Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa
File:                     326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (raw, json)
Hash identifier:          ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=
Subject key identifier:   06:F0:6D:6C:FC:88:01:C3:5B:3E:6B:1F:88:4D:23:32:09:CB:EE:61
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       591ACA9730E40A3A1A14118DEE8BB790617D24DC
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa
Signing time:             Fri 04 Jul 2025 19:57:36 +0000
ROA not before:           Fri 04 Jul 2025 19:52:36 +0000
ROA not after:            Fri 03 Jul 2026 19:57:36 +0000
asID:                     394106
IP address blocks:        2a06:9f81:3041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1a:ca:97:30:e4:0a:3a:1a:14:11:8d:ee:8b:b7:90:61:7d:24:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jul  4 19:52:36 2025 GMT
            Not After : Jul  3 19:57:36 2026 GMT
        Subject: CN=06F06D6CFC8801C35B3E6B1F884D233209CBEE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:1a:ff:1b:aa:ce:c4:92:a4:a2:8a:a5:99:
                    23:82:c0:b9:6d:f1:14:19:ab:6e:02:58:1f:57:ca:
                    c4:81:f2:07:eb:f7:f2:0f:75:7e:8a:7e:50:35:68:
                    6d:b2:15:2c:7e:86:b5:1f:4d:bc:d0:8b:3a:cd:92:
                    aa:dc:bf:08:33:b6:89:7c:fa:ea:1b:54:82:77:e3:
                    82:cf:78:46:5f:1a:f4:ab:0c:cb:6e:e1:da:bb:7a:
                    de:a8:ea:dc:f2:21:c6:c3:03:f0:8c:19:89:3a:8e:
                    ba:85:c8:bb:87:d6:b1:5a:fa:04:48:9e:51:a2:01:
                    bc:4f:38:56:f6:c3:ce:55:0c:e2:e2:94:66:5b:c2:
                    08:a9:24:04:7e:c0:2c:41:c2:07:44:07:e9:ac:3f:
                    eb:9f:20:1e:22:4e:32:2d:d0:a9:40:5f:84:34:63:
                    0d:47:a2:5b:ca:02:c5:d3:f5:09:8c:a9:4f:9d:f1:
                    e4:16:10:f3:74:13:bb:ad:25:ae:07:d9:a6:d9:1d:
                    51:ef:bd:13:be:08:a2:4f:89:51:36:97:ff:d0:30:
                    fa:63:85:42:18:23:8d:a8:c9:22:71:8a:5b:69:7a:
                    0e:70:32:1a:1d:7e:01:5a:97:fe:31:1a:07:74:b5:
                    b6:06:53:eb:f1:a1:3d:ae:50:0e:78:a7:b9:08:9f:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:6D:6C:FC:88:01:C3:5B:3E:6B:1F:88:4D:23:32:09:CB:EE:61
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3041::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:51:7c:11:39:f4:16:50:59:3a:a9:82:3f:05:1c:42:07:
         35:66:f2:13:b9:ca:27:af:41:b8:c8:ce:fc:25:4f:7b:87:50:
         1c:2f:ba:65:5d:06:be:53:0b:a7:fd:53:f8:bc:e4:6e:e6:8c:
         ed:65:79:80:c8:c5:ea:f5:e6:23:9a:45:15:3d:52:c5:37:67:
         f4:ee:b8:4a:96:63:72:25:81:41:b3:a3:00:52:a8:d9:36:4f:
         f3:67:82:43:cb:f2:54:74:ad:88:b5:3d:26:09:91:c8:87:74:
         21:05:e2:76:4a:9a:82:18:5b:85:d8:89:5c:f8:0c:d8:bf:96:
         51:a4:8b:c5:03:52:76:36:2b:2f:4d:3d:68:e3:c2:fc:80:51:
         4b:49:16:1e:c8:4d:ec:54:9f:c9:75:6e:b1:c5:68:7d:5e:f5:
         3c:6b:31:df:08:dd:3c:f8:3c:54:76:fe:a4:a5:be:a1:4b:f8:
         d2:88:ae:a7:b1:a3:97:97:4a:b8:a3:2b:3e:0b:ba:c4:4f:34:
         2b:6b:7b:d6:f5:26:c3:5e:77:21:a0:4c:7b:d1:2a:81:cc:20:
         77:05:7e:54:65:3f:62:b4:5f:f5:e4:59:ed:06:f9:d9:b2:ea:
         c6:28:9a:85:6a:5d:f3:e9:38:a3:3d:eb:25:70:ab:88:ba:a5:
         53:32:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:47:13 2025 by rpki-client