Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa
File:                     326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (raw, json)
Hash identifier:          Z56So/SucnY7gPFXl/vIBeo0fdzrYh66Z52M8rAJo6s=
Subject key identifier:   90:B4:D9:D2:9F:80:29:00:BB:49:24:E2:7B:FE:7F:7E:7E:18:A2:EE
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       72A0473B19CF36559A80D3FC654BBDC6EA3A3778
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa
Signing time:             Fri 05 Jun 2026 20:46:07 +0000
ROA not before:           Fri 05 Jun 2026 20:41:07 +0000
ROA not after:            Fri 04 Jun 2027 20:46:07 +0000
asID:                     214765
IP address blocks:        2a06:9f81:3040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a0:47:3b:19:cf:36:55:9a:80:d3:fc:65:4b:bd:c6:ea:3a:37:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jun  5 20:41:07 2026 GMT
            Not After : Jun  4 20:46:07 2027 GMT
        Subject: CN=90B4D9D29F802900BB4924E27BFE7F7E7E18A2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:a0:9b:cd:6b:f1:fb:5e:70:78:98:f1:96:
                    81:37:cc:ab:62:59:ab:5b:da:31:98:11:05:f8:9d:
                    28:49:7a:8b:d3:6a:c0:c1:e7:7a:d2:f4:29:16:27:
                    40:98:57:c7:15:22:03:d7:ef:8c:d3:34:e6:cb:0c:
                    e9:48:b8:f2:f3:f1:47:69:41:9b:6e:97:99:bf:97:
                    04:e7:0d:12:68:39:ad:02:2d:fc:c3:ac:5b:30:16:
                    5e:28:57:4c:c8:f4:2d:8e:d2:05:68:9e:85:b7:88:
                    88:52:51:ce:9c:ac:ad:f6:48:80:0e:e9:3b:29:3e:
                    9c:75:08:7a:a3:39:d4:98:6c:6d:03:47:c2:cf:07:
                    db:5d:25:aa:f9:8e:4d:19:ba:4e:b9:c7:63:74:50:
                    78:9b:e8:15:4f:b7:c9:19:6e:cf:a3:b3:98:4b:19:
                    58:d3:61:86:45:26:5a:25:80:4b:ef:a1:a8:bd:cf:
                    9a:b7:2a:9b:10:72:2d:4a:2e:7c:05:ee:ce:99:6b:
                    3e:c5:f9:95:2d:77:79:f5:30:58:f6:3b:f3:2f:d9:
                    19:f9:f6:13:2f:31:08:71:56:b0:c4:3b:c5:8a:7f:
                    48:c5:96:3f:4b:86:55:5b:b5:72:78:58:98:b7:7b:
                    64:ad:9c:d0:82:38:ed:df:ab:a9:9f:f3:ea:19:98:
                    d3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B4:D9:D2:9F:80:29:00:BB:49:24:E2:7B:FE:7F:7E:7E:18:A2:EE
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3040::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:7a:5d:29:2f:c0:7b:b8:0b:8e:04:6e:74:b4:a7:04:97:4e:
         33:1f:7c:20:95:6e:d0:de:75:88:3a:8f:33:ce:4f:3b:cf:4b:
         c6:a7:c3:44:82:35:0f:0e:0a:5e:a7:82:92:86:c7:79:ce:88:
         ab:de:d5:cb:d7:a0:95:ae:84:2d:b0:36:4c:17:66:25:5a:7e:
         b1:d9:8d:56:0d:96:9e:df:d1:2c:a4:84:bc:31:31:25:74:6d:
         4c:57:fa:9c:cc:0e:5d:b6:f5:75:2c:81:e3:12:33:27:00:b1:
         07:99:ef:4b:d1:a2:c7:a5:c0:e0:63:ba:ca:b6:7c:68:aa:89:
         21:7a:4f:21:76:e5:14:bc:82:37:42:b7:ee:12:a0:6c:ab:91:
         b0:2f:c8:ec:84:2e:5d:fc:3d:0f:b2:76:d2:20:2c:3f:f2:1e:
         bb:2d:25:7e:66:ee:a5:3d:0f:15:d1:c1:dd:03:f7:e3:b1:7c:
         55:28:a6:55:1f:52:10:7d:51:17:e2:87:19:66:9f:41:7d:b6:
         65:41:41:4b:89:a9:54:f6:ae:a4:72:fc:09:9a:3a:61:bb:21:
         34:ef:0c:b5:40:17:e7:4b:12:b6:53:06:94:28:2e:60:96:f9:
         36:9f:2f:4d:4f:d5:26:f3:51:f0:de:ea:ca:b6:17:69:ac:7a:
         fd:84:a7:58
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUcqBHOxnPNlWagNP8ZUu9xuo6N3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3
MTdDOTNDQzAeFw0yNjA2MDUyMDQxMDdaFw0yNzA2MDQyMDQ2MDdaMDMxMTAvBgNV
BAMTKDkwQjREOUQyOUY4MDI5MDBCQjQ5MjRFMjdCRkU3RjdFN0UxOEEyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmaCbzWvx+15weJjxloE3zKti
Watb2jGYEQX4nShJeovTasDB53rS9CkWJ0CYV8cVIgPX74zTNObLDOlIuPLz8Udp
QZtul5m/lwTnDRJoOa0CLfzDrFswFl4oV0zI9C2O0gVonoW3iIhSUc6crK32SIAO
6TspPpx1CHqjOdSYbG0DR8LPB9tdJar5jk0Zuk65x2N0UHib6BVPt8kZbs+js5hL
GVjTYYZFJlolgEvvoai9z5q3KpsQci1KLnwF7s6Zaz7F+ZUtd3n1MFj2O/Mv2Rn5
9hMvMQhxVrDEO8WKf0jFlj9LhlVbtXJ4WJi3e2StnNCCOO3fq6mf8+oZmNORAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUkLTZ0p+AKQC7SSTie/5/fn4You4wHwYDVR0j
BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1
RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm
Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDM0MzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMjMxMzQzNzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMEAwDQYJKoZIhvcN
AQELBQADggEBAER6XSkvwHu4C44EbnS0pwSXTjMffCCVbtDedYg6jzPOTzvPS8an
w0SCNQ8OCl6ngpKGx3nOiKve1cvXoJWuhC2wNkwXZiVafrHZjVYNlp7f0SykhLwx
MSV0bUxX+pzMDl229XUsgeMSMycAsQeZ70vRoselwOBjusq2fGiqiSF6TyF25RS8
gjdCt+4SoGyrkbAvyOyELl38PQ+ydtIgLD/yHrstJX5m7qU9DxXRwd0D9+OxfFUo
plUfUhB9URfihxlmn0F9tmVBQUuJqVT2rqRy/AmaOmG7ITTvDLVAF+dLErZTBpQo
LmCW+TafL01P1SbzUfDe6sq2F2msev2Ep1g=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:50:59 2026 by rpki-client