Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa
File:                     326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          w09/q37paAxT0xu6nJk+zKeBfyB3gsrZA5YOOkkxGkk=
Subject key identifier:   3B:8A:9D:E5:74:25:9F:E4:1D:1F:6B:8F:5E:B4:91:8A:50:C5:00:C5
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       6B051AA618727CEB693EE543EE31127438024239
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa
Signing time:             Sat 06 Jun 2026 08:19:46 +0000
ROA not before:           Sat 06 Jun 2026 08:14:46 +0000
ROA not after:            Sat 05 Jun 2027 08:19:46 +0000
asID:                     203069
IP address blocks:        2a0a:6040:3f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:05:1a:a6:18:72:7c:eb:69:3e:e5:43:ee:31:12:74:38:02:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Jun  6 08:14:46 2026 GMT
            Not After : Jun  5 08:19:46 2027 GMT
        Subject: CN=3B8A9DE574259FE41D1F6B8F5EB4918A50C500C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:d6:b5:d0:d9:e2:21:d0:1a:64:eb:ba:a6:
                    b4:55:54:49:d9:5d:a6:57:74:78:b1:5d:42:3a:26:
                    eb:97:b0:6f:17:8b:a0:c8:ac:4e:09:66:8a:b3:8f:
                    ff:33:33:89:cb:0b:60:45:50:d6:e1:58:2d:99:49:
                    f9:a0:e1:5c:35:f7:1c:ec:9b:35:09:08:e1:0a:a1:
                    84:9c:6b:8e:ab:d4:84:dc:cf:7e:1b:6a:ab:92:3e:
                    0a:fd:ea:1a:64:59:ec:a9:82:9f:02:01:e3:84:09:
                    76:0d:c8:40:fd:84:47:33:69:e4:38:33:e1:91:2d:
                    dc:8a:41:6e:36:07:a2:2b:36:42:be:5c:7d:a8:34:
                    47:fb:a4:f9:36:f1:26:68:df:0c:dc:59:91:10:70:
                    8a:af:73:dd:c8:cd:8e:f6:4a:4c:44:66:0b:9f:61:
                    45:87:4c:a2:c7:cb:01:69:2a:92:19:8a:8c:87:f8:
                    6e:81:4c:8c:3c:fe:11:88:e5:4f:00:e6:fc:5c:be:
                    19:c7:cd:c6:e5:be:88:e9:41:3f:59:81:aa:e9:fd:
                    00:ca:ac:95:4d:8f:19:33:18:a6:23:e9:ea:ad:69:
                    eb:3e:f7:cb:5c:b0:52:40:d2:bb:92:c0:fa:0f:45:
                    6d:4b:f8:10:d8:5c:a3:54:e4:78:30:7b:95:3e:02:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8A:9D:E5:74:25:9F:E4:1D:1F:6B:8F:5E:B4:91:8A:50:C5:00:C5
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:1f:15:58:bf:b3:47:0f:c5:4d:67:79:74:f0:77:d7:44:8e:
         91:46:35:29:47:05:2c:80:95:35:2f:e6:ba:31:7b:b6:a1:17:
         9f:a7:24:50:80:3a:a9:bc:fd:ed:af:fc:7b:30:db:f5:2d:b0:
         3e:a7:43:2d:d0:b6:da:12:77:75:6e:3e:e4:49:0c:e5:9f:e7:
         47:ce:91:7a:e0:74:ee:17:00:d3:3f:3d:40:50:70:cb:5d:20:
         3a:83:ba:ac:31:92:33:a9:2f:90:f6:26:ff:f5:b4:65:c8:e3:
         dc:89:c8:14:35:1d:ae:f6:62:39:5d:99:97:b6:31:af:08:42:
         4a:4a:eb:2f:ae:fe:e7:12:6b:54:8d:e5:38:46:30:4a:5d:42:
         78:9f:85:42:21:c3:6a:96:75:35:e0:c9:82:dc:3e:13:01:fb:
         98:fc:ab:15:63:da:8e:25:ea:e5:e2:ee:3f:c0:7a:49:88:50:
         bf:47:b9:ac:b9:51:23:6e:e3:83:36:72:28:26:52:6b:0b:fc:
         ef:31:9b:38:24:9f:91:c1:8a:8b:03:61:61:2b:c6:fe:98:35:
         89:65:bf:74:da:0c:e7:0f:72:53:80:da:54:8a:77:21:39:f8:
         b6:cf:70:47:c1:ed:23:aa:3d:b5:b1:19:8f:63:34:7a:46:9e:
         79:95:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:59:00 2026 by rpki-client