Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
File:                     326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier:          a5lbCtC1T7r8px42GLZMFSD/ikoTQWKCh4uSToBDGZw=
Subject key identifier:   4B:F0:CC:42:4E:B6:0F:A2:AE:A1:A5:7D:4B:46:1D:DD:10:54:5A:AE
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       24CEC16DA1EDC803FCFBDDF575078DC7C67B7C7C
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
Signing time:             Sun 01 Jun 2025 13:36:07 +0000
ROA not before:           Sun 01 Jun 2025 13:31:07 +0000
ROA not after:            Sun 31 May 2026 13:36:07 +0000
asID:                     215087
IP address blocks:        2a06:9f81:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ce:c1:6d:a1:ed:c8:03:fc:fb:dd:f5:75:07:8d:c7:c6:7b:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun  1 13:31:07 2025 GMT
            Not After : May 31 13:36:07 2026 GMT
        Subject: CN=4BF0CC424EB60FA2AEA1A57D4B461DDD10545AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:e3:97:18:63:fe:c9:9f:9c:2d:d2:be:b5:
                    f2:94:38:7a:61:9d:0e:57:f6:a8:03:87:5b:87:a7:
                    ac:90:18:9e:ba:81:a9:d5:43:9d:d3:be:8f:87:8e:
                    61:9c:d5:04:2c:12:2f:a4:e1:07:dc:b3:42:78:d4:
                    c1:ee:f0:68:7f:51:70:9c:0d:63:b3:cf:bb:55:67:
                    8a:bb:ba:d5:c1:17:31:cc:82:97:57:dd:3c:d2:5f:
                    8a:5f:bb:25:5e:c6:aa:5f:1c:bf:87:f3:f7:89:c5:
                    66:41:92:a4:95:1d:8c:26:1a:bc:e3:aa:4a:af:a6:
                    80:8d:25:67:09:df:71:89:f9:62:c2:fc:90:cb:73:
                    7c:ea:28:52:74:84:33:0f:58:f9:6b:0d:af:26:8a:
                    d8:e2:ce:3d:3a:ac:d4:76:3b:04:bf:36:47:20:f0:
                    80:c3:ca:29:01:35:6c:84:86:00:7f:f3:fe:82:87:
                    3c:a0:10:7c:cb:33:fe:16:2b:8a:9e:86:82:d2:4a:
                    5c:0e:24:e4:ce:6c:e3:f7:e9:ed:cd:c5:3b:6a:7f:
                    7b:5a:ef:bf:55:4d:56:80:65:12:35:95:53:a2:90:
                    0f:f0:62:34:51:af:45:ae:e8:c9:c3:8a:80:b2:37:
                    b3:83:0b:6a:43:e7:78:31:11:c8:e5:9d:18:b9:93:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F0:CC:42:4E:B6:0F:A2:AE:A1:A5:7D:4B:46:1D:DD:10:54:5A:AE
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:1f:d1:7e:d0:b6:bc:c5:02:0e:8c:f3:69:7c:a8:59:f4:9f:
         17:a5:1b:cd:3c:27:49:d2:b6:96:1f:25:2a:aa:bb:b1:8d:a5:
         51:fe:b6:09:25:66:60:9a:77:35:de:39:1a:76:a9:d1:fb:63:
         7b:88:25:ae:62:aa:6e:6b:64:92:e1:1d:98:01:1c:9d:6c:74:
         63:3a:ef:b7:34:11:43:e3:88:7d:9b:f0:4f:a5:f9:12:70:f7:
         98:ce:5b:85:b4:30:fa:b1:e6:fc:4f:0a:3f:b5:ea:df:8b:29:
         aa:71:3f:99:41:68:8a:e2:ed:37:15:46:c2:e9:97:de:a5:12:
         d7:40:6b:16:51:4f:49:8f:61:84:b3:4e:bc:98:b6:c4:d8:5d:
         cf:bb:02:91:4b:b1:59:3c:62:a6:92:74:ba:d6:3f:59:f3:62:
         96:a7:97:78:92:09:42:ce:96:ff:f6:03:8c:7d:58:05:4f:7f:
         75:1c:fc:fc:8f:92:71:01:d5:9d:ef:de:0d:ad:f6:9f:8e:2e:
         ac:5e:79:f9:77:26:15:75:8a:10:50:46:bf:8b:40:82:e1:e4:
         54:f3:9a:33:23:36:4c:7f:ba:cc:1d:dd:25:42:69:8d:45:7e:
         81:97:83:93:e3:4c:98:03:69:3b:7c:aa:65:a4:70:b6:cf:7d:
         f8:eb:46:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:47:09 2025 by rpki-client