Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          xTILrV2E7IYle/yTR05QbTq9gkx8nE5uUphpEGnWqJk=
Subject key identifier:   59:62:C9:99:51:94:30:86:02:E3:2D:79:CE:62:AD:22:6D:D8:0F:3A
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       60AFB87EFD843BAF75E116B3D984ED51EA741A74
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Fri 05 Jun 2026 19:58:11 +0000
ROA not before:           Fri 05 Jun 2026 19:53:11 +0000
ROA not after:            Fri 04 Jun 2027 19:58:11 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 07:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:af:b8:7e:fd:84:3b:af:75:e1:16:b3:d9:84:ed:51:ea:74:1a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Jun  5 19:53:11 2026 GMT
            Not After : Jun  4 19:58:11 2027 GMT
        Subject: CN=5962C9995194308602E32D79CE62AD226DD80F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:ad:29:61:05:56:09:d4:eb:71:6d:89:91:
                    3b:b5:67:1e:22:b9:b5:b6:89:e3:21:a1:59:a5:d5:
                    64:db:f5:22:fb:f4:22:01:ed:31:3b:42:58:49:e7:
                    20:4b:e0:22:36:76:96:1b:b3:be:9d:3b:07:45:7b:
                    1a:87:f8:c4:dc:92:6b:2f:4f:da:c4:4c:48:33:7b:
                    4f:0d:32:8a:f0:23:e0:ff:25:75:bf:bd:e0:44:b9:
                    47:32:db:ec:3c:45:13:7f:49:16:a6:0e:e3:93:c8:
                    9f:43:f8:81:e2:14:d3:8c:41:30:e1:06:35:76:65:
                    b7:52:24:e0:ca:91:75:06:7f:c4:de:06:22:ad:9d:
                    ad:ff:34:8d:37:96:0b:45:4f:0d:df:14:85:3f:da:
                    89:f6:30:f0:cf:57:b8:45:75:79:25:ed:13:08:55:
                    a4:de:21:25:57:66:d0:2a:b2:26:15:d6:8b:7e:5d:
                    f5:61:b5:1d:b3:b9:d9:a2:c3:8d:80:0f:86:07:ff:
                    40:31:43:0d:f3:bb:a1:e8:ae:86:cc:55:c7:2a:6a:
                    6b:da:1e:f6:c3:2e:71:57:0a:9b:3c:07:55:72:bf:
                    18:6b:0f:7f:01:d8:bc:58:90:ce:7c:55:cd:e1:35:
                    13:64:bc:ee:86:46:67:e8:69:50:f4:9f:f7:65:f0:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:62:C9:99:51:94:30:86:02:E3:2D:79:CE:62:AD:22:6D:D8:0F:3A
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f20::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:81:5b:13:ea:b9:20:d8:1b:9f:d2:56:56:99:c1:9e:52:ee:
         af:ab:56:90:62:a3:b2:d9:79:d3:1e:a6:2a:5f:27:22:cd:35:
         83:92:75:aa:b8:a5:16:72:c1:45:1a:65:3e:ed:d5:c8:f2:a8:
         ff:0f:53:2d:79:e1:18:33:9f:f9:b5:01:31:63:92:8f:63:06:
         5f:20:53:b8:7c:a5:dc:fb:68:92:0f:e6:f5:bd:99:e0:bc:35:
         71:50:6a:f2:3a:ea:c6:89:b1:51:01:65:93:a6:15:76:e9:95:
         d3:8e:8e:2c:6e:50:ba:73:d4:43:a4:f7:bb:d3:b5:6e:80:2f:
         41:6b:84:af:9b:8a:86:af:ef:1b:59:7f:ba:13:d9:59:b7:8d:
         4f:0e:e7:71:7f:1a:53:34:86:b9:5f:1b:d1:86:cb:13:e1:af:
         60:a5:1a:f5:45:7b:df:69:f3:bd:2f:38:52:12:55:73:69:b5:
         ca:88:6f:40:d5:9d:56:33:e2:36:ed:13:92:b7:4a:ab:0a:2e:
         02:0c:a8:fd:c4:30:70:59:26:04:bc:4e:44:a8:7d:7a:c1:e8:
         fb:da:d6:92:30:e7:9c:02:37:08:11:ac:7d:bf:57:1a:5f:a7:
         d6:ef:92:13:4b:8f:ba:79:7b:af:73:4d:df:e1:73:9e:bd:ab:
         47:64:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:41 2026 by rpki-client