Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          NL6EPb5wnDp44lr9FJxSfl2w41sMyn89zsl2NAJN1S8=
Subject key identifier:   D2:46:1C:D3:E9:47:C5:BE:13:6A:E3:8F:84:24:49:09:02:58:6C:16
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       6F05E382D5F065B1C22AC8A402844F274B953641
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Fri 05 Jun 2026 11:06:51 +0000
ROA not before:           Fri 05 Jun 2026 11:01:51 +0000
ROA not after:            Fri 04 Jun 2027 11:06:51 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:05:e3:82:d5:f0:65:b1:c2:2a:c8:a4:02:84:4f:27:4b:95:36:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jun  5 11:01:51 2026 GMT
            Not After : Jun  4 11:06:51 2027 GMT
        Subject: CN=D2461CD3E947C5BE136AE38F8424490902586C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:28:51:1f:74:a7:fe:1d:a5:b8:e7:36:1e:
                    af:85:19:ce:92:cf:ab:c8:bd:24:63:14:e2:44:91:
                    cf:a2:66:c0:24:26:a7:68:09:bf:e0:50:f1:55:03:
                    5c:bd:9f:1d:a3:ff:33:f4:bc:2a:e1:d8:3f:1e:57:
                    46:b5:ca:e6:58:60:cc:f7:83:ae:20:ae:07:88:5e:
                    48:49:54:d2:5c:7f:15:7d:1f:57:32:21:18:44:f4:
                    2f:c6:9d:e6:92:ba:19:33:32:1f:8a:8b:0a:0a:40:
                    33:77:0f:68:37:ae:e2:51:8c:f9:a2:be:4b:87:2d:
                    a5:de:8a:0d:8c:26:49:9a:fe:1b:b9:62:0f:6a:42:
                    96:66:f7:8c:47:9c:db:6b:e8:da:8f:ec:d7:70:15:
                    0e:23:17:8c:b7:8e:c9:12:6c:43:06:7d:da:e1:85:
                    52:99:2b:a7:75:30:2e:0c:17:6e:b2:76:eb:5c:63:
                    be:70:50:32:25:ba:fb:b3:41:b8:ef:88:00:55:2e:
                    72:d0:22:b9:f6:c3:78:86:92:c9:a7:ef:1a:68:fe:
                    15:95:e9:8d:4c:4d:24:34:5a:b3:01:41:f5:e9:1a:
                    64:32:ff:74:29:29:94:5a:97:35:12:0a:e8:9f:bc:
                    4f:98:be:f2:36:73:2f:cb:37:c6:4c:22:2e:4f:74:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:1C:D3:E9:47:C5:BE:13:6A:E3:8F:84:24:49:09:02:58:6C:16
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:aa:5a:28:51:cf:1a:46:09:3a:e0:6e:a2:e5:a3:28:21:
         2c:a3:3f:c4:91:aa:8b:38:6e:92:f6:b3:30:db:59:15:b8:2f:
         de:b6:eb:92:29:18:c6:f7:32:1a:c1:a1:ee:72:ee:66:52:ec:
         02:6f:78:a2:3d:89:c6:c2:15:fd:f1:f9:30:bb:d5:94:bb:fd:
         d0:ab:df:05:ec:41:39:96:5f:2a:e0:9e:d2:2a:df:1b:b3:24:
         4a:82:99:21:1d:2f:90:08:fc:f6:4b:4c:6d:1a:03:2b:0d:af:
         90:1e:50:e7:3a:bb:12:4d:d3:78:22:ea:3f:a6:2c:b3:d9:46:
         57:b6:fa:8d:09:25:fd:79:e4:1b:91:8e:b0:f7:76:57:66:45:
         e9:54:25:fa:88:dd:71:91:cb:2f:7d:80:34:5f:87:6b:17:ee:
         1c:f3:13:8c:7a:f0:d8:e6:87:4a:9b:a9:be:28:c8:e5:7d:fc:
         91:56:61:10:1b:b8:da:1a:c4:1f:26:14:f6:19:09:93:4a:3b:
         38:98:52:2b:fe:56:da:e1:38:95:d4:61:5f:72:c1:b6:74:37:
         b5:35:27:d6:f7:4c:e5:2b:67:24:c8:f1:00:d1:03:fd:aa:99:
         a1:1f:d6:3d:06:aa:2d:e4:4e:e7:5a:d8:0f:2e:9f:5a:21:67:
         2c:7e:49:bc
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUbwXjgtXwZbHCKsikAoRPJ0uVNkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE
QjgxMjA1NzAeFw0yNjA2MDUxMTAxNTFaFw0yNzA2MDQxMTA2NTFaMDMxMTAvBgNV
BAMTKEQyNDYxQ0QzRTk0N0M1QkUxMzZBRTM4Rjg0MjQ0OTA5MDI1ODZDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XihRH3Sn/h2luOc2Hq+FGc6S
z6vIvSRjFOJEkc+iZsAkJqdoCb/gUPFVA1y9nx2j/zP0vCrh2D8eV0a1yuZYYMz3
g64grgeIXkhJVNJcfxV9H1cyIRhE9C/GneaSuhkzMh+KiwoKQDN3D2g3ruJRjPmi
vkuHLaXeig2MJkma/hu5Yg9qQpZm94xHnNtr6NqP7NdwFQ4jF4y3jskSbEMGfdrh
hVKZK6d1MC4MF26ydutcY75wUDIluvuzQbjviABVLnLQIrn2w3iGksmn7xpo/hWV
6Y1MTSQ0WrMBQfXpGmQy/3QpKZRalzUSCuifvE+YvvI2cy/LN8ZMIi5PdGovAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQU0kYc0+lHxb4TauOPhCRJCQJYbBYwHwYDVR0j
BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1
Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz
OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzJhY2EzY2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNl
Ny8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjIzMTY2MzQzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMwMzAzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAsfQwDQYJKoZIhvcN
AQELBQADggEBAHLkqlooUc8aRgk64G6i5aMoISyjP8SRqos4bpL2szDbWRW4L962
65IpGMb3MhrBoe5y7mZS7AJveKI9icbCFf3x+TC71ZS7/dCr3wXsQTmWXyrgntIq
3xuzJEqCmSEdL5AI/PZLTG0aAysNr5AeUOc6uxJN03gi6j+mLLPZRle2+o0JJf15
5BuRjrD3dldmRelUJfqI3XGRyy99gDRfh2sX7hzzE4x68Njmh0qbqb4oyOV9/JFW
YRAbuNoaxB8mFPYZCZNKOziYUiv+VtrhOJXUYV9ywbZ0N7U1J9b3TOUrZyTI8QDR
A/2qmaEf1j0Gqi3kTuda2A8un1ohZyx+Sbw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:38:18 2026 by rpki-client