Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          BQAJsIHDKp+WibSEzaYJlb2U3HhnlfWtftOClSXrGv8=
Subject key identifier:   76:CD:85:A3:70:05:9F:F1:CF:A8:C4:F0:6D:46:CC:5D:5D:CF:C3:BC
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       1F5A24FCC7A6129615F2942FF848A765DCAA8A67
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Fri 05 Jun 2026 11:06:51 +0000
ROA not before:           Fri 05 Jun 2026 11:01:51 +0000
ROA not after:            Fri 04 Jun 2027 11:06:51 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5a:24:fc:c7:a6:12:96:15:f2:94:2f:f8:48:a7:65:dc:aa:8a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jun  5 11:01:51 2026 GMT
            Not After : Jun  4 11:06:51 2027 GMT
        Subject: CN=76CD85A370059FF1CFA8C4F06D46CC5D5DCFC3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:ba:aa:23:82:b9:15:af:c5:7c:e9:7c:8e:
                    34:ab:b3:01:3f:4e:0b:c6:51:d9:5e:29:fd:ca:55:
                    ce:75:9a:fc:12:db:7f:79:47:85:e9:d5:48:93:85:
                    15:ed:80:85:c5:5a:bb:fc:53:25:6c:46:80:1e:da:
                    04:0e:6b:2d:f2:ec:32:e9:ff:28:1e:58:b0:df:eb:
                    d1:22:8d:bb:b5:d5:f5:92:92:2b:8f:19:ff:f1:72:
                    d7:4f:67:58:f1:24:43:7b:ee:54:71:c1:79:da:47:
                    aa:a1:39:3d:32:60:61:ea:9b:0f:1e:11:e6:0e:0d:
                    46:0d:b2:da:78:97:77:51:d6:eb:2d:c7:f9:78:6a:
                    c9:89:b8:19:00:90:fd:b0:93:27:0c:dc:2b:ce:51:
                    a4:da:fc:64:5d:e9:cb:5c:73:c4:00:e0:85:c6:9b:
                    01:a0:f8:ca:84:ba:8f:e8:dd:6e:a3:1f:c0:d8:91:
                    1c:22:f8:9b:01:a2:cf:6f:07:e1:f4:0f:32:46:63:
                    60:08:4c:25:27:17:b2:29:a5:6f:fc:d6:fa:1a:ac:
                    6c:ea:da:46:98:e5:95:3d:e0:d7:48:e6:a1:3a:9a:
                    88:a7:b7:79:ae:1e:b1:2a:f3:7d:fb:aa:b8:10:56:
                    34:cb:ca:c1:1d:bf:06:42:a5:0b:5f:8b:0a:33:72:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:85:A3:70:05:9F:F1:CF:A8:C4:F0:6D:46:CC:5D:5D:CF:C3:BC
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:a4:c6:21:cb:6f:c0:71:58:b7:6b:4d:26:40:c3:b3:6a:4c:
         bc:43:98:97:60:d2:d5:39:70:14:fd:ae:7b:f4:2c:6b:91:54:
         69:02:6e:73:18:60:d7:27:b7:3d:c9:96:9c:65:e9:61:7c:89:
         59:42:43:2e:a3:7d:68:5d:2b:84:86:f2:d5:80:13:be:fb:03:
         27:86:78:de:86:6a:6e:94:6e:a0:3a:60:1b:f1:26:ff:19:3f:
         00:cc:e4:69:f9:ff:31:e4:72:c6:bb:a3:90:f6:4c:d7:6e:3e:
         0d:14:4e:4e:47:46:41:be:70:1e:09:3b:72:0a:2b:27:d4:59:
         19:c9:be:fa:10:50:7d:61:33:2b:0e:47:0e:43:af:f1:78:43:
         76:d5:fb:86:0b:04:80:76:7b:7a:02:a7:25:af:41:e2:c9:2e:
         d3:cc:2a:02:4b:d4:64:70:b9:e0:ef:79:b9:60:11:88:5e:b5:
         cb:2a:49:69:64:cc:4c:68:b2:c2:2e:8b:94:54:05:df:6e:6c:
         ee:55:e0:91:fe:80:25:56:75:87:86:33:b1:50:9e:f7:ff:0f:
         2d:d4:ea:94:f9:fd:1b:50:db:6b:31:4c:a9:71:54:7e:af:30:
         61:fa:c2:1d:39:16:f3:5c:46:e9:b0:68:71:b1:18:3d:34:9a:
         28:65:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:17 2026 by rpki-client