Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          aLMhsfYdjf21J9aU3Uo3Hp0yvn1JOeVPFhZq5je9lJk=
Subject key identifier:   B0:72:8B:8C:D4:B8:CC:DE:60:1E:78:63:DD:9A:4F:83:C8:F1:41:6C
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       08C6C28E5D733085C5EDECCD51EF348D30C2CD9A
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:26 +0000
ROA not before:           Tue 04 Jun 2024 08:01:26 +0000
ROA not after:            Tue 03 Jun 2025 08:06:26 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c6:c2:8e:5d:73:30:85:c5:ed:ec:cd:51:ef:34:8d:30:c2:cd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:26 2024 GMT
            Not After : Jun  3 08:06:26 2025 GMT
        Subject: CN=B0728B8CD4B8CCDE601E7863DD9A4F83C8F1416C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:31:f9:bf:fd:cd:46:ba:78:4b:fa:40:d7:
                    87:87:3b:8b:5a:e5:3e:13:66:60:c6:2a:61:bf:83:
                    9b:04:b7:81:5a:1c:eb:df:38:65:58:34:69:e3:6a:
                    a1:a6:71:83:4f:8b:9a:f2:58:c3:71:91:67:41:ca:
                    db:4c:bd:e6:ba:f3:b5:de:24:3a:b0:1b:a6:4e:29:
                    92:6f:dc:92:14:53:c4:04:79:e0:95:e6:12:0a:f0:
                    cb:1e:12:a6:fb:81:12:9d:a0:c5:8a:75:df:cb:cc:
                    e4:27:61:7a:6a:f8:30:e2:fd:5d:d6:6f:a3:c3:a8:
                    e0:d9:fa:cc:f7:73:0c:84:03:cf:cf:91:41:67:1d:
                    44:15:06:17:30:08:fe:c7:71:cf:21:80:b1:56:a6:
                    a5:b2:fd:03:25:eb:c5:4b:b3:45:bc:7b:8c:d2:7a:
                    1e:61:25:a1:45:93:23:7e:e0:b0:b0:06:00:5d:51:
                    53:74:d3:60:85:77:63:01:70:ce:d5:c6:e7:77:06:
                    19:09:ba:4f:62:aa:16:2c:03:49:91:16:be:23:e0:
                    7d:ba:55:8e:14:87:2b:bb:59:6e:a8:70:3e:03:62:
                    c9:2a:7b:5a:fa:8c:07:07:8c:19:d8:30:06:02:75:
                    64:07:19:c3:11:b5:fe:65:dc:24:1d:b4:f3:c0:34:
                    98:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:8B:8C:D4:B8:CC:DE:60:1E:78:63:DD:9A:4F:83:C8:F1:41:6C
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f20::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:67:ac:24:4c:70:41:1b:b9:01:b4:7b:d8:f7:c4:93:ef:
         14:eb:a1:68:96:71:2c:9c:c0:a6:76:ee:16:fd:88:2f:ba:12:
         46:7e:59:3c:b7:5f:c2:a3:cc:97:81:96:49:fa:35:94:21:84:
         bf:85:4b:75:f3:b2:4c:ac:2b:b1:45:9e:a3:e4:eb:0e:60:45:
         05:b5:fe:fc:5a:f6:7f:df:89:94:6f:16:1f:49:18:c9:f3:b1:
         29:6d:8e:80:99:5c:37:1a:88:7f:f5:a8:82:dc:7b:ef:5a:5b:
         97:c7:72:e4:32:21:29:27:5c:16:96:0b:ec:3b:28:c3:e0:9e:
         25:73:18:b2:7e:a3:41:d6:30:68:f0:80:e4:06:30:fb:01:31:
         10:98:f4:cf:dc:e7:1d:14:7f:18:7d:82:91:69:75:e0:ba:ec:
         a9:cb:ef:a8:45:aa:d9:07:b4:fc:55:bc:d4:33:9b:93:75:13:
         3e:59:d9:d2:b4:be:fd:b5:d7:97:2d:9d:1e:57:e7:77:86:63:
         7d:09:98:d0:1c:1b:d3:b5:5b:14:1d:5a:25:71:cd:c4:a8:dc:
         e6:6e:f2:5b:b0:49:4b:a5:60:a4:4e:f2:5f:2e:7c:05:4a:20:
         dc:18:f9:b6:f3:a5:33:5b:d5:f1:b3:ca:c2:0a:ac:ca:fa:ef:
         0f:db:06:8a
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUCMbCjl1zMIXF7ezNUe80jTDCzZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1
NzU2QjE5QzAeFw0yNDA2MDQwODAxMjZaFw0yNTA2MDMwODA2MjZaMDMxMTAvBgNV
BAMTKEIwNzI4QjhDRDRCOENDREU2MDFFNzg2M0REOUE0RjgzQzhGMTQxNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+zH5v/3NRrp4S/pA14eHO4ta
5T4TZmDGKmG/g5sEt4FaHOvfOGVYNGnjaqGmcYNPi5ryWMNxkWdByttMvea687Xe
JDqwG6ZOKZJv3JIUU8QEeeCV5hIK8MseEqb7gRKdoMWKdd/LzOQnYXpq+DDi/V3W
b6PDqODZ+sz3cwyEA8/PkUFnHUQVBhcwCP7Hcc8hgLFWpqWy/QMl68VLs0W8e4zS
eh5hJaFFkyN+4LCwBgBdUVN002CFd2MBcM7Vxud3BhkJuk9iqhYsA0mRFr4j4H26
VY4Uhyu7WW6ocD4DYskqe1r6jAcHjBnYMAYCdWQHGcMRtf5l3CQdtPPANJivAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUsHKLjNS4zN5gHnhj3ZpPg8jxQWwwHwYDVR0j
BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz
NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMyMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8gMA0GCSqGSIb3DQEB
CwUAA4IBAQClfGesJExwQRu5AbR72PfEk+8U66FolnEsnMCmdu4W/YgvuhJGflk8
t1/Co8yXgZZJ+jWUIYS/hUt187JMrCuxRZ6j5OsOYEUFtf78WvZ/34mUbxYfSRjJ
87EpbY6AmVw3Goh/9aiC3HvvWluXx3LkMiEpJ1wWlgvsOyjD4J4lcxiyfqNB1jBo
8IDkBjD7ATEQmPTP3OcdFH8YfYKRaXXguuypy++oRarZB7T8VbzUM5uTdRM+WdnS
tL79tdeXLZ0eV+d3hmN9CZjQHBvTtVsUHVolcc3EqNzmbvJbsElLpWCkTvJfLnwF
SiDcGPm286UzW9Xxs8rCCqzK+u8P2waK
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org