Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa
File:                     326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (raw, json)
Hash identifier:          C78X6b1wtQ+o+3B3NsMWXv/5g/eOSLda7nmIBsZCFi4=
Subject key identifier:   17:F5:77:23:C9:19:2A:7F:BC:B5:1F:2B:9A:16:21:63:97:F5:ED:7E
Certificate issuer:       /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial:       25B8BC7575C98F4AA8A8D24B7E0CC546BAFDAD44
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa
Signing time:             Sat 06 Jun 2026 15:36:36 +0000
ROA not before:           Sat 06 Jun 2026 15:31:36 +0000
ROA not after:            Sat 05 Jun 2027 15:36:36 +0000
asID:                     200179
IP address blocks:        2a0a:6040:4900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b8:bc:75:75:c9:8f:4a:a8:a8:d2:4b:7e:0c:c5:46:ba:fd:ad:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
        Validity
            Not Before: Jun  6 15:31:36 2026 GMT
            Not After : Jun  5 15:36:36 2027 GMT
        Subject: CN=17F57723C9192A7FBCB51F2B9A16216397F5ED7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:44:cc:9e:56:88:ca:a4:66:9e:41:a0:51:
                    fc:24:a9:5a:f6:1c:70:13:2a:d3:1d:c9:1c:24:1c:
                    6d:26:34:5a:c5:ca:90:cf:e4:e0:47:64:d4:77:28:
                    4a:ec:e7:c9:73:d4:98:b2:7e:62:78:85:76:b6:1f:
                    5a:4f:c4:3a:b9:11:4c:20:ff:89:36:80:0a:64:1e:
                    83:0a:cc:59:5d:dd:85:77:b7:c0:bc:8d:5f:be:4f:
                    53:56:da:be:f8:49:45:67:0f:78:75:8e:e2:4c:19:
                    1f:c8:e4:e1:6b:32:64:49:0a:a9:ce:1e:a3:a9:a3:
                    1e:e7:a4:b2:68:61:1a:54:9d:4a:f9:1b:a8:0c:f0:
                    68:0e:9d:30:66:2d:3f:86:70:4f:b8:f6:0e:53:15:
                    dc:29:1a:90:42:59:ad:16:eb:4b:62:94:23:b3:b7:
                    9d:c5:88:85:bd:26:c7:d5:79:36:39:d9:36:e0:79:
                    34:ad:f4:f5:a6:77:33:bc:f0:72:d0:88:a5:8f:bd:
                    a7:c7:60:80:c0:08:d0:8b:12:6d:02:68:00:ed:19:
                    50:a7:ee:6b:86:2c:f6:12:21:b2:72:82:bf:e4:a3:
                    b0:d3:62:6d:df:c6:b7:4d:e5:42:a1:b9:9e:86:c2:
                    04:98:4d:43:0a:82:18:3f:8b:c4:5e:23:ce:6f:3e:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F5:77:23:C9:19:2A:7F:BC:B5:1F:2B:9A:16:21:63:97:F5:ED:7E
            X509v3 Authority Key Identifier:
                keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:68:ae:ee:9c:07:cd:cb:41:8c:80:86:5b:32:3d:16:35:a8:
         5f:0b:b5:68:c1:4e:69:e8:2f:fb:33:2f:4e:2e:df:99:0d:5f:
         b2:de:c2:83:f1:b4:3e:e3:5e:2c:7c:62:26:05:3e:cc:93:57:
         95:c7:f3:e1:69:22:19:8d:9a:53:53:cf:fb:4d:27:fd:6c:0c:
         76:b2:d9:94:3a:da:12:ea:ef:05:86:ad:4a:25:b6:bb:c6:3a:
         1a:74:d0:45:03:bc:49:e9:35:ec:7a:14:a8:19:e2:c5:50:c5:
         c0:40:e3:2e:0d:85:ed:15:2e:0e:7d:bf:bd:e4:f7:b8:ab:19:
         3f:c3:2f:0e:c5:04:34:95:d8:9c:96:a7:18:e8:af:33:55:45:
         74:3a:bb:84:b0:77:3d:1c:31:42:6f:cd:43:50:b1:2b:4b:42:
         e0:ee:46:5a:5b:7d:ea:aa:3f:65:f4:37:74:2a:d1:ec:b7:c6:
         9c:33:82:13:e6:f8:07:3f:f8:7f:7f:4b:9a:9e:59:58:79:1a:
         40:6a:73:64:a0:ef:64:9d:07:3d:cb:c8:e9:e1:82:d5:77:b0:
         f5:e4:4c:8b:65:30:80:d7:1b:ec:d7:49:d6:0d:7b:36:68:2a:
         d7:48:36:12:61:c8:16:bb:9a:77:e6:aa:5b:8c:03:8b:a4:6b:
         78:0d:80:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:07 2026 by rpki-client