Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa
File:                     326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier:          7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=
Subject key identifier:   3E:DF:C0:91:74:7C:43:7D:17:A1:93:C2:92:8B:40:B4:2E:6D:E6:94
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       3639E21C6B86C4E1509AE45B9B9B689734FDD115
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa
Signing time:             Fri 04 Jul 2025 19:57:42 +0000
ROA not before:           Fri 04 Jul 2025 19:52:42 +0000
ROA not after:            Fri 03 Jul 2026 19:57:42 +0000
asID:                     215087
IP address blocks:        2a06:9f81:30fa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:39:e2:1c:6b:86:c4:e1:50:9a:e4:5b:9b:9b:68:97:34:fd:d1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jul  4 19:52:42 2025 GMT
            Not After : Jul  3 19:57:42 2026 GMT
        Subject: CN=3EDFC091747C437D17A193C2928B40B42E6DE694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:da:57:ea:b3:8b:87:c3:d3:d7:2a:30:1c:
                    9a:7b:c0:9f:fb:55:fe:93:0c:7c:68:88:83:a4:5a:
                    d2:e1:90:15:63:52:36:2a:26:ff:71:cb:1c:73:2c:
                    66:57:0e:58:d9:f6:5b:cf:3c:1d:1e:12:72:95:a6:
                    95:c1:9e:18:1f:a7:38:e9:48:15:74:ef:3d:fa:2b:
                    c2:f1:6c:ee:e5:fb:4d:a8:d8:83:00:8c:fd:c0:e7:
                    7f:0b:39:95:6d:90:09:61:e3:87:43:49:47:de:e7:
                    0f:c8:27:b9:8d:44:99:54:4f:de:b2:ca:11:38:5c:
                    3c:68:90:9a:5d:6d:b2:db:33:3e:25:43:3b:ae:fb:
                    17:3c:b1:f4:d5:d5:e8:c5:33:ad:59:1a:71:fd:eb:
                    ac:22:58:d6:c6:2d:e0:29:57:31:4b:14:59:ae:d9:
                    75:0f:8a:a9:52:ae:cf:6d:b6:e4:ae:99:9c:8d:db:
                    b8:25:41:ce:2c:1f:1b:aa:50:fe:d4:46:38:bb:d3:
                    7b:f2:3d:27:3b:da:f7:d0:66:2a:4e:b9:32:02:80:
                    55:97:6d:fe:16:f6:70:9b:ca:ec:f5:38:26:d4:83:
                    c0:58:36:da:91:50:7d:70:cb:8d:1a:30:e2:11:4c:
                    ca:3f:fd:ee:1f:36:76:ce:bf:93:b9:c6:4a:3e:67:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DF:C0:91:74:7C:43:7D:17:A1:93:C2:92:8B:40:B4:2E:6D:E6:94
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:57:b8:2a:b5:b3:89:bd:fe:62:b9:5b:29:40:e3:b1:a4:
         f2:da:59:43:bd:f3:18:02:80:e6:6b:48:e0:5a:ec:78:0c:da:
         75:5d:59:de:89:f0:bd:a6:71:d2:83:eb:a1:6c:df:1b:91:2f:
         f3:c2:73:9a:70:35:aa:24:ef:1f:a4:94:94:ac:ec:54:18:d1:
         12:a1:41:4a:5b:f7:7c:12:8c:a3:da:24:94:89:50:5a:9d:0c:
         85:3e:3a:ef:d6:35:08:46:cf:a1:72:48:8b:ff:96:a5:8c:78:
         88:f8:d5:2e:89:56:94:38:e8:28:3b:1d:fb:45:eb:1a:7b:b5:
         9a:43:b2:32:0a:7d:35:e0:e2:3e:f6:f6:ed:19:29:dc:c3:f6:
         21:65:07:55:22:7c:67:78:e5:1c:20:f0:76:82:ad:b1:e0:a5:
         3c:7f:9f:5f:b2:84:a5:80:d6:ad:49:4c:e5:f4:74:d3:f2:c6:
         bc:3c:7e:41:f6:bf:a8:b0:0a:68:18:f7:cb:e1:42:47:df:bb:
         92:78:ba:f2:bc:c9:ba:dd:45:c0:29:a1:16:fa:81:d4:82:bc:
         03:ac:8c:23:bb:ea:42:5e:86:60:c6:a6:3d:c0:28:67:a1:ed:
         6f:ee:77:5d:e3:67:39:f0:22:e0:89:4a:ef:e8:ac:fb:c9:ae:
         67:37:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:50:51 2025 by rpki-client