Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=
Subject key identifier:   F2:99:E6:42:A3:B2:E4:EE:09:2F:50:9E:A2:EB:39:38:A4:62:AC:A5
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       664C3EC24EE595428C4018BBEFE1DB1BC3A928CA
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
Signing time:             Fri 05 Jun 2026 11:06:53 +0000
ROA not before:           Fri 05 Jun 2026 11:01:53 +0000
ROA not after:            Fri 04 Jun 2027 11:06:53 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4c:3e:c2:4e:e5:95:42:8c:40:18:bb:ef:e1:db:1b:c3:a9:28:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Jun  5 11:01:53 2026 GMT
            Not After : Jun  4 11:06:53 2027 GMT
        Subject: CN=F299E642A3B2E4EE092F509EA2EB3938A462ACA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:bc:80:61:e4:50:3e:06:d9:e9:57:af:d6:
                    62:56:59:8f:03:67:ea:b3:b2:17:81:fc:38:dd:6c:
                    74:96:42:3b:d3:87:8e:e6:e8:57:d8:7e:7e:d0:90:
                    2b:e6:57:ba:af:11:d2:4b:eb:a9:7e:dd:a7:07:1a:
                    e9:7e:da:d9:31:68:fe:1c:2b:99:af:ad:82:10:08:
                    73:cc:1e:00:61:e7:40:e2:db:02:1c:f5:6e:ef:cb:
                    57:fe:f3:12:fc:9b:27:67:72:9f:87:bd:52:09:52:
                    11:18:6c:68:5e:8c:3f:33:9b:ba:47:43:4d:93:ea:
                    7a:6d:b3:84:6f:bd:70:80:5a:46:67:8e:6f:6d:df:
                    71:6a:bb:84:ca:85:c9:a4:6e:0f:47:c2:7b:81:46:
                    3e:76:d5:05:0a:33:22:c2:2a:18:62:45:5c:66:79:
                    b9:6e:db:07:ec:41:ba:9b:e7:55:10:28:c0:72:9e:
                    1b:45:d0:53:c4:2b:2e:72:88:59:0a:32:ab:a1:63:
                    e4:e7:a5:87:47:e1:4d:d1:5b:ad:99:2f:63:14:22:
                    7c:fc:43:71:a8:24:9f:25:b4:5e:c2:48:8b:8f:8d:
                    0a:4f:63:07:90:26:46:0b:65:15:9b:99:ab:67:b9:
                    b1:3b:fc:8f:ef:89:11:fe:51:51:e2:ee:d6:f1:40:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:99:E6:42:A3:B2:E4:EE:09:2F:50:9E:A2:EB:39:38:A4:62:AC:A5
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:b6:13:5e:d3:d2:74:8d:f8:5b:21:d1:5b:c7:65:8c:b6:b3:
         9e:c8:98:e9:de:00:d5:a4:ea:27:c9:6f:6a:b9:4e:f9:6b:0e:
         de:cb:5a:c8:a2:f2:4f:f5:69:fa:d0:18:53:30:f0:70:5d:be:
         74:c2:2d:4b:3f:92:7a:45:61:2e:1f:bd:e1:45:b0:6e:7a:7a:
         d7:ad:00:3c:fb:7e:8c:91:af:fe:2e:79:2f:f7:f0:e1:89:56:
         3c:b2:10:dc:da:41:ff:e2:e6:12:83:64:90:79:a9:ed:87:cb:
         93:d0:d7:35:8c:be:e1:27:72:01:94:b0:e6:cf:05:cd:17:70:
         11:e2:61:f0:be:82:8e:04:fd:22:7e:5f:36:12:8b:09:e1:57:
         2d:3e:b7:70:0d:9e:4a:8d:af:2e:cf:d6:d3:3b:85:08:9d:39:
         3e:66:13:7d:9e:62:79:1c:e4:1f:12:a5:84:ac:c4:02:fd:65:
         2a:a0:63:ca:93:c0:68:37:c1:02:b8:bd:63:77:f7:a3:85:f1:
         6d:44:2f:27:96:08:b3:a3:39:1d:0c:e6:7f:42:23:e4:83:a5:
         36:86:02:5d:5b:08:fd:e3:7e:e2:7c:2d:9e:8c:ba:6a:da:0d:
         b2:e8:8a:ad:dc:35:3f:75:b2:8d:81:bb:d9:45:fd:3f:71:75:
         81:f5:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:03 2026 by rpki-client