Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa
File:                     326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          AW4mcbESDJWQsaMAYnGVK/G/ruSMMo7u46089bkx4Sc=
Subject key identifier:   46:40:26:9A:85:DA:43:29:19:8E:0D:0C:E2:C6:5F:68:F3:56:6A:3E
Certificate issuer:       /CN=18299A2A773E023437644491950ACF588A4379CF
Certificate serial:       755F883E96DF1131D43D21CCB5ED2E8B0CCBA861
Authority key identifier: 18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa
Signing time:             Sat 06 Jun 2026 15:53:12 +0000
ROA not before:           Sat 06 Jun 2026 15:48:12 +0000
ROA not after:            Sat 05 Jun 2027 15:53:12 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5f:88:3e:96:df:11:31:d4:3d:21:cc:b5:ed:2e:8b:0c:cb:a8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18299A2A773E023437644491950ACF588A4379CF
        Validity
            Not Before: Jun  6 15:48:12 2026 GMT
            Not After : Jun  5 15:53:12 2027 GMT
        Subject: CN=4640269A85DA4329198E0D0CE2C65F68F3566A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:60:a9:43:dd:7d:d1:d5:47:4f:f9:c2:50:
                    46:cb:d1:b3:cd:d8:83:e6:23:58:3c:5e:41:cc:00:
                    52:e8:c2:04:db:50:bb:03:ce:0a:24:cb:e5:f7:f9:
                    8c:c5:27:7b:71:a5:36:b3:22:77:da:3b:f9:12:63:
                    5c:63:78:35:98:43:a6:24:db:31:d1:b4:25:9d:ad:
                    80:4e:23:0f:64:55:93:d9:2f:6a:48:38:59:fb:53:
                    88:89:c0:62:02:50:0c:6d:37:e0:24:a3:eb:c4:e5:
                    98:ae:a2:c1:cb:ba:7b:12:7d:ed:e9:91:32:96:7a:
                    2e:0b:00:a7:81:17:ac:ec:4f:ab:14:21:5f:63:b4:
                    31:fb:1e:98:de:2c:39:4a:14:2f:5b:1f:ad:3d:86:
                    3a:c2:c4:1a:b1:24:ac:08:12:c1:f4:69:25:4d:bb:
                    8b:af:75:77:d3:2a:75:55:76:bf:cf:34:bb:64:c3:
                    74:cc:7d:0a:cf:d7:d9:a7:7c:4a:aa:8e:f1:57:2c:
                    f0:19:57:2f:c7:2c:b3:4f:21:d8:42:64:67:d4:af:
                    79:11:5a:7c:a3:b5:0c:6a:78:9c:74:ae:dd:43:74:
                    8b:5e:c8:ba:61:a0:77:78:41:b0:2d:27:5d:c0:31:
                    b6:58:72:10:83:61:41:49:d9:e1:25:e0:14:a6:ef:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:26:9A:85:DA:43:29:19:8E:0D:0C:E2:C6:5F:68:F3:56:6A:3E
            X509v3 Authority Key Identifier:
                keyid:18:29:9A:2A:77:3E:02:34:37:64:44:91:95:0A:CF:58:8A:43:79:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/18299A2A773E023437644491950ACF588A4379CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/18299A2A773E023437644491950ACF588A4379CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/3/326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d02::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:1e:1c:f1:72:41:9c:70:f8:17:c3:45:e0:93:30:6c:fb:
         ff:a9:71:a9:ec:08:56:68:ee:aa:6f:67:bf:ee:18:46:74:03:
         27:6f:2c:18:21:19:e8:73:3b:03:7d:8d:57:e0:2d:c4:9a:5a:
         64:09:e1:29:9a:f3:7d:03:fc:21:9b:91:a4:71:88:76:83:9b:
         5c:1f:03:b9:78:fd:ac:b7:91:d2:e5:cb:2b:46:ac:34:8c:30:
         23:e3:cb:39:86:64:f7:ab:9e:08:73:1a:3f:12:6e:54:71:82:
         b4:d0:5b:d5:b9:53:f7:66:21:c3:fb:98:91:18:24:31:b3:09:
         e0:f6:a4:cd:fb:d3:4c:c9:b8:c6:8b:3c:86:d8:9b:e4:fe:70:
         50:21:5a:99:b0:60:28:f6:72:6c:c0:b1:af:5e:f7:c6:1b:6f:
         37:d7:e1:44:12:16:64:7d:75:31:1a:7c:a9:7b:e9:a7:6d:cd:
         bc:43:84:c9:8c:d9:da:91:31:c5:4c:a7:22:14:90:13:44:8b:
         be:ee:95:e3:13:71:56:24:85:e7:0f:f6:75:08:27:57:f8:ed:
         89:40:73:cc:b2:57:8b:2f:7c:45:6e:99:c4:9e:68:76:27:0f:
         3e:ca:a6:92:d1:32:c1:09:61:7a:65:de:f1:0f:80:03:01:44:
         2f:51:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:51:34 2026 by rpki-client