Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa
File:                     326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (raw, json)
Hash identifier:          fEubeCnsxgB87jcAHKsunB1TQ5JLbTqBKtlqWVjmt78=
Subject key identifier:   F5:2B:59:49:BB:BE:99:69:9D:98:F3:4C:7C:C0:7F:31:6D:66:85:59
Certificate issuer:       /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial:       77336F66B61BAF9D2EB670B5A9A75E8B9DE1B0EA
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa
Signing time:             Sat 06 Jun 2026 15:36:36 +0000
ROA not before:           Sat 06 Jun 2026 15:31:36 +0000
ROA not after:            Sat 05 Jun 2027 15:36:36 +0000
asID:                     200179
IP address blocks:        2a05:dfc1:9500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:33:6f:66:b6:1b:af:9d:2e:b6:70:b5:a9:a7:5e:8b:9d:e1:b0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
        Validity
            Not Before: Jun  6 15:31:36 2026 GMT
            Not After : Jun  5 15:36:36 2027 GMT
        Subject: CN=F52B5949BBBE99699D98F34C7CC07F316D668559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:ff:f5:6a:26:27:ad:ab:96:2d:ef:42:7f:
                    eb:7a:6c:3d:b2:ae:60:f7:2b:51:45:9d:86:e9:07:
                    75:14:fc:98:25:1a:66:39:03:a7:5d:99:22:49:a9:
                    2d:21:db:4e:8f:c3:b1:0b:26:6a:dd:45:3a:16:51:
                    74:4a:ec:02:97:29:7f:9c:76:c7:76:ef:c9:84:78:
                    a7:80:89:0a:70:c9:dd:93:64:d8:3c:93:d7:ab:80:
                    d2:08:21:8b:d0:19:e3:14:1c:6a:26:4a:f9:90:2b:
                    de:b5:0a:e6:a8:90:83:fd:80:31:8b:70:14:a0:7f:
                    e5:07:7b:b2:94:c8:5d:84:88:cc:54:13:2b:79:eb:
                    f5:d3:eb:88:b5:d3:12:6f:4e:40:12:1c:4e:ab:3b:
                    c5:ed:13:51:1e:73:57:c6:c0:11:57:9b:dd:8a:b6:
                    b5:dc:f2:d4:f5:05:a6:40:f0:f1:3e:35:a0:a8:b2:
                    e1:5b:1c:48:18:5c:d5:20:13:80:8e:a1:11:d2:16:
                    f0:bd:e0:e9:6b:96:4a:50:66:89:7d:26:c2:cb:77:
                    87:67:b3:23:e9:1d:5e:9a:5a:c5:75:ce:a9:d3:fc:
                    69:28:60:fb:3a:af:d7:b7:6c:68:84:a2:4e:ae:16:
                    3d:70:ae:de:a8:45:e9:fd:01:09:c2:44:87:a0:d9:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:59:49:BB:BE:99:69:9D:98:F3:4C:7C:C0:7F:31:6D:66:85:59
            X509v3 Authority Key Identifier:
                keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9500::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:23:1e:9b:23:df:02:46:32:3e:36:24:30:83:a0:bc:4a:a5:
         eb:b8:73:ec:2d:88:7c:07:e6:4a:58:13:ea:33:a7:ae:66:17:
         22:6b:b9:52:70:2b:12:91:6d:f7:94:ce:8d:80:bd:bf:54:40:
         ec:49:da:56:07:e2:5f:75:4a:45:b0:54:9b:c0:59:56:88:0f:
         6d:1d:fb:53:9a:fd:43:61:2b:a9:71:89:fa:f6:ef:1a:22:36:
         9a:74:b4:c2:04:fa:ca:d7:2e:bd:1e:13:f8:25:92:aa:58:85:
         f6:be:4d:81:4c:aa:7c:f6:ce:33:ca:9d:22:ec:03:3c:51:cf:
         11:dc:a0:76:6f:5c:68:79:e9:7a:d8:87:10:7f:5b:7b:bf:9f:
         1e:99:04:81:33:e5:81:5b:77:4b:d4:76:2d:0b:ff:35:b3:1a:
         c3:4e:6a:32:8e:82:a3:48:57:d4:f0:90:c0:16:76:4d:0b:9e:
         a6:99:a1:34:24:d5:61:41:7c:51:5e:8d:dd:c9:6c:89:4e:fd:
         d7:74:59:f1:db:c8:27:ed:ce:99:37:a7:6d:97:c4:c8:30:b0:
         eb:d4:b9:4e:40:f1:ed:9a:c6:af:77:63:63:33:9d:0c:5b:06:
         c8:4a:51:5f:7f:57:c6:63:8d:18:24:80:18:59:bf:ca:e8:b1:
         25:c5:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:39:27 2026 by rpki-client