Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa
File:                     326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (raw, json)
Hash identifier:          wYXp+G0b+Wf8YUC1Ek8YmurJmwHTGoUGeGwnsv5xPhk=
Subject key identifier:   1B:A0:FF:4D:B7:C2:E1:33:D3:08:82:5A:14:DD:75:DC:2C:CD:22:9C
Certificate issuer:       /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
Certificate serial:       6C212401C12D23E5E7BAF4C4DDAEE48E4DAAEC8B
Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa
Signing time:             Tue 19 Sep 2023 02:14:59 +0000
ROA not before:           Tue 19 Sep 2023 02:09:59 +0000
ROA not after:            Tue 17 Sep 2024 02:14:59 +0000
asID:                     51019
IP address blocks:        2a0a:6040:1300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 12:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:21:24:01:c1:2d:23:e5:e7:ba:f4:c4:dd:ae:e4:8e:4d:aa:ec:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
        Validity
            Not Before: Sep 19 02:09:59 2023 GMT
            Not After : Sep 17 02:14:59 2024 GMT
        Subject: CN=1BA0FF4DB7C2E133D308825A14DD75DC2CCD229C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:2f:13:cb:7a:f1:9a:fb:98:0e:ad:ee:88:
                    74:20:0f:6a:7e:44:39:0a:9d:b9:59:6b:91:a9:d7:
                    3e:8b:ea:85:33:03:7c:7b:2e:61:16:df:48:db:9b:
                    07:6e:40:d6:a5:6d:4d:8e:b8:01:2d:6c:1e:9f:66:
                    ae:1d:66:19:af:9d:29:fa:2c:69:8d:ff:65:24:8f:
                    a0:c0:00:4c:32:03:1e:99:f9:ee:4b:b7:4d:1b:15:
                    6e:0e:95:4c:82:cd:0b:90:cb:4b:88:cc:40:ea:b4:
                    a5:ef:a6:20:47:49:97:d2:a6:b0:0e:e1:9d:76:a1:
                    66:7c:dd:04:fb:b4:f4:64:d1:00:e6:fc:ac:7e:3c:
                    ba:82:8e:e8:d5:c6:0f:22:e9:02:6b:c8:be:ad:3a:
                    50:76:90:e8:ad:24:9e:1f:3d:9b:aa:4a:e6:b4:5b:
                    92:26:76:c5:26:7a:a6:56:48:0a:14:e2:d4:b0:58:
                    a8:fe:a9:4a:cc:f8:02:3c:ba:a5:91:5c:f4:22:75:
                    f5:72:50:81:c7:41:87:e0:9b:08:c5:6d:68:5c:94:
                    48:5a:11:a4:35:23:2a:ce:e7:ad:91:c1:a1:8e:8c:
                    75:4b:5b:6b:19:69:2e:e4:34:9f:6b:74:e0:eb:4b:
                    ab:74:32:e8:8d:a4:cf:01:5a:19:ac:93:e9:0a:88:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:FF:4D:B7:C2:E1:33:D3:08:82:5A:14:DD:75:DC:2C:CD:22:9C
            X509v3 Authority Key Identifier:
                keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:66:60:af:55:6b:cb:41:83:72:cc:fe:40:e1:f0:c2:49:
         cd:9b:ad:d9:c8:71:57:02:18:c7:6e:d0:ab:72:45:d8:6c:37:
         d5:12:a5:92:c9:70:c4:8f:19:14:17:1c:ee:f3:48:73:4f:a3:
         f9:49:24:c7:2d:30:8c:9a:34:4b:80:8a:25:d9:32:0d:f0:cc:
         61:ff:44:7c:9c:11:47:aa:a3:42:5f:6d:d4:b8:9a:be:3f:9a:
         a8:ad:0f:c9:1b:15:94:04:b2:a4:32:fe:1d:10:33:37:53:ff:
         de:32:ed:b9:d6:ce:cb:ef:14:3b:9b:9f:e2:e8:a9:74:a0:70:
         40:6e:89:08:5e:7a:49:26:ac:14:a9:f9:6a:39:e5:77:c0:57:
         fd:f7:52:14:5c:fc:1a:09:6b:73:7a:43:62:b1:10:e8:7f:f2:
         07:07:4d:87:bb:ce:9f:40:f7:78:fe:e0:66:72:aa:e2:31:67:
         77:a0:30:e5:07:d6:42:a2:3f:64:86:aa:7f:cd:e9:17:4c:18:
         9d:cb:c1:bf:b2:ff:dd:32:ac:70:99:96:da:ee:c2:65:18:bb:
         4e:10:a4:1e:87:bb:ca:5b:74:9d:9e:41:b4:e8:ed:04:22:0a:
         fd:a8:9b:1c:7f:68:1a:64:06:e6:b8:64:04:6e:bb:e7:b3:24:
         50:49:4f:a3
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUbCEkAcEtI+XnuvTE3a7kjk2q7IswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NE
MjU1OTU3NjAeFw0yMzA5MTkwMjA5NTlaFw0yNDA5MTcwMjE0NTlaMDMxMTAvBgNV
BAMTKDFCQTBGRjREQjdDMkUxMzNEMzA4ODI1QTE0REQ3NURDMkNDRDIyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48C8Ty3rxmvuYDq3uiHQgD2p+
RDkKnblZa5Gp1z6L6oUzA3x7LmEW30jbmwduQNalbU2OuAEtbB6fZq4dZhmvnSn6
LGmN/2Ukj6DAAEwyAx6Z+e5Lt00bFW4OlUyCzQuQy0uIzEDqtKXvpiBHSZfSprAO
4Z12oWZ83QT7tPRk0QDm/Kx+PLqCjujVxg8i6QJryL6tOlB2kOitJJ4fPZuqSua0
W5ImdsUmeqZWSAoU4tSwWKj+qUrM+AI8uqWRXPQidfVyUIHHQYfgmwjFbWhclEha
EaQ1IyrO562RwaGOjHVLW2sZaS7kNJ9rdODrS6t0MuiNpM8BWhmsk+kKiMVXAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUG6D/TbfC4TPTCIJaFN113CzNIpwwHwYDVR0j
BBgwFoAUs9EO5vN8JD0NDAj3qgK6PNJVlXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IzRDEwRUU2RjM3QzI0
M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNjYWUz
Zi8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzEzMzMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzNTMxMzAzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBMwDQYJKoZIhvcNAQEL
BQADggEBAHGKZmCvVWvLQYNyzP5A4fDCSc2brdnIcVcCGMdu0KtyRdhsN9USpZLJ
cMSPGRQXHO7zSHNPo/lJJMctMIyaNEuAiiXZMg3wzGH/RHycEUeqo0JfbdS4mr4/
mqitD8kbFZQEsqQy/h0QMzdT/94y7bnWzsvvFDubn+LoqXSgcEBuiQheekkmrBSp
+Wo55XfAV/33UhRc/BoJa3N6Q2KxEOh/8gcHTYe7zp9A93j+4GZyquIxZ3egMOUH
1kKiP2SGqn/N6RdMGJ3Lwb+y/90yrHCZltruwmUYu04QpB6Hu8pbdJ2eQbTo7QQi
Cv2omxx/aBpkBua4ZARuu+ezJFBJT6M=
-----END CERTIFICATE-----
Generated at Fri Jun 28 04:14:42 2024 by rpki-client on console-ams.rpki-client.org