Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          Zej5k6azfqZdpRgzIVoziRVVqBAFYW5Z82wumsiKQRI=
Subject key identifier:   02:78:F3:FF:34:D5:20:96:2F:92:AB:EB:BC:14:90:39:19:FB:0B:42
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       73A462C8B5FB1072860460B8A1869DFA7ACA442C
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa
Signing time:             Fri 05 Jun 2026 11:06:50 +0000
ROA not before:           Fri 05 Jun 2026 11:01:50 +0000
ROA not after:            Fri 04 Jun 2027 11:06:50 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a4:62:c8:b5:fb:10:72:86:04:60:b8:a1:86:9d:fa:7a:ca:44:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jun  5 11:01:50 2026 GMT
            Not After : Jun  4 11:06:50 2027 GMT
        Subject: CN=0278F3FF34D520962F92ABEBBC14903919FB0B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:0d:df:67:3d:dc:d8:10:9b:5e:9d:88:32:
                    83:ab:c5:56:ba:38:08:1b:40:93:8d:de:ed:29:98:
                    9a:f9:08:7e:1f:d3:72:8b:f4:c4:4b:ab:9a:ac:16:
                    0e:ec:d8:e4:61:78:f6:6e:16:a3:d9:0d:11:b8:38:
                    d1:0c:19:12:78:47:85:e6:10:36:88:68:f5:b5:51:
                    9e:83:9c:c4:db:c2:df:30:0f:2a:85:17:8b:f1:c5:
                    5e:46:7d:4e:8b:06:8a:1e:e1:42:dd:19:a7:71:c2:
                    a2:39:8c:8a:c0:bd:dc:39:d8:2b:1d:8f:18:42:3a:
                    32:14:bf:73:9a:7b:03:6a:1a:b9:bb:11:b5:fd:8d:
                    08:cc:be:6e:61:ec:f2:d2:bf:d9:f4:d9:f0:aa:35:
                    88:0f:bd:82:9d:64:9e:b5:98:dc:04:a6:97:56:21:
                    76:24:f1:33:e9:34:7d:a3:db:b8:c7:e9:25:22:3d:
                    41:8b:ed:40:ca:5f:91:9c:9b:ed:6a:56:a1:49:f9:
                    05:6e:5d:6e:6d:c5:21:c7:39:56:04:89:be:ff:a0:
                    4e:53:35:04:ce:f8:cb:9f:a9:0e:c9:e8:b1:86:a3:
                    ef:75:03:1d:bd:be:33:65:f6:9f:51:b1:8e:cf:e9:
                    79:bc:54:ab:5b:47:21:67:4a:fe:4d:ea:65:dd:0f:
                    9d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:78:F3:FF:34:D5:20:96:2F:92:AB:EB:BC:14:90:39:19:FB:0B:42
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f7::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:99:37:7e:e0:61:7b:82:02:2d:9c:d4:6b:28:97:f4:d5:
         23:73:7a:09:00:46:85:ff:b4:e5:a6:84:0d:45:a3:ba:36:2d:
         4b:22:fc:39:25:af:21:da:6c:c7:8c:f2:db:e5:1b:90:58:f6:
         ab:08:7b:d2:08:bf:33:8f:04:97:f0:03:d3:b1:bf:47:5a:94:
         2f:f5:c1:8a:7d:30:a8:4e:df:f8:f3:ac:7f:d7:e2:c6:8b:6d:
         f8:79:3e:b1:d3:d2:97:89:ab:59:91:dc:72:1c:a8:77:0a:cc:
         b9:52:9b:2d:ce:02:9b:e2:9b:91:7a:af:ae:7b:38:04:4b:3c:
         68:0c:75:14:23:a9:45:72:a8:d5:a4:f9:e6:14:59:b3:ea:05:
         f3:1a:f6:32:da:fc:b4:95:4a:55:41:1d:56:f0:30:ed:88:ef:
         bf:78:0e:45:80:fe:a3:e6:90:90:33:dc:3d:52:a1:e8:a0:87:
         7a:5f:f5:b6:6e:ab:10:f8:6c:cf:a1:1a:9a:b4:35:b3:59:53:
         66:be:86:24:5e:0b:59:0d:84:ec:e6:1f:7a:1a:bc:93:05:eb:
         c3:bf:e6:a5:19:64:d3:ab:b9:5d:2c:c3:4b:42:26:81:db:31:
         0c:72:3d:20:c0:c9:5b:a3:fd:e5:90:e0:59:9b:84:8f:94:00:
         bf:93:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:58 2026 by rpki-client