Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066663a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333066663a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          tOIWYJ7J/0JJOnQGY40pz96qhoQktCQBfEvXGvyZ6bc=
Subject key identifier:   6D:2F:8C:91:29:5D:CD:60:1C:CE:C9:F9:69:56:2F:B7:FE:59:61:3E
Certificate issuer:       /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial:       7AE24B2FF39D944F5F2756181780F94148895729
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066663a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Mon 29 Apr 2024 00:25:56 +0000
ROA not before:           Mon 29 Apr 2024 00:20:56 +0000
ROA not after:            Mon 28 Apr 2025 00:25:56 +0000
asID:                     151349
IP address blocks:        2a06:9f81:30ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 22:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e2:4b:2f:f3:9d:94:4f:5f:27:56:18:17:80:f9:41:48:89:57:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
        Validity
            Not Before: Apr 29 00:20:56 2024 GMT
            Not After : Apr 28 00:25:56 2025 GMT
        Subject: CN=6D2F8C91295DCD601CCEC9F969562FB7FE59613E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:9a:43:0c:8f:ea:88:e2:9b:cb:b3:80:b2:
                    86:0d:12:15:f2:3d:03:16:93:36:c8:f4:5c:07:10:
                    a7:3a:8d:3d:1f:3c:7b:84:f2:d5:69:2d:9c:0b:ff:
                    aa:72:f5:f4:01:fb:ae:47:61:f8:99:10:dd:5f:db:
                    e2:c7:a1:de:0e:cb:15:99:d4:46:80:9a:f9:3c:bd:
                    1a:6b:f0:3b:4a:c4:c8:5c:28:ea:b8:a6:f2:66:62:
                    38:f9:d3:a2:48:7d:75:1e:e1:6a:d7:cd:b3:7c:d6:
                    14:fb:48:e1:7b:7f:0b:c4:87:6a:5d:5b:d0:09:47:
                    b2:be:6a:8d:5b:bb:52:4e:bf:6e:44:54:a0:ef:87:
                    2c:e6:1b:23:a3:d7:e3:88:0b:39:81:10:7e:87:b6:
                    c8:72:a0:7a:0a:70:c5:51:a3:fe:48:7c:fb:c7:1b:
                    eb:72:5a:d4:0a:00:04:73:e7:c5:36:86:d5:4c:a1:
                    30:41:3d:8e:e4:81:5c:cc:b1:b9:5e:7e:03:23:69:
                    b2:4a:aa:ad:19:db:73:3a:2d:b9:09:3b:6e:12:c4:
                    9f:e1:ca:62:c0:a7:a9:ab:0c:0c:d3:9e:2e:8b:eb:
                    7a:9a:e9:82:45:97:67:87:97:97:03:3e:bc:0f:09:
                    95:f7:6f:c2:13:9c:0b:cb:01:22:9e:ff:e3:e2:ef:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2F:8C:91:29:5D:CD:60:1C:CE:C9:F9:69:56:2F:B7:FE:59:61:3E
            X509v3 Authority Key Identifier:
                keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066663a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:99:51:3f:56:e2:e2:d5:bf:3b:78:84:94:e1:24:13:61:
         7d:8e:3e:b6:64:95:87:18:b2:0a:4a:34:a6:c2:55:23:4b:20:
         e3:f6:9e:b4:28:43:e1:ee:ad:11:6c:72:da:bd:20:40:fb:7c:
         d3:22:55:a9:17:16:7a:94:4a:fc:b3:ee:77:a1:ed:7b:b6:9e:
         d6:e4:82:6b:29:a3:1f:ab:6f:32:d2:d0:2d:d4:00:46:e0:ff:
         28:0f:59:14:a9:68:70:ca:78:d9:80:d7:74:11:f1:67:5e:44:
         e5:06:57:35:4b:7c:37:07:84:b6:e6:07:6a:9a:7c:6c:f5:db:
         db:02:0d:ef:07:fd:0d:4e:9c:d8:bc:2e:ad:b4:ee:ae:88:b6:
         99:5e:73:56:ea:0e:5c:59:c8:a3:12:0e:13:ef:aa:75:c8:24:
         38:1e:21:72:21:c1:9d:82:9d:d7:02:a7:82:97:a5:41:08:5e:
         e0:0c:69:f8:c6:89:54:60:85:7b:0e:f7:4d:01:98:e4:a6:c7:
         b0:86:0f:2a:b0:fc:fa:66:5b:b9:d8:c7:cd:b3:3e:2a:6a:46:
         da:48:c6:aa:d5:4e:9d:be:64:79:7e:fc:68:08:2a:cd:0b:4c:
         e7:07:a4:90:54:a5:ca:92:63:d3:2a:2c:46:90:ea:67:3c:10:
         03:59:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:35:38 2024 by rpki-client on console-ams.rpki-client.org