Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          SQcZzPdUhQwRd9NETIOd79YvN3Uirwhis2+moBQBhao=
Subject key identifier:   0D:B1:70:88:6F:8B:15:A1:D8:73:45:1C:40:9C:95:5B:50:E5:10:5F
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       34AA0C46ADFF0208E91577E71A4D2AB0AAD7C126
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Fri 01 Dec 2023 03:39:32 +0000
ROA not before:           Fri 01 Dec 2023 03:34:32 +0000
ROA not after:            Fri 29 Nov 2024 03:39:32 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba75::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 19:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:aa:0c:46:ad:ff:02:08:e9:15:77:e7:1a:4d:2a:b0:aa:d7:c1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Dec  1 03:34:32 2023 GMT
            Not After : Nov 29 03:39:32 2024 GMT
        Subject: CN=0DB170886F8B15A1D873451C409C955B50E5105F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:6c:22:7c:18:d4:bf:69:a4:f6:d4:75:a9:
                    d8:f6:60:a8:30:6f:dc:35:fd:cb:bd:c0:ce:87:19:
                    bd:7e:88:5f:65:3b:ac:69:aa:c4:f4:2a:c6:d5:bb:
                    39:95:13:fa:3c:7f:ff:d4:2d:ad:a1:be:8b:53:f3:
                    c4:85:c1:c5:cb:cc:fe:8a:05:c3:29:98:d9:92:ac:
                    b4:61:63:6a:c8:2d:b5:19:c2:33:e1:6a:2d:eb:76:
                    43:45:85:65:b2:e1:ce:8d:06:a2:68:9f:2c:2b:15:
                    d9:31:6c:15:9b:00:b9:88:2a:a6:37:46:a1:40:ce:
                    28:4d:45:39:23:c4:aa:bb:9b:7f:2a:a0:87:92:86:
                    d2:b0:0f:6c:6b:fb:37:c8:b7:e6:2f:fa:16:5e:28:
                    d0:eb:d8:fc:b3:66:90:58:be:ec:e8:7d:4c:44:4d:
                    d5:ff:61:e2:0d:dc:87:44:b8:95:be:08:6c:83:c3:
                    45:2d:84:5b:0e:c7:8d:7e:66:c4:15:6e:d0:17:e0:
                    17:54:10:c7:fc:36:e6:62:3f:e4:03:31:94:27:38:
                    50:78:29:d7:26:e9:3b:14:a5:5a:02:49:13:cc:81:
                    16:f4:66:b4:b8:0a:1c:ab:72:12:21:f3:2c:2a:1b:
                    26:d1:fb:68:3d:4e:8d:67:08:e8:53:a6:13:5a:a2:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B1:70:88:6F:8B:15:A1:D8:73:45:1C:40:9C:95:5B:50:E5:10:5F
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba75::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:ab:41:09:92:5a:ab:6e:5c:0d:29:6f:2d:a1:df:44:21:81:
         08:d4:6c:95:eb:db:a7:76:da:58:6a:dc:21:23:fb:9e:6f:86:
         01:96:63:93:b7:91:20:96:22:15:88:15:8a:da:0c:08:86:9d:
         3a:8e:22:1e:58:1d:e6:e8:47:3a:d9:5b:25:e4:04:5c:1b:82:
         b8:f9:13:de:9d:06:e7:a5:24:a7:43:34:56:08:a5:64:11:da:
         fb:5f:95:00:8d:d2:c8:48:07:07:9b:68:89:40:4d:a3:d9:67:
         ba:0e:d2:1b:59:1f:b0:c1:48:21:b4:3f:aa:d5:0e:37:4c:6d:
         c1:5d:3d:24:aa:6f:78:e3:93:97:b8:f4:39:b2:c4:3c:2c:c1:
         f0:1d:13:40:eb:21:0a:3c:ae:fb:68:90:27:a2:df:19:ce:41:
         51:77:75:de:f6:2e:e3:5d:7d:5e:04:b6:32:20:55:7e:6e:f7:
         ab:28:e1:75:65:ba:c8:cc:ca:b3:aa:09:7b:f5:b5:64:21:ec:
         27:07:47:b2:ac:a8:ed:a6:34:83:bd:36:66:25:67:b2:ea:2e:
         22:ac:b1:c8:9a:d7:b4:38:72:f2:79:e5:da:df:5d:b0:4f:c2:
         34:da:22:1c:0a:64:88:57:85:a0:68:a2:c8:62:33:d1:6d:91:
         5c:be:f9:1c
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUNKoMRq3/AgjpFXfnGk0qsKrXwSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0
MTQ2MUU3RjAeFw0yMzEyMDEwMzM0MzJaFw0yNDExMjkwMzM5MzJaMDMxMTAvBgNV
BAMTKDBEQjE3MDg4NkY4QjE1QTFEODczNDUxQzQwOUM5NTVCNTBFNTEwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjEmwifBjUv2mk9tR1qdj2YKgw
b9w1/cu9wM6HGb1+iF9lO6xpqsT0KsbVuzmVE/o8f//ULa2hvotT88SFwcXLzP6K
BcMpmNmSrLRhY2rILbUZwjPhai3rdkNFhWWy4c6NBqJonywrFdkxbBWbALmIKqY3
RqFAzihNRTkjxKq7m38qoIeShtKwD2xr+zfIt+Yv+hZeKNDr2PyzZpBYvuzofUxE
TdX/YeIN3IdEuJW+CGyDw0UthFsOx41+ZsQVbtAX4BdUEMf8NuZiP+QDMZQnOFB4
Kdcm6TsUpVoCSRPMgRb0ZrS4ChyrchIh8ywqGybR+2g9To1nCOhTphNaopoxAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUDbFwiG+LFaHYc0UcQJyVW1DlEF8wHwYDVR0j
BBgwFoAUdWVgxblgIizoGvR6i3WOF0FGHn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzEvNzU2NTYwQzVCOTYwMjIyQ0U4MUFGNDdBOEI3NThFMTc0MTQ2MUU3Ri5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzc1NjU2MEM1Qjk2MDIy
MkNFODFBRjQ3QThCNzU4RTE3NDE0NjFFN0YuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBl
OC8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTM3MzUzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAunUwDQYJKoZIhvcN
AQELBQADggEBAGerQQmSWqtuXA0pby2h30QhgQjUbJXr26d22lhq3CEj+55vhgGW
Y5O3kSCWIhWIFYraDAiGnTqOIh5YHeboRzrZWyXkBFwbgrj5E96dBuelJKdDNFYI
pWQR2vtflQCN0shIBwebaIlATaPZZ7oO0htZH7DBSCG0P6rVDjdMbcFdPSSqb3jj
k5e49DmyxDwswfAdE0DrIQo8rvtokCei3xnOQVF3dd72LuNdfV4EtjIgVX5u96so
4XVlusjMyrOqCXv1tWQh7CcHR7KsqO2mNIO9NmYlZ7LqLiKsscia17Q4cvJ55drf
XbBPwjTaIhwKZIhXhaBooshiM9FtkVy++Rw=
-----END CERTIFICATE-----
Generated at Tue Jun 18 06:45:20 2024 by rpki-client on console-ams.rpki-client.org