Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=
Subject key identifier:   D0:93:B5:47:5C:E9:A7:E4:7D:6E:F6:4E:7E:81:F1:FF:2C:52:74:7F
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       5A836607093EE2458C318095E806011B8D397B97
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa
Signing time:             Fri 04 Jul 2025 10:47:27 +0000
ROA not before:           Fri 04 Jul 2025 10:42:27 +0000
ROA not after:            Fri 03 Jul 2026 10:47:27 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:83:66:07:09:3e:e2:45:8c:31:80:95:e8:06:01:1b:8d:39:7b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jul  4 10:42:27 2025 GMT
            Not After : Jul  3 10:47:27 2026 GMT
        Subject: CN=D093B5475CE9A7E47D6EF64E7E81F1FF2C52747F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:25:7b:92:7c:dc:3f:7c:ee:87:2a:79:75:
                    b4:c3:1e:4e:2c:77:34:93:9c:4e:7e:a8:61:99:0e:
                    e0:fa:7a:50:20:5b:29:df:03:54:d2:34:aa:01:73:
                    f2:01:0b:28:35:2c:f0:ea:d5:f6:aa:3f:59:0e:3e:
                    31:ff:6b:ab:ba:2f:20:78:6b:6c:d6:8b:ed:51:7c:
                    59:6c:af:67:1f:74:b9:27:03:0b:97:cd:6a:36:59:
                    75:ed:ad:63:9e:c5:54:c9:f4:e3:fd:27:73:80:40:
                    aa:96:0e:4d:f7:a8:5d:09:a7:e8:7e:c0:83:41:ab:
                    db:c3:fc:9c:30:df:7e:5a:12:70:10:b4:8f:e9:8f:
                    a6:8e:33:95:54:4e:db:17:45:6a:97:fa:a8:04:67:
                    e6:5d:ee:36:fe:bf:60:70:38:c5:eb:57:96:dd:33:
                    b1:8a:5d:ca:1d:c4:88:90:91:fd:d1:a7:85:68:61:
                    7f:f2:cb:c8:eb:51:24:bb:11:66:29:9f:0a:f5:25:
                    43:68:a4:1d:50:90:52:2e:9c:e4:cd:80:96:af:b4:
                    1a:27:70:d9:5d:40:6a:ec:70:21:ee:7e:7f:8a:39:
                    c4:f8:29:3e:90:ae:84:3a:3b:0d:c0:27:29:96:ec:
                    75:e7:cb:89:01:25:02:4a:6a:47:ef:5d:2d:58:57:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:B5:47:5C:E9:A7:E4:7D:6E:F6:4E:7E:81:F1:FF:2C:52:74:7F
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f7::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:9e:fd:e2:8b:71:a9:03:d0:c5:8e:8a:3d:65:b5:df:c2:a5:
         14:4f:b5:f9:f8:40:ef:93:b5:40:e7:ea:d5:e6:73:af:01:74:
         51:43:b3:7a:e0:bf:89:58:3d:b9:f9:0f:86:3c:65:e5:fc:89:
         33:69:fd:af:ee:46:66:23:35:7a:da:58:60:6a:e2:6c:f2:6f:
         07:cb:a9:d6:be:a4:8c:01:9b:64:02:b8:41:35:42:d9:58:4f:
         1b:e4:b7:f6:b9:b2:5a:7c:97:a6:aa:88:cb:fc:08:e7:58:be:
         dd:f0:f2:5e:66:e8:fb:ba:b6:c0:8e:75:08:f3:18:c2:d6:21:
         14:11:c1:57:9c:b3:8a:bc:93:57:cb:c4:09:9f:85:4e:3b:1a:
         97:e0:ab:ee:df:75:59:5b:50:17:11:b4:ea:2c:27:2a:83:17:
         2b:cf:b8:da:07:52:fd:7f:2f:45:71:49:7a:8a:1a:92:e5:a5:
         de:19:fa:90:41:32:a2:c6:cf:2e:40:56:3d:0e:b6:1d:81:30:
         57:8b:ed:a5:1a:24:38:9a:b5:38:ff:a7:31:94:01:4e:68:c7:
         27:6b:b2:2f:09:f0:3f:ec:3e:98:b7:a8:57:0f:ca:80:ff:fd:
         9d:1c:1c:22:13:e2:43:4f:52:e9:0d:4f:13:9a:35:18:18:bf:
         bf:d1:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:50:05 2025 by rpki-client