Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
File:                     326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          gotlPq13MIgn9CpWrSq139KCagvKTA63f16ENY1QYXI=
Subject key identifier:   19:DB:D4:E4:5B:CE:5C:42:A9:BB:76:9F:E4:72:B5:98:4D:12:BA:57
Certificate issuer:       /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial:       22145BD60F3BD4A31B5E7AD9BD537E8B1C775B08
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Fri 05 Jun 2026 22:39:22 +0000
ROA not before:           Fri 05 Jun 2026 22:34:22 +0000
ROA not after:            Fri 04 Jun 2027 22:39:22 +0000
asID:                     152368
IP address blocks:        2a0a:6040:4400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:14:5b:d6:0f:3b:d4:a3:1b:5e:7a:d9:bd:53:7e:8b:1c:77:5b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
        Validity
            Not Before: Jun  5 22:34:22 2026 GMT
            Not After : Jun  4 22:39:22 2027 GMT
        Subject: CN=19DBD4E45BCE5C42A9BB769FE472B5984D12BA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:66:30:ec:dc:91:3e:73:af:b9:24:4e:43:
                    53:a7:aa:a9:a4:7b:ed:69:de:f3:21:bc:9e:10:ab:
                    c4:b4:fd:82:db:58:37:ce:18:3b:19:2d:25:b7:8a:
                    ba:65:b0:c5:cb:5b:c8:1c:04:f5:a2:17:48:23:3e:
                    62:35:01:c9:da:b3:f7:31:39:29:d1:3d:ef:3e:53:
                    05:a7:f5:08:83:6d:71:55:8d:7e:35:88:3d:cc:7a:
                    59:6c:75:bc:fa:b5:0a:0a:fe:1c:84:c6:4a:00:bd:
                    d8:22:25:d3:3c:4b:bd:ca:fb:94:0c:0e:af:eb:0c:
                    11:9a:8f:44:7b:93:5e:17:18:87:37:f2:91:e9:be:
                    06:ab:85:27:5e:d0:e7:93:aa:6a:0b:4e:92:f2:ad:
                    af:e6:d8:84:8e:5b:8c:b1:53:ee:ec:f6:50:c1:4e:
                    33:c3:29:9c:99:3e:b0:dd:b8:23:13:58:8f:d5:2c:
                    5d:8f:65:02:ae:87:8f:ab:57:47:b0:5c:7d:21:a9:
                    cf:e0:2b:a8:29:73:b9:24:7e:ff:51:70:17:6a:a3:
                    47:75:c1:88:da:35:8c:b4:c1:17:b6:bb:e4:fd:53:
                    19:a2:f7:8b:09:e9:85:11:45:13:b2:a2:b7:f1:9b:
                    50:b5:b0:a0:6b:f6:f7:cc:07:35:63:cf:f9:7b:bd:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DB:D4:E4:5B:CE:5C:42:A9:BB:76:9F:E4:72:B5:98:4D:12:BA:57
            X509v3 Authority Key Identifier:
                keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4400::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:f5:ed:a4:55:2f:d0:41:2c:3f:70:47:a2:9b:62:d5:a8:
         3f:d7:f5:6b:e2:96:b7:38:3c:24:6b:db:5f:b6:2b:bb:30:f0:
         de:da:2a:d1:b1:12:76:18:cc:f5:8a:9c:79:b7:f1:1c:9e:de:
         31:a1:31:95:06:83:e1:77:41:a2:f6:41:8d:47:3a:5b:fe:92:
         ce:d0:16:07:f1:20:db:05:c1:b3:6c:fb:1f:dd:d8:71:f3:cd:
         36:14:ee:64:19:e1:f5:db:df:24:a5:a7:1d:cc:b0:dd:b4:88:
         3a:78:6a:97:db:b0:73:09:fa:ee:77:86:15:30:a8:19:18:a5:
         6d:3c:38:d6:bd:17:18:52:4b:79:07:ee:53:34:a4:bf:c0:80:
         81:87:67:49:40:66:82:a6:61:87:84:37:57:38:15:42:bf:af:
         ad:d9:98:3d:31:a1:a7:7e:9b:24:c3:06:35:87:0c:da:08:6f:
         01:1c:f2:8f:86:0e:b8:e3:b0:94:86:4e:40:a3:3f:c1:7d:c5:
         c3:58:02:e5:4f:e0:87:5a:5d:3c:a5:20:b0:a2:0f:d4:52:69:
         1c:2f:f4:12:2d:4a:39:e6:3c:96:10:e9:99:d3:78:43:4d:2d:
         15:fe:8d:87:33:d1:5c:5b:49:58:0a:a6:26:87:aa:9b:15:5a:
         cc:8f:70:9d
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUIhRb1g871KMbXnrZvVN+ixx3WwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJF
MEIyRjhEODAeFw0yNjA2MDUyMjM0MjJaFw0yNzA2MDQyMjM5MjJaMDMxMTAvBgNV
BAMTKDE5REJENEU0NUJDRTVDNDJBOUJCNzY5RkU0NzJCNTk4NEQxMkJBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQ2Yw7NyRPnOvuSROQ1Onqqmk
e+1p3vMhvJ4Qq8S0/YLbWDfOGDsZLSW3irplsMXLW8gcBPWiF0gjPmI1Acnas/cx
OSnRPe8+UwWn9QiDbXFVjX41iD3Mellsdbz6tQoK/hyExkoAvdgiJdM8S73K+5QM
Dq/rDBGaj0R7k14XGIc38pHpvgarhSde0OeTqmoLTpLyra/m2ISOW4yxU+7s9lDB
TjPDKZyZPrDduCMTWI/VLF2PZQKuh4+rV0ewXH0hqc/gK6gpc7kkfv9RcBdqo0d1
wYjaNYy0wRe2u+T9Uxmi94sJ6YURRROyorfxm1C1sKBr9vfMBzVjz/l7vfQdAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUGdvU5FvOXEKpu3af5HK1mE0SulcwHwYDVR0j
BBgwFoAUaYbcgoEsR9oUmUuObnJ7cuCy+NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzkvNjk4NkRDODI4MTJDNDdEQTE0OTk0QjhFNkU3MjdCNzJFMEIyRjhEOC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzY5ODZEQzgyODEyQzQ3
REExNDk5NEI4RTZFNzI3QjcyRTBCMkY4RDguY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhj
NC85LzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQzNDMwMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM1MzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBARAAwDQYJKoZIhvcN
AQELBQADggEBAF0v9e2kVS/QQSw/cEeim2LVqD/X9Wvilrc4PCRr21+2K7sw8N7a
KtGxEnYYzPWKnHm38Rye3jGhMZUGg+F3QaL2QY1HOlv+ks7QFgfxINsFwbNs+x/d
2HHzzTYU7mQZ4fXb3ySlpx3MsN20iDp4apfbsHMJ+u53hhUwqBkYpW08ONa9FxhS
S3kH7lM0pL/AgIGHZ0lAZoKmYYeEN1c4FUK/r63ZmD0xoad+myTDBjWHDNoIbwEc
8o+GDrjjsJSGTkCjP8F9xcNYAuVP4IdaXTylILCiD9RSaRwv9BItSjnmPJYQ6ZnT
eENNLRX+jYcz0VxbSVgKpiaHqpsVWsyPcJ0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:48:24 2026 by rpki-client