7:6f:2a:b1:8a:f8:81:77:6c:e2:59:30:07:fa:76:db:3f:d5:
         ce:9e:ef:6a:f1:a1:97:18:c2:17:6d:c1:d5:64:04:3b:74:d8:
         4f:2a:ff:55:69:ad:c1:fd:8f:a0:b9:bc:60:c3:02:ec:5f:06:
         17:ca:0a:59:15:fd:1a:d9:64:6c:56:39:be:0a:99:04:e2:bc:
         a5:4b:bc:5a:4d:3a:a5:e6:4e:22:3b:ef:08:d9:b5:2d:00:64:
         fe:53:d8:c1:1c:9f:ec:4d:4e:3e:fb:b3:58:fd:32:63:13:40:
         d4:17:f9:ae:ed:80:8f:27:af:65:54:94:62:3e:a8:26:f0:63:
         89:66:a3:7b:1a:f1:29:68:2e:a5:10:f9:fe:f2:2c:55:13:e6:
         d5:6c:63:25:7f:51:03:7d:56:c3:63:3b:ab:60:f9:04:c6:12:
         a0:62:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 13:07:25 2025 by rpki-client