Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa
File:                     326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier:          1cHE9g6peotLQGJPVbNnn14exMLqf7mblBEiwMXZvdY=
Subject key identifier:   57:44:9F:3B:30:17:72:DB:DF:69:3C:A9:68:65:74:E5:EC:FA:B1:A7
Certificate issuer:       /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Certificate serial:       25AE95048B71F44AE8A0112D988BED4E64A72252
Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa
Signing time:             Wed 17 Jan 2024 13:55:21 +0000
ROA not before:           Wed 17 Jan 2024 13:50:21 +0000
ROA not after:            Wed 15 Jan 2025 13:55:21 +0000
asID:                     47496
IP address blocks:        2a05:dfc1:c42e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ae:95:04:8b:71:f4:4a:e8:a0:11:2d:98:8b:ed:4e:64:a7:22:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
        Validity
            Not Before: Jan 17 13:50:21 2024 GMT
            Not After : Jan 15 13:55:21 2025 GMT
        Subject: CN=57449F3B301772DBDF693CA9686574E5ECFAB1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:1b:4b:a3:7a:c7:e9:46:49:62:ad:e1:56:
                    f0:77:97:e3:fe:1e:79:4a:9d:79:b4:02:35:98:a4:
                    61:cf:e0:e1:00:b5:93:3c:e1:1d:8e:b4:e1:23:fd:
                    4c:ba:11:a9:eb:74:0d:cb:c5:a6:79:0a:10:30:d5:
                    80:f8:c6:78:ae:79:c0:74:2c:58:eb:63:b0:ef:fe:
                    24:a4:93:70:c5:59:c0:c3:8d:b6:64:87:b6:2d:3c:
                    e8:94:2e:7c:b2:57:a1:af:4c:70:d0:76:d3:25:14:
                    e6:9d:8a:8e:39:a9:d1:1d:c9:91:d0:7d:c3:b3:ac:
                    14:3c:99:a9:92:e5:60:6e:61:e4:d6:21:03:6e:e5:
                    68:be:47:65:c3:75:e8:8f:a6:ac:de:a1:0b:f6:23:
                    20:2d:29:e2:09:5a:02:e1:87:af:96:d7:9e:1d:11:
                    c3:4c:7d:e5:c3:bb:df:49:41:ef:fa:9a:97:f5:6d:
                    eb:e3:ca:de:87:9b:14:c7:7f:81:6f:c0:16:09:27:
                    1f:9a:d1:29:a0:8b:2c:3b:62:81:1a:18:6f:9b:7a:
                    4f:b1:9e:85:b5:58:30:0c:77:44:af:9b:d8:98:b2:
                    c8:f0:c2:0b:e4:09:18:33:ad:18:3a:b2:32:4f:fd:
                    76:57:41:a7:b1:55:4c:11:df:a7:1f:43:3a:a4:a2:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:44:9F:3B:30:17:72:DB:DF:69:3C:A9:68:65:74:E5:EC:FA:B1:A7
            X509v3 Authority Key Identifier:
                keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c42e::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:02:55:2f:bf:ae:46:95:f9:4c:d2:3a:a4:92:33:57:04:
         65:5b:9e:48:44:72:9e:81:e6:74:9d:de:42:63:18:ee:af:53:
         14:55:af:e4:e4:25:76:2f:93:9d:07:a8:05:86:1b:f4:d0:3c:
         f8:74:3a:2d:e7:c7:d8:fe:55:3a:ae:a4:01:48:a5:e2:9e:a6:
         3f:c7:29:7c:4c:d4:38:80:89:3a:15:56:92:f5:24:99:82:48:
         bf:06:af:21:59:a8:59:99:29:77:13:c6:08:22:b5:74:04:27:
         e9:9f:7c:cd:e1:8f:cb:cb:c9:f9:28:13:54:59:76:0c:07:04:
         86:d7:b9:5c:ba:6e:70:3f:3d:82:26:e7:d5:a4:d7:97:dd:df:
         8e:63:99:11:79:be:c9:b8:cf:bd:5b:16:d8:3e:4c:01:4a:e6:
         86:78:a6:d5:d7:ea:5c:ab:10:17:a2:40:1a:0b:57:d2:10:0a:
         b4:39:04:b9:5c:8b:34:86:a6:a8:f9:5a:eb:0f:56:4a:3f:4c:
         61:8d:d7:ff:71:b4:82:db:7a:35:7a:c1:83:7a:44:4f:c9:e4:
         2e:f2:fd:3d:7e:4e:9f:13:be:f9:dc:a0:68:45:4e:f4:50:d5:
         ac:40:d0:4e:d4:2d:0f:b3:b2:ce:7d:2f:95:f5:fd:23:6d:f1:
         4d:b1:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:30 2024 by rpki-client on console-ams.rpki-client.org