Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          nuQuacT441Ry1SaRabhePu25JpBYpB9vL54QuR3fQ8w=
Subject key identifier:   70:52:03:51:D1:31:0F:21:A0:B6:7B:CA:E3:DA:D3:54:C3:F3:20:3C
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       29CB932C9A78EE8BE3B0A4EE22976E3E0F114E52
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Fri 05 Jun 2026 19:58:11 +0000
ROA not before:           Fri 05 Jun 2026 19:53:11 +0000
ROA not after:            Fri 04 Jun 2027 19:58:11 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 07:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cb:93:2c:9a:78:ee:8b:e3:b0:a4:ee:22:97:6e:3e:0f:11:4e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Jun  5 19:53:11 2026 GMT
            Not After : Jun  4 19:58:11 2027 GMT
        Subject: CN=70520351D1310F21A0B67BCAE3DAD354C3F3203C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:f2:7f:d3:80:46:2a:74:be:38:7f:5b:3b:
                    b6:8c:90:e5:bc:22:42:5c:79:bd:05:75:cd:3c:b0:
                    e5:af:e6:40:fd:f2:66:51:e6:7e:38:a1:fe:1b:fa:
                    a5:05:08:45:3c:df:47:e6:eb:87:9d:f4:e2:63:19:
                    55:bf:70:6e:32:4d:7c:46:36:e7:04:89:bf:4d:f9:
                    a5:fe:c0:e6:2d:d1:08:1c:49:f5:5c:dd:89:ac:bd:
                    06:18:e1:ca:c6:01:67:e6:2d:37:9b:aa:17:fe:b0:
                    a8:2d:28:eb:88:be:6f:81:46:98:02:e8:03:21:bf:
                    d8:fa:7a:48:fa:3a:f2:ec:7e:b3:08:8d:e3:51:50:
                    b8:58:de:bd:26:a0:79:c3:46:97:f2:7f:b7:68:07:
                    5c:81:22:93:0d:14:8b:fe:5e:93:65:45:70:61:e5:
                    87:eb:b8:46:bc:cb:95:10:00:97:f8:fd:d9:2f:e0:
                    4c:8a:ce:1c:a8:3f:85:05:5c:a6:07:b6:55:cb:60:
                    b1:c8:24:e8:52:68:06:b4:ab:c8:49:ed:1f:57:36:
                    ee:0f:16:91:6f:42:31:61:34:fb:46:00:0c:d7:3f:
                    37:cd:b9:68:7c:ef:85:35:d9:ce:4f:28:78:3a:f8:
                    1b:34:13:f5:6c:18:51:44:eb:e4:39:70:c6:1f:d4:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:52:03:51:D1:31:0F:21:A0:B6:7B:CA:E3:DA:D3:54:C3:F3:20:3C
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f60::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:19:78:32:77:9d:8e:88:7e:f2:1a:d9:89:2e:0d:22:44:ef:
         8e:d7:fd:47:b2:a1:3e:76:e8:52:9a:18:11:74:c7:85:f4:13:
         c7:c3:f7:a5:8a:b6:23:35:91:5f:ea:7b:e4:cc:3f:0c:79:8e:
         dd:87:48:ca:3a:ee:8c:10:4a:ab:91:87:71:27:33:e3:0e:9d:
         fa:72:60:63:ee:2e:e5:58:2a:15:43:55:6f:28:47:99:ef:15:
         80:fc:45:2f:1a:bf:c7:33:0e:17:0b:91:38:fc:9c:b8:ca:6c:
         e9:98:b2:6d:95:a2:16:ee:0c:dd:99:d1:7b:ac:d6:52:4f:30:
         e2:fa:52:8a:b7:5d:31:26:32:9b:b9:d5:71:d3:79:d0:04:3f:
         cd:14:48:8b:19:85:28:ed:b6:b8:db:73:0e:90:5b:46:de:91:
         1c:d7:b4:1f:91:f8:02:1a:44:b5:2c:c1:a4:4f:78:9f:c8:f8:
         bd:a9:0b:34:04:9a:4e:42:5c:14:69:e2:50:05:d5:d8:7b:c2:
         63:35:44:07:d4:06:04:b6:fd:db:a3:cc:21:93:a5:eb:d3:13:
         79:ed:e5:94:5e:00:2e:b9:b6:2f:f7:13:5a:e6:0c:33:8a:dd:
         1c:61:49:39:70:0d:18:8c:58:0f:44:76:ae:06:04:b0:f2:f1:
         a3:54:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:48 2026 by rpki-client