Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa
File:                     326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (raw, json)
Hash identifier:          FpxciHRMcu92Dgeo/aZLzLKwNXy6EGrJgcdVPAlKEdg=
Subject key identifier:   3B:1D:17:4E:8D:C1:28:AA:D2:73:53:50:BB:CF:0C:8D:0A:62:F5:4D
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       08680A7BF26B3BCD2F331318501B951A09E2EA3F
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa
Signing time:             Sat 06 Jun 2026 08:19:40 +0000
ROA not before:           Sat 06 Jun 2026 08:14:40 +0000
ROA not after:            Sat 05 Jun 2027 08:19:40 +0000
asID:                     203069
IP address blocks:        2a0a:6040:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:68:0a:7b:f2:6b:3b:cd:2f:33:13:18:50:1b:95:1a:09:e2:ea:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Jun  6 08:14:40 2026 GMT
            Not After : Jun  5 08:19:40 2027 GMT
        Subject: CN=3B1D174E8DC128AAD2735350BBCF0C8D0A62F54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:73:d6:59:98:06:4e:61:ab:50:6c:dc:4f:
                    08:e9:3a:0d:2d:fe:9f:3a:78:ba:5c:33:49:ea:1d:
                    0b:a7:d2:ad:39:df:c1:cf:d1:93:6c:fa:a7:bb:3f:
                    c2:3f:af:dc:6f:29:f8:d1:7f:e5:f6:31:36:f3:57:
                    97:b7:28:ea:68:60:f6:af:a9:28:d4:53:7f:7b:37:
                    0c:68:64:aa:fd:98:00:02:02:9d:2b:ef:d8:10:b1:
                    ee:ad:f8:fd:30:91:9c:c7:e6:bb:3f:c4:a0:6f:16:
                    df:58:11:d5:70:08:93:60:40:9d:7a:0d:a0:ed:b8:
                    58:9b:5a:dd:a6:28:3a:aa:00:8a:27:17:0f:d9:57:
                    0e:c6:b0:56:19:92:a9:b6:f8:78:31:ba:90:f6:fe:
                    ba:c1:2d:30:ef:fb:8b:1f:4f:04:2f:ee:48:a1:b4:
                    28:9c:e1:64:95:b0:60:78:58:a5:03:ba:03:c7:8e:
                    10:71:b0:eb:5e:76:91:37:33:32:1b:79:0d:18:99:
                    0d:8d:3b:cc:dd:7a:7c:64:f6:9e:a2:71:a4:66:de:
                    5c:c9:f1:e5:d0:5b:15:50:4d:47:f9:15:4d:a4:89:
                    c2:30:01:57:89:36:ee:98:22:92:0a:5a:3e:ac:59:
                    4a:af:86:eb:e3:dd:8f:72:45:72:c9:a7:38:c0:49:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1D:17:4E:8D:C1:28:AA:D2:73:53:50:BB:CF:0C:8D:0A:62:F5:4D
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:77:53:97:c8:17:20:19:37:8b:81:1f:9a:45:e1:b0:78:9a:
         29:8e:c5:e8:25:d8:e8:7d:1e:40:5b:7b:e3:20:b2:eb:60:e6:
         09:ed:0f:bf:4f:57:33:f5:83:c9:ff:d0:6e:f9:50:fa:ee:b8:
         7b:64:41:21:72:27:39:c6:95:ce:1a:34:d3:76:d8:97:e2:3f:
         90:4a:8e:62:56:73:96:43:2c:37:20:88:45:71:d8:2c:6a:ea:
         d1:f1:81:22:e5:32:9a:65:f7:32:ff:52:4f:0c:db:7e:ad:29:
         64:ba:61:b8:0c:7b:d8:59:cb:02:d3:b6:4b:b4:eb:68:50:f4:
         f2:fe:74:22:fa:2e:b9:07:b7:76:f8:35:88:d4:36:aa:74:08:
         87:16:56:9b:04:0d:21:20:2e:f0:88:29:fe:ed:61:8c:ff:33:
         e1:e9:fd:06:76:a8:d8:68:fd:14:a6:8b:82:3a:a0:50:e5:3c:
         8d:b3:d9:8a:e3:e8:e8:85:2a:2b:a6:b7:1c:42:02:73:1b:76:
         30:c6:e6:77:4d:03:c9:5c:29:06:98:65:c5:e7:b4:2b:c0:c4:
         5e:2c:f1:05:dc:de:3d:c8:4c:5b:73:3e:9c:75:7e:b0:2d:d8:
         9b:85:df:ad:6b:4f:31:61:46:0e:34:21:f2:2c:29:18:c1:aa:
         6c:d7:d5:07
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUCGgKe/JrO80vMxMYUBuVGgni6j8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC
MDNFMEM1MTAeFw0yNjA2MDYwODE0NDBaFw0yNzA2MDUwODE5NDBaMDMxMTAvBgNV
BAMTKDNCMUQxNzRFOERDMTI4QUFEMjczNTM1MEJCQ0YwQzhEMEE2MkY1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT33PWWZgGTmGrUGzcTwjpOg0t
/p86eLpcM0nqHQun0q0538HP0ZNs+qe7P8I/r9xvKfjRf+X2MTbzV5e3KOpoYPav
qSjUU397NwxoZKr9mAACAp0r79gQse6t+P0wkZzH5rs/xKBvFt9YEdVwCJNgQJ16
DaDtuFibWt2mKDqqAIonFw/ZVw7GsFYZkqm2+HgxupD2/rrBLTDv+4sfTwQv7kih
tCic4WSVsGB4WKUDugPHjhBxsOtedpE3MzIbeQ0YmQ2NO8zdenxk9p6icaRm3lzJ
8eXQWxVQTUf5FU2kicIwAVeJNu6YIpIKWj6sWUqvhuvj3Y9yRXLJpzjASfg7AgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUOx0XTo3BKKrSc1NQu88MjQpi9U0wHwYDVR0j
BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy
YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx
LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp
ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1
RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgbgGCCsGAQUFBwELBIGr
MIGoMIGlBggrBgEFBQcwC4aBmHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEwLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzEzMTMwMzAzYTNhMmYzNDMwMmQz
NDMwMjAzZDNlMjAzMjMwMzMzMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAETANBgkqhkiG
9w0BAQsFAAOCAQEATHdTl8gXIBk3i4EfmkXhsHiaKY7F6CXY6H0eQFt74yCy62Dm
Ce0Pv09XM/WDyf/QbvlQ+u64e2RBIXInOcaVzho003bYl+I/kEqOYlZzlkMsNyCI
RXHYLGrq0fGBIuUymmX3Mv9STwzbfq0pZLphuAx72FnLAtO2S7TraFD08v50Ivou
uQe3dvg1iNQ2qnQIhxZWmwQNISAu8Igp/u1hjP8z4en9Bnao2Gj9FKaLgjqgUOU8
jbPZiuPo6IUqK6a3HEICcxt2MMbmd00DyVwpBphlxee0K8DEXizxBdzePchMW3M+
nHV+sC3Ym4XfrWtPMWFGDjQh8iwpGMGqbNfVBw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:25 2026 by rpki-client