Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          kFYXSWocebH4DRkMnwyI1j7Y1rg7+GhMIG31TOi1MN8=
Subject key identifier:   F2:5E:5B:A0:F9:5E:71:C8:0B:78:EA:A5:3E:F3:F6:EC:88:14:68:28
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       056C7C52FE73473844024969DF25DCB2251B6665
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sun 30 Jun 2024 13:05:35 +0000
ROA not before:           Sun 30 Jun 2024 13:00:35 +0000
ROA not after:            Sun 29 Jun 2025 13:05:35 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6c:7c:52:fe:73:47:38:44:02:49:69:df:25:dc:b2:25:1b:66:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:35 2024 GMT
            Not After : Jun 29 13:05:35 2025 GMT
        Subject: CN=F25E5BA0F95E71C80B78EAA53EF3F6EC88146828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:20:d9:bc:8d:68:11:45:6d:ae:09:67:7e:
                    74:9b:e4:2c:03:88:ad:5e:82:06:aa:4d:f3:37:8f:
                    69:3e:bf:a9:91:e3:1e:c3:32:02:b4:9f:12:c5:94:
                    de:5d:54:12:10:fe:d5:9d:13:33:45:41:bd:9d:08:
                    8e:46:41:e6:47:6b:44:f9:7e:79:5f:2e:20:2b:d5:
                    0e:57:9a:e0:c6:be:4e:46:6a:1e:ab:9c:a7:e8:12:
                    81:e4:e0:aa:95:05:6c:b1:3c:65:52:43:16:13:c6:
                    82:7b:5a:a8:23:35:af:14:b8:d0:31:57:d4:33:ba:
                    aa:e0:ef:85:64:a2:8c:31:da:48:16:69:f8:6b:5c:
                    44:51:19:3f:8c:7b:7a:ae:b9:5a:c4:ea:11:e0:49:
                    3e:23:fc:1e:a4:d3:57:e5:af:d3:da:d2:3a:6d:f4:
                    e0:eb:a8:57:aa:2c:5c:fa:b9:2b:33:ee:78:58:be:
                    87:60:15:3d:5c:95:96:de:58:c1:25:51:3c:7f:6f:
                    b4:49:83:22:2f:2d:21:cf:ae:c2:d8:00:9a:d5:67:
                    95:42:c8:86:9e:9b:f1:31:79:8e:4a:6d:57:c3:e0:
                    8b:4a:b1:22:5f:1d:7c:76:a8:02:22:d4:d5:e6:d5:
                    2b:8f:5b:f4:cf:bc:b5:d8:57:ae:95:d5:69:d0:84:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:5B:A0:F9:5E:71:C8:0B:78:EA:A5:3E:F3:F6:EC:88:14:68:28
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3002::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:f4:94:73:65:00:dd:60:51:32:47:4a:cb:dd:1b:8e:39:aa:
         45:cb:5e:d4:69:09:0e:38:b3:6b:15:6b:5b:db:f4:2e:1e:87:
         60:5d:e7:3f:fc:c3:15:0c:98:f0:e2:3f:31:b3:ad:3b:b8:86:
         87:e6:92:43:f7:36:9a:44:f6:e7:5b:bc:4d:b2:4d:45:39:64:
         d1:7d:d9:ff:0b:e4:72:aa:ab:e8:15:13:fa:07:f0:b3:99:ee:
         53:a2:33:7c:55:64:b1:bf:ce:88:68:fe:41:3d:1e:5d:07:d8:
         c3:05:a8:b0:5f:cc:f6:e9:6b:75:36:60:1b:27:30:7b:e3:12:
         27:b9:b7:80:85:1c:1f:b0:4c:94:8e:f4:f0:de:22:a7:c1:55:
         bf:4d:25:e6:a3:e5:f4:43:a6:3e:c0:14:f6:93:e6:60:19:1c:
         62:7a:a0:1b:db:2d:c1:11:d8:cf:88:5b:3b:41:15:b2:b1:bd:
         a2:0b:b1:19:6f:04:d1:be:29:a3:3d:22:00:69:06:85:d8:2f:
         dc:1e:ed:1d:09:d4:f4:8f:be:36:ee:56:89:51:57:ef:6e:fa:
         cb:64:d6:46:68:e0:c1:cd:74:38:bc:65:a7:3a:d1:3c:30:cf:
         f5:e9:af:79:3c:22:bd:0b:cb:34:db:09:85:0c:aa:a6:6d:6d:
         7b:59:2c:14
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUBWx8Uv5zRzhEAklp3yXcsiUbZmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3
MjY4ODlFQjAeFw0yNDA2MzAxMzAwMzVaFw0yNTA2MjkxMzA1MzVaMDMxMTAvBgNV
BAMTKEYyNUU1QkEwRjk1RTcxQzgwQjc4RUFBNTNFRjNGNkVDODgxNDY4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrCDZvI1oEUVtrglnfnSb5CwD
iK1eggaqTfM3j2k+v6mR4x7DMgK0nxLFlN5dVBIQ/tWdEzNFQb2dCI5GQeZHa0T5
fnlfLiAr1Q5XmuDGvk5Gah6rnKfoEoHk4KqVBWyxPGVSQxYTxoJ7WqgjNa8UuNAx
V9Qzuqrg74Vkoowx2kgWafhrXERRGT+Me3quuVrE6hHgST4j/B6k01flr9Pa0jpt
9ODrqFeqLFz6uSsz7nhYvodgFT1clZbeWMElUTx/b7RJgyIvLSHPrsLYAJrVZ5VC
yIaem/ExeY5KbVfD4ItKsSJfHXx2qAIi1NXm1SuPW/TPvLXYV66V1WnQhAoZAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU8l5boPleccgLeOqlPvP27IgUaCgwHwYDVR0j
BBgwFoAUt15fNlJDDO+W4eC9Ft2sQHJoieswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzAvQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3MjY4ODlFQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0I3NUU1RjM2NTI0MzBD
RUY5NkUxRTBCRDE2RERBQzQwNzI2ODg5RUIuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm
Mi8wLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDMwMzIzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM1MzEzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMAIwDQYJKoZIhvcN
AQELBQADggEBAGb0lHNlAN1gUTJHSsvdG445qkXLXtRpCQ44s2sVa1vb9C4eh2Bd
5z/8wxUMmPDiPzGzrTu4hofmkkP3NppE9udbvE2yTUU5ZNF92f8L5HKqq+gVE/oH
8LOZ7lOiM3xVZLG/zoho/kE9Hl0H2MMFqLBfzPbpa3U2YBsnMHvjEie5t4CFHB+w
TJSO9PDeIqfBVb9NJeaj5fRDpj7AFPaT5mAZHGJ6oBvbLcER2M+IWztBFbKxvaIL
sRlvBNG+KaM9IgBpBoXYL9we7R0J1PSPvjbuVolRV+9u+stk1kZo4MHNdDi8Zac6
0Twwz/Xpr3k8Ir0LyzTbCYUMqqZtbXtZLBQ=
-----END CERTIFICATE-----
Generated at Thu Sep 19 10:53:22 2024 by rpki-client on console-fra.rpki-client.org