Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
File:                     326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier:          xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=
Subject key identifier:   99:A8:5D:C0:69:52:B8:43:3D:02:6C:39:6E:FA:F9:84:E4:D0:53:B4
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       78AC92186C1BD108227C9AA3AE8FA489B053A48D
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa
Signing time:             Fri 04 Jul 2025 19:57:31 +0000
ROA not before:           Fri 04 Jul 2025 19:52:31 +0000
ROA not after:            Fri 03 Jul 2026 19:57:31 +0000
asID:                     215087
IP address blocks:        2a06:9f81:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 20:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ac:92:18:6c:1b:d1:08:22:7c:9a:a3:ae:8f:a4:89:b0:53:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jul  4 19:52:31 2025 GMT
            Not After : Jul  3 19:57:31 2026 GMT
        Subject: CN=99A85DC06952B8433D026C396EFAF984E4D053B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:2a:e7:58:0f:a2:67:3d:32:fb:9b:33:61:
                    85:42:16:95:ca:97:b1:ac:41:79:81:6b:9e:a3:8c:
                    69:7b:b5:41:85:36:87:72:16:7a:15:98:2d:a1:04:
                    b3:2b:c8:9a:dd:65:0f:f5:b1:6a:67:c3:24:4d:60:
                    18:e3:cc:f7:9b:42:86:4a:7d:b0:90:83:32:99:9c:
                    fb:5a:83:cc:dc:6b:5d:13:07:83:b0:b6:7a:20:46:
                    0d:56:67:dc:13:18:82:03:5b:96:00:f2:ef:43:34:
                    ab:ec:cb:db:d4:38:55:c3:ad:4c:0f:e5:91:03:67:
                    a3:fa:3c:b7:75:8b:7f:cb:6a:06:79:1f:f7:fa:88:
                    63:43:27:96:b0:c6:70:7f:8a:78:77:f8:2d:76:d3:
                    04:0e:cf:b0:51:08:38:70:32:ae:ee:d1:b5:cf:17:
                    8c:bd:27:96:e7:fc:4b:c6:07:d2:36:39:a4:a7:4c:
                    5d:56:33:0b:4a:9f:6f:a3:70:b7:90:34:03:68:50:
                    4e:6a:18:3d:71:28:23:2e:3f:ba:13:e4:64:64:3d:
                    e3:00:eb:64:65:d2:3e:50:b5:ae:36:11:b2:82:31:
                    38:29:1e:d0:41:cb:4c:31:26:29:73:28:f3:36:32:
                    c0:21:f0:cf:89:b8:f2:bf:06:33:17:a6:92:a1:57:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:5D:C0:69:52:B8:43:3D:02:6C:39:6E:FA:F9:84:E4:D0:53:B4
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:b5:56:53:44:a7:c6:71:5b:d5:d7:64:c3:32:0d:4c:7e:a5:
         ae:5e:e6:c2:e9:ae:62:73:50:84:2f:ec:f2:9c:eb:e9:91:84:
         67:e3:1f:54:f1:a3:0b:7f:04:76:89:60:c2:ef:42:31:d8:6e:
         6e:d5:a5:b7:56:b1:30:a1:69:7a:39:31:d4:5e:f2:08:aa:aa:
         0c:ad:dc:c5:fb:97:0a:99:f1:f8:57:d5:f7:40:02:5d:7a:5f:
         79:bb:7d:da:70:6d:52:8f:7b:45:d0:98:16:97:06:c2:37:37:
         67:5a:71:4e:2f:e6:fe:3f:00:c2:c0:c9:51:53:51:e3:de:02:
         41:62:90:87:0a:0b:ce:a3:be:58:99:c5:2e:9b:4f:f5:79:38:
         de:2c:8e:66:c1:3b:9a:bb:98:8e:82:12:a2:eb:04:62:af:4e:
         cc:72:82:88:76:cf:84:f3:57:51:11:f7:92:a9:9f:1d:c6:e4:
         d5:d9:a4:06:ab:fa:45:a0:7d:12:16:2f:8e:fb:f2:9e:4f:de:
         cb:6d:43:15:15:21:f1:2f:95:36:58:dd:b9:b4:3b:a5:ed:7e:
         65:f8:11:cf:52:b3:3b:e1:d0:da:06:d3:eb:e7:d5:24:be:b0:
         ad:75:4f:89:83:12:58:3a:c9:c6:b5:49:70:7b:ad:71:f0:2c:
         1f:81:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:59:23 2025 by rpki-client