Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa
File:                     326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          fSQ7YdRlteS6r3jLuTbMv0k2vNrvWLfDu5CDYStdZhY=
Subject key identifier:   2B:5F:EC:7B:DF:CF:EC:A1:00:8F:2D:4E:FD:0F:5F:92:96:92:58:48
Certificate issuer:       /CN=18299A2A773E023437644491950ACF588A4379CF
Certificate serial:       502AA084C2099D968461A39B85A811FFB5AF2304
Authority key identifier: 18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa
Signing time:             Sat 06 Jun 2026 15:53:12 +0000
ROA not before:           Sat 06 Jun 2026 15:48:12 +0000
ROA not after:            Sat 05 Jun 2027 15:53:12 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2a:a0:84:c2:09:9d:96:84:61:a3:9b:85:a8:11:ff:b5:af:23:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18299A2A773E023437644491950ACF588A4379CF
        Validity
            Not Before: Jun  6 15:48:12 2026 GMT
            Not After : Jun  5 15:53:12 2027 GMT
        Subject: CN=2B5FEC7BDFCFECA1008F2D4EFD0F5F9296925848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:ff:fe:11:7a:67:88:91:03:2c:86:fa:5d:
                    11:eb:e7:10:4f:57:aa:9d:0b:c3:f1:fa:58:61:b6:
                    c3:4b:9b:4e:c8:ba:54:4f:a3:c3:b9:a8:97:e3:46:
                    cb:b2:ce:39:ad:71:23:84:1c:0b:a8:35:22:2e:b6:
                    ee:8d:7b:63:63:73:7d:47:f0:a7:98:ed:97:ed:35:
                    1c:a9:8c:dd:ff:db:40:7e:e7:73:54:40:28:15:53:
                    cb:40:c5:84:f7:14:6a:74:84:32:dd:f0:b7:3e:46:
                    78:ad:e3:f5:1e:47:78:44:35:f2:34:db:a3:85:a0:
                    94:c7:63:e4:66:24:6c:bb:a9:4c:bd:a0:6a:d1:49:
                    74:a3:0e:a0:e7:4e:e6:67:3b:3a:94:9e:3b:e8:e6:
                    2d:36:c1:8f:d7:92:cc:a0:5a:b5:a7:ec:48:0a:d9:
                    ac:08:78:44:ca:5c:76:d6:0c:ab:29:a0:af:45:39:
                    0f:a6:f7:9d:f9:1b:20:35:47:40:80:8c:42:fd:e8:
                    8f:7a:a3:cc:81:75:93:81:80:4a:4c:a4:f0:4e:17:
                    43:8e:f1:3c:2f:44:90:8c:85:21:fb:88:bd:36:09:
                    39:60:34:4c:6d:42:31:7e:68:a8:7a:f7:19:ee:2a:
                    16:3d:4d:a5:5b:35:60:ae:81:28:8d:b6:c9:2d:cb:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5F:EC:7B:DF:CF:EC:A1:00:8F:2D:4E:FD:0F:5F:92:96:92:58:48
            X509v3 Authority Key Identifier:
                keyid:18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:74:8d:3c:9b:b4:b8:a7:d2:9c:bd:0f:e4:a4:62:1c:48:
         c4:01:16:b9:1d:31:86:c7:fb:98:ca:4c:07:7a:16:31:87:25:
         b3:06:c6:42:29:62:58:03:8c:96:5a:fd:7f:db:05:c2:da:91:
         ee:a5:00:c7:84:e6:d8:a4:9d:16:a0:45:1c:ed:df:a8:7e:49:
         ce:ec:0e:61:8a:bd:82:35:fe:3a:18:4c:d0:bc:36:51:a8:c9:
         11:47:66:ce:ec:90:b4:4e:85:39:b4:98:83:09:77:63:f9:09:
         f5:a9:03:7f:22:f9:ca:79:91:58:b4:6f:0c:15:d3:da:05:12:
         10:50:09:39:df:ff:de:4d:c7:0e:dc:09:f4:e5:e4:18:8b:2b:
         d2:fe:f1:46:2a:52:6e:1f:fd:c0:bf:b0:39:3f:40:15:31:a6:
         71:de:dc:9e:e6:24:b5:2f:00:06:6b:e2:19:7b:08:48:a3:66:
         aa:9d:bd:43:c4:c9:fb:01:c1:f5:e1:49:7a:15:9a:42:bd:7f:
         98:34:02:cd:f5:88:2e:b5:aa:27:b8:a6:f5:28:6d:52:ce:45:
         26:f2:b7:88:32:a5:f0:84:a6:e9:75:e9:5d:75:87:67:2d:90:
         3d:83:bf:03:93:a4:57:f0:d2:68:22:89:65:9a:8a:d5:7f:d8:
         9f:c4:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:33:23 2026 by rpki-client