Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          zvBkVP8huYPlUCpkxdxfr3v4jaOxtHTBudAkimIEogE=
Subject key identifier:   DE:6F:18:F2:F7:92:11:06:D2:3A:81:0E:E9:BA:B4:04:1F:EB:54:5D
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       75A3851CD8E52BF279F97AF4141F546110EC0B1C
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sun 01 Jun 2025 13:36:10 +0000
ROA not before:           Sun 01 Jun 2025 13:31:10 +0000
ROA not after:            Sun 31 May 2026 13:36:10 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3031::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a3:85:1c:d8:e5:2b:f2:79:f9:7a:f4:14:1f:54:61:10:ec:0b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun  1 13:31:10 2025 GMT
            Not After : May 31 13:36:10 2026 GMT
        Subject: CN=DE6F18F2F7921106D23A810EE9BAB4041FEB545D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:87:fd:63:e2:66:ee:b7:27:77:2e:19:11:
                    3f:cf:5f:f7:01:ce:38:ae:c0:0f:45:ad:c4:5d:c4:
                    af:26:a6:44:fe:6e:e5:46:3b:da:c2:fd:14:d8:c6:
                    9b:44:ae:11:e3:7c:d7:6e:c2:28:07:fb:08:3f:65:
                    b2:23:8c:8e:8b:6b:e0:5e:18:8d:b3:d3:b2:b8:84:
                    f8:06:d9:71:28:94:47:73:43:21:00:c5:fb:28:e3:
                    96:8d:7e:ea:a0:5d:e5:5b:17:32:c9:18:1c:95:be:
                    40:a6:71:c1:84:ba:4e:29:04:36:70:db:29:90:c1:
                    c0:69:ee:57:f5:55:59:f4:bc:f8:09:9e:4f:a6:9a:
                    23:91:85:2e:48:ca:16:d5:70:0d:85:ab:f4:f3:dc:
                    97:2d:30:c0:74:6b:8f:65:b0:55:0a:7b:a5:a2:7c:
                    9f:60:2e:5f:3a:a2:36:09:56:8a:7e:cc:b4:f7:78:
                    c9:e8:36:5b:d6:05:fb:f6:42:aa:73:0a:ef:2b:35:
                    eb:d6:45:46:06:cc:57:13:9f:b9:80:a7:2a:e6:1e:
                    b6:45:df:e0:33:34:bc:7c:d3:fa:b1:d6:3e:21:37:
                    09:3b:60:c9:5c:5a:63:65:2f:c3:63:b9:8f:68:a0:
                    05:98:6b:90:6c:d3:3a:c7:04:7a:34:65:bf:e1:3e:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:18:F2:F7:92:11:06:D2:3A:81:0E:E9:BA:B4:04:1F:EB:54:5D
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3031::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:3f:8f:b1:28:b2:27:03:62:f2:d2:e0:2e:9f:9b:e4:c8:5d:
         be:f5:a0:83:46:9f:33:9b:f7:71:2b:85:a2:86:e6:e0:f9:51:
         7b:cc:8d:37:bc:84:3f:bf:d9:15:7e:5c:21:d3:6b:ed:9e:80:
         26:44:f2:1d:75:b1:1a:e1:1e:c5:ad:be:20:e9:1f:49:e1:b7:
         63:a7:05:3f:61:48:dc:76:2b:46:22:7b:c6:57:87:c6:d2:2f:
         31:0e:03:54:d7:07:3b:e6:05:c4:db:75:a1:f6:36:18:38:77:
         d3:e1:b3:f3:94:8e:dd:36:fd:1e:7e:43:df:f0:3b:14:b0:25:
         1b:46:05:d0:7c:fa:57:a4:d5:80:4f:e5:99:3b:98:35:ac:79:
         b5:45:bd:fe:e4:2e:8c:74:a2:65:5b:9e:1a:ac:45:9e:44:74:
         20:10:8d:e0:ed:81:63:ba:7d:ef:5c:04:83:02:1d:75:44:22:
         b5:76:58:e4:a6:87:03:44:db:eb:e0:1a:e9:29:d9:14:bc:2f:
         bc:a8:42:db:a8:09:3c:e0:88:c0:b2:a1:ee:db:1a:1b:9a:c8:
         db:d0:6e:2b:e9:c7:60:90:94:78:74:86:3b:c0:f7:c1:b8:97:
         ae:28:c4:7c:d8:b8:68:e1:ec:db:79:72:62:ba:cc:43:43:91:
         6e:40:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:20:11 2025 by rpki-client