Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa
File:                     326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier:          3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=
Subject key identifier:   F4:8D:2F:0C:BE:DD:22:E3:B7:7F:7F:D5:D2:68:E3:5D:5F:AE:C3:8C
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       4CC7C87E54B0EEFCAB5A46DBE49AC40BCDBA1FE4
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa
Signing time:             Fri 04 Jul 2025 19:57:32 +0000
ROA not before:           Fri 04 Jul 2025 19:52:32 +0000
ROA not after:            Fri 03 Jul 2026 19:57:32 +0000
asID:                     215087
IP address blocks:        2a06:9f81:30fb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c7:c8:7e:54:b0:ee:fc:ab:5a:46:db:e4:9a:c4:0b:cd:ba:1f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jul  4 19:52:32 2025 GMT
            Not After : Jul  3 19:57:32 2026 GMT
        Subject: CN=F48D2F0CBEDD22E3B77F7FD5D268E35D5FAEC38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:1a:fb:6b:f1:f8:0e:35:73:6f:e2:3d:41:
                    c1:a0:54:41:4b:4d:37:ab:c6:5b:e1:17:8d:51:f8:
                    41:e7:0f:82:09:fe:87:db:87:7f:36:a6:94:e7:6a:
                    8f:d9:28:3b:a9:2b:5f:70:dc:04:2f:6f:7a:29:eb:
                    ef:b2:fb:20:7a:7e:1d:34:a8:13:47:f9:26:2b:5d:
                    c7:a4:c1:39:a9:40:36:b3:be:88:41:85:c2:90:d8:
                    36:3b:09:4a:97:1f:34:af:49:3c:d4:60:8b:6a:6b:
                    c0:8f:3f:8d:ba:29:53:48:b9:04:da:8a:e2:5b:86:
                    d8:8a:bf:1c:09:4e:08:b5:f0:35:6e:7a:c7:4f:eb:
                    29:c9:f8:5c:a0:0e:51:f8:1f:d9:0b:f3:7e:b0:17:
                    98:55:9c:b3:f4:ce:a1:66:8b:50:c4:5c:36:48:b6:
                    6f:1a:63:4d:bb:0c:bf:be:b8:f9:a2:e9:6f:b5:ab:
                    7c:47:c8:d6:35:c3:ee:48:9f:42:b0:0f:1d:35:d4:
                    ee:85:ed:e3:a9:d4:0f:f7:07:52:0e:c0:79:1a:63:
                    72:8d:71:d9:01:1c:1d:7a:3a:5d:a0:bf:30:9b:67:
                    cc:00:7d:1b:1e:3f:27:3e:10:d5:f0:b6:7f:16:88:
                    1f:b6:72:45:c9:da:55:dc:84:47:04:1c:41:8b:00:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8D:2F:0C:BE:DD:22:E3:B7:7F:7F:D5:D2:68:E3:5D:5F:AE:C3:8C
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30fb::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:1e:8b:21:e2:7d:57:ea:f4:60:71:8d:5b:55:62:eb:c6:c1:
         24:f5:bd:3b:b9:d4:14:3d:c9:ef:2a:a8:15:60:f2:1c:35:1b:
         99:b2:4f:f3:c2:16:72:17:d3:0b:55:94:bf:da:1b:10:d1:d3:
         9f:24:2b:64:e8:77:c3:68:f3:c9:66:97:9e:2c:e6:85:7c:20:
         bf:1a:ca:20:45:e7:0d:a2:7a:11:9d:a3:eb:1a:7d:a2:4c:2a:
         69:7f:dc:48:10:09:58:b1:4a:48:37:1b:e2:98:1f:76:cb:5f:
         45:21:c1:e3:6d:c3:4c:4d:45:71:d5:18:74:85:b1:cb:a9:72:
         f3:a0:ae:5f:3e:a4:db:2a:b0:c4:93:08:12:57:aa:6c:05:ca:
         9f:a1:e5:81:ea:aa:48:14:d7:4f:a7:5b:27:32:2e:30:54:5d:
         4d:4c:c2:b2:7a:a8:a1:80:6c:9c:e2:52:35:7a:b5:a8:a0:71:
         21:c5:6d:e3:f3:52:f6:5f:d9:66:55:22:ee:02:ef:4a:ff:b8:
         06:0b:4f:cb:34:23:ca:4c:d8:a5:e9:36:3e:d7:28:05:02:b2:
         58:66:84:6b:fe:75:be:61:c4:49:ac:14:55:a4:e9:ad:8d:94:
         5b:e0:a2:94:c4:1c:11:db:e3:c6:3c:d4:0e:95:7d:8e:98:a2:
         eb:94:6d:1d
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUTMfIflSw7vyrWkbb5JrEC826H+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3
MTdDOTNDQzAeFw0yNTA3MDQxOTUyMzJaFw0yNjA3MDMxOTU3MzJaMDMxMTAvBgNV
BAMTKEY0OEQyRjBDQkVERDIyRTNCNzdGN0ZENUQyNjhFMzVENUZBRUMzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Bhr7a/H4DjVzb+I9QcGgVEFL
TTerxlvhF41R+EHnD4IJ/ofbh382ppTnao/ZKDupK19w3AQvb3op6++y+yB6fh00
qBNH+SYrXcekwTmpQDazvohBhcKQ2DY7CUqXHzSvSTzUYItqa8CPP426KVNIuQTa
iuJbhtiKvxwJTgi18DVuesdP6ynJ+FygDlH4H9kL836wF5hVnLP0zqFmi1DEXDZI
tm8aY027DL++uPmi6W+1q3xHyNY1w+5In0KwDx011O6F7eOp1A/3B1IOwHkaY3KN
cdkBHB16Ol2gvzCbZ8wAfRsePyc+ENXwtn8WiB+2ckXJ2lXchEcEHEGLAPhpAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU9I0vDL7dIuO3f3/V0mjjXV+uw4wwHwYDVR0j
BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1
RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm
Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDY2NjIzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMxMzUzMDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMPswDQYJKoZIhvcN
AQELBQADggEBABMeiyHifVfq9GBxjVtVYuvGwST1vTu51BQ9ye8qqBVg8hw1G5my
T/PCFnIX0wtVlL/aGxDR058kK2Tod8No88lml54s5oV8IL8ayiBF5w2iehGdo+sa
faJMKml/3EgQCVixSkg3G+KYH3bLX0UhweNtw0xNRXHVGHSFscupcvOgrl8+pNsq
sMSTCBJXqmwFyp+h5YHqqkgU10+nWycyLjBUXU1MwrJ6qKGAbJziUjV6taigcSHF
bePzUvZf2WZVIu4C70r/uAYLT8s0I8pM2KXpNj7XKAUCslhmhGv+db5hxEmsFFWk
6a2NlFvgopTEHBHb48Y81A6VfY6YouuUbR0=
-----END CERTIFICATE-----
Generated at Sat Jul 5 10:52:24 2025 by rpki-client