Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa
File:                     326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (raw, json)
Hash identifier:          tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=
Subject key identifier:   D6:E2:0A:3E:52:68:B5:AE:F7:1B:EA:4A:BA:F2:62:09:AA:F8:38:67
Certificate issuer:       /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial:       1F2C04E8C0DB1C37C3FE2940531D57E5AF345FA9
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa
Signing time:             Fri 04 Jul 2025 18:57:55 +0000
ROA not before:           Fri 04 Jul 2025 18:52:55 +0000
ROA not after:            Fri 03 Jul 2026 18:57:55 +0000
asID:                     216452
IP address blocks:        2a05:dfc1:8200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 21:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2c:04:e8:c0:db:1c:37:c3:fe:29:40:53:1d:57:e5:af:34:5f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
        Validity
            Not Before: Jul  4 18:52:55 2025 GMT
            Not After : Jul  3 18:57:55 2026 GMT
        Subject: CN=D6E20A3E5268B5AEF71BEA4ABAF26209AAF83867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a2:fe:2a:d1:69:25:19:9b:be:b1:d2:cd:8e:
                    80:53:b0:3e:65:7e:02:d3:49:b2:08:70:44:6f:95:
                    05:93:b9:d2:de:47:4c:eb:1e:a1:ae:05:d8:1c:b7:
                    28:e9:d7:38:62:40:93:3d:7b:96:f7:39:eb:4a:79:
                    86:07:ac:fa:09:06:8b:40:d6:49:71:7c:4c:ca:3b:
                    b4:e4:08:4a:19:49:54:1f:8e:80:4f:8e:e4:63:87:
                    0c:b3:77:a0:c4:95:db:16:c8:b1:65:2a:66:36:d5:
                    dd:a0:66:d6:4f:b7:32:32:52:a2:20:eb:79:d2:d7:
                    ec:1d:dc:07:f5:b8:d6:d6:2e:94:03:43:c7:64:56:
                    f1:a3:a6:40:ac:df:97:75:aa:67:b6:85:e4:0e:3a:
                    d0:3a:c8:a3:27:f8:8d:14:fa:9b:2c:62:24:6b:20:
                    f5:73:32:7a:35:61:de:e0:58:b6:d8:3b:a6:37:8e:
                    6e:60:7a:f4:de:bf:e6:30:ec:69:0a:29:de:05:39:
                    6d:10:e8:3a:9a:fd:d9:c2:59:1a:93:6d:13:62:35:
                    39:82:22:27:ec:51:2f:13:83:2d:70:66:c7:b4:fa:
                    65:35:0f:6e:4b:4b:23:f9:6e:fb:0d:7f:dc:d2:33:
                    d3:2d:c3:5b:a6:6b:58:a4:1f:ab:11:7b:b7:ac:d5:
                    08:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E2:0A:3E:52:68:B5:AE:F7:1B:EA:4A:BA:F2:62:09:AA:F8:38:67
            X509v3 Authority Key Identifier:
                keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:da:93:a8:d2:fa:73:e7:cd:55:c5:f5:2e:7d:6b:80:81:f4:
         ba:49:db:36:39:f1:b5:82:4e:1d:2a:95:65:54:43:57:75:1e:
         d3:72:85:ce:99:df:d6:5f:6c:d1:f1:30:9c:e7:c6:04:26:4f:
         e3:a8:a7:9d:68:dd:a3:02:a2:06:8a:7b:56:ac:54:67:2b:09:
         b0:ed:3e:08:be:58:bd:28:93:38:bb:76:7d:9d:cb:e6:49:5a:
         c2:56:b2:18:74:ef:59:5d:a3:b7:79:e7:f6:81:c6:b1:9b:dc:
         8a:e0:ee:43:a9:e9:38:52:03:35:ea:7d:d4:4f:69:59:e1:38:
         20:2b:81:76:75:db:1b:8c:d8:76:91:e9:08:1b:3c:30:c2:af:
         e4:c8:20:75:53:46:57:6c:b4:19:67:8e:2b:49:3e:32:be:cb:
         68:c2:c1:dc:4b:81:e9:58:b0:59:5b:aa:41:4e:2c:6a:4c:df:
         60:6c:52:26:0e:f1:54:d0:08:40:cb:fc:83:d4:f0:91:41:b2:
         e9:e5:51:66:d7:0a:5e:34:37:d0:64:6d:cb:f9:0e:67:5c:79:
         e3:e5:ee:a0:8e:68:c4:a9:37:79:2d:9c:bd:61:4b:63:15:30:
         de:79:8e:1a:68:c1:b1:92:81:bb:65:98:e4:12:37:52:08:80:
         39:88:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:59:23 2025 by rpki-client