Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          Ui7n8/Nc1HQj7kvKnMv3Riala8zqyHe4FWzrhHk0++0=
Subject key identifier:   28:5F:7E:48:2A:CD:C4:DE:75:BB:BB:61:7C:45:B6:14:4D:9B:95:84
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       45764F9116215F616B9E804BF74E962413561BEC
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sun 01 Jun 2025 13:36:06 +0000
ROA not before:           Sun 01 Jun 2025 13:31:06 +0000
ROA not after:            Sun 31 May 2026 13:36:06 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:76:4f:91:16:21:5f:61:6b:9e:80:4b:f7:4e:96:24:13:56:1b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun  1 13:31:06 2025 GMT
            Not After : May 31 13:36:06 2026 GMT
        Subject: CN=285F7E482ACDC4DE75BBBB617C45B6144D9B9584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:3d:3d:3a:88:49:93:fc:5d:e7:fc:48:40:
                    38:f9:6a:0f:26:3a:2b:98:42:dd:0f:73:69:99:23:
                    78:5f:0b:1f:7c:50:81:8a:dc:f1:25:d8:b6:a4:3b:
                    05:c6:0c:99:ce:6c:7a:b2:18:70:4c:a5:3a:9c:a6:
                    6f:ca:43:ea:d8:8f:cb:f8:63:41:74:ad:be:7d:1b:
                    ee:25:00:b4:83:81:6c:a9:8f:67:bd:83:4b:29:4b:
                    05:4d:2b:8f:6b:e3:41:b9:3d:ff:45:7b:fe:55:90:
                    f0:9e:2e:13:8d:90:48:64:34:0b:fb:95:b0:06:de:
                    fd:fe:6d:15:c6:0b:c2:b1:75:d1:99:38:be:bc:2d:
                    92:2b:b5:67:6a:bd:b6:94:9c:50:0d:81:14:cc:1c:
                    56:73:06:e3:5a:e3:cf:7f:6b:99:56:35:95:cf:38:
                    45:ac:c7:d2:3f:79:89:f2:ce:42:d4:3a:25:46:d4:
                    34:4b:53:7c:03:c9:59:6c:95:78:0c:a6:30:c5:10:
                    47:3c:61:22:57:19:20:ce:de:31:8c:4b:c6:ee:4c:
                    93:60:86:cc:3b:4f:22:23:aa:a8:d6:d8:18:23:b8:
                    9e:22:b9:1c:ce:4b:a3:68:2d:00:bc:cf:3c:39:53:
                    e1:b4:5a:d7:8a:24:74:e6:43:99:f0:a2:6a:b6:d3:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5F:7E:48:2A:CD:C4:DE:75:BB:BB:61:7C:45:B6:14:4D:9B:95:84
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:88:81:40:ff:3e:0f:f3:41:2c:2a:9b:e3:fb:7c:28:c3:4d:
         ca:1b:6c:e3:bc:c5:b7:a9:c8:4a:20:f0:d6:26:ea:5d:9d:4d:
         37:aa:c1:04:5d:ae:89:4a:fb:e2:57:f4:2a:fc:9e:a4:42:5d:
         89:5e:44:f3:87:bf:cc:7b:cb:59:85:e4:13:cd:01:66:30:ea:
         9c:5e:bd:c1:63:f3:0b:ed:b4:02:05:b5:4e:c6:aa:2c:13:35:
         b4:3a:d9:31:e0:fe:d9:28:d9:f8:41:1c:b3:72:91:3f:0b:4d:
         1c:34:60:b2:7e:7e:00:24:96:45:97:da:d2:de:46:1c:ef:77:
         5b:df:87:e4:fb:94:58:a4:3d:f4:95:6a:c5:a8:f9:19:41:f4:
         ce:74:74:16:8f:c2:ef:79:63:3b:22:a5:08:cd:c9:cd:ab:0d:
         35:a5:10:50:64:b3:ef:7f:88:d9:f6:a9:c8:4a:66:72:13:fd:
         ae:1a:22:3c:93:91:5e:c6:8b:0a:9b:82:d7:5f:42:6f:5f:92:
         d6:21:f1:c7:cf:3d:11:3d:8b:63:3d:2a:95:82:c6:b5:42:1b:
         9a:25:06:af:6f:d3:35:a5:58:66:3b:3f:b9:a3:9e:28:c4:86:
         61:00:38:d0:57:bf:78:c1:1f:94:80:71:b3:0f:2c:3a:7c:c1:
         22:1e:70:af
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIURXZPkRYhX2FrnoBL906WJBNWG+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3
MjY4ODlFQjAeFw0yNTA2MDExMzMxMDZaFw0yNjA1MzExMzM2MDZaMDMxMTAvBgNV
BAMTKDI4NUY3RTQ4MkFDREM0REU3NUJCQkI2MTdDNDVCNjE0NEQ5Qjk1ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxz09OohJk/xd5/xIQDj5ag8m
OiuYQt0Pc2mZI3hfCx98UIGK3PEl2LakOwXGDJnObHqyGHBMpTqcpm/KQ+rYj8v4
Y0F0rb59G+4lALSDgWypj2e9g0spSwVNK49r40G5Pf9Fe/5VkPCeLhONkEhkNAv7
lbAG3v3+bRXGC8KxddGZOL68LZIrtWdqvbaUnFANgRTMHFZzBuNa489/a5lWNZXP
OEWsx9I/eYnyzkLUOiVG1DRLU3wDyVlslXgMpjDFEEc8YSJXGSDO3jGMS8buTJNg
hsw7TyIjqqjW2BgjuJ4iuRzOS6NoLQC8zzw5U+G0WteKJHTmQ5nwomq204x5AgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUKF9+SCrNxN51u7thfEW2FE2blYQwHwYDVR0j
BBgwFoAUt15fNlJDDO+W4eC9Ft2sQHJoieswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzAvQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3MjY4ODlFQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0I3NUU1RjM2NTI0MzBD
RUY5NkUxRTBCRDE2RERBQzQwNzI2ODg5RUIuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm
Mi8wLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDMwMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM1MzEzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMAAwDQYJKoZIhvcN
AQELBQADggEBAEGIgUD/Pg/zQSwqm+P7fCjDTcobbOO8xbepyEog8NYm6l2dTTeq
wQRdrolK++JX9Cr8nqRCXYleRPOHv8x7y1mF5BPNAWYw6pxevcFj8wvttAIFtU7G
qiwTNbQ62THg/tko2fhBHLNykT8LTRw0YLJ+fgAklkWX2tLeRhzvd1vfh+T7lFik
PfSVasWo+RlB9M50dBaPwu95YzsipQjNyc2rDTWlEFBks+9/iNn2qchKZnIT/a4a
IjyTkV7GiwqbgtdfQm9fktYh8cfPPRE9i2M9KpWCxrVCG5olBq9v0zWlWGY7P7mj
nijEhmEAONBXv3jBH5SAcbMPLDp8wSIecK8=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:47 2025 by rpki-client