Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa
File:                     326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (raw, json)
Hash identifier:          ly9Co+vI6PV8fR7uh/In7tumWsB9IIQUcXqxPJgng60=
Subject key identifier:   1A:70:45:A8:0E:68:DA:99:7B:67:7C:BD:EF:EB:34:42:E5:36:30:29
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       3DB4FE93E6678E9C218E5C10CAB1D99CC85635F1
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa
Signing time:             Fri 05 Jun 2026 20:46:06 +0000
ROA not before:           Fri 05 Jun 2026 20:41:06 +0000
ROA not after:            Fri 04 Jun 2027 20:46:06 +0000
asID:                     394106
IP address blocks:        2a06:9f81:3041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b4:fe:93:e6:67:8e:9c:21:8e:5c:10:ca:b1:d9:9c:c8:56:35:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jun  5 20:41:06 2026 GMT
            Not After : Jun  4 20:46:06 2027 GMT
        Subject: CN=1A7045A80E68DA997B677CBDEFEB3442E5363029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:ca:f9:50:e8:3c:11:ef:a7:7d:e8:31:b7:
                    40:15:7b:64:58:5f:07:1f:4a:62:17:46:6d:4e:3a:
                    53:22:16:79:f2:b6:af:bd:55:cf:4d:81:aa:3c:86:
                    ba:cb:34:52:32:b4:94:b1:f6:48:64:47:c5:d9:21:
                    0f:cf:b2:1f:11:6b:4a:ee:70:30:65:fc:2f:eb:bd:
                    27:a0:f2:ec:72:ce:70:e0:aa:bb:67:c1:b0:9f:70:
                    cc:48:26:d7:60:4b:d4:c5:9d:59:76:64:0e:df:22:
                    34:da:dd:d1:1b:c2:c6:2e:bf:bd:16:be:b2:0b:b8:
                    50:71:50:1c:c5:e7:a3:68:7d:c6:7f:b1:99:fb:10:
                    46:57:ed:51:61:29:fd:99:52:c6:1e:dd:76:02:0d:
                    01:19:b3:81:2e:4b:11:4f:33:45:a0:8b:e4:cd:7a:
                    71:30:2f:43:c9:83:c7:a1:e5:d2:22:3b:fc:95:84:
                    1e:19:fa:e2:94:a9:b6:d5:00:6a:eb:37:19:b3:6e:
                    a4:7d:9d:c5:40:7e:5f:8e:34:b2:40:d0:de:81:d1:
                    f8:87:dd:30:64:2e:75:30:c5:63:0e:ae:74:7b:f3:
                    ac:68:e1:1a:3e:ed:3c:84:2e:d8:dc:ac:75:ea:ca:
                    ca:2f:42:c4:26:3e:c3:4b:e5:91:b4:b9:81:65:54:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:70:45:A8:0E:68:DA:99:7B:67:7C:BD:EF:EB:34:42:E5:36:30:29
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3041::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:b8:ce:fa:f4:d1:70:ff:0b:21:af:1e:a7:dc:76:47:5c:
         a7:52:44:4a:93:06:97:ef:47:59:49:8c:89:73:1c:71:e2:82:
         cc:a0:d4:33:20:4b:6c:f1:8d:91:c2:72:b7:8f:6c:0e:4d:8c:
         3c:82:71:5a:e0:4f:0a:b3:be:97:ef:d0:10:07:18:1b:0c:a6:
         df:b8:49:ea:f6:ed:f8:40:6c:18:27:ed:b2:b7:79:7a:4e:d6:
         9d:f1:25:c8:66:23:ab:8b:de:8b:a9:0e:b8:4a:05:85:ed:1c:
         b9:f0:e3:e1:13:f6:8e:9a:41:e9:c7:9d:06:e3:fd:dc:9c:9d:
         5c:cf:85:6e:30:7b:90:2a:7a:42:19:8c:ce:49:c4:90:0c:65:
         6a:3f:4d:d7:c1:8b:9e:44:ae:fe:54:17:0c:de:e3:dd:3c:b4:
         1b:54:90:3e:3f:a2:14:d7:5b:1c:9d:7e:2a:32:e3:6e:e5:27:
         80:89:3f:36:98:3b:9e:09:d6:8f:97:3a:84:62:3a:11:3f:4d:
         47:24:47:3a:13:75:45:4b:cc:2a:de:66:8e:8b:f0:be:51:3d:
         05:d9:23:1c:c8:3a:29:a2:46:49:11:43:57:ef:4b:0a:7f:05:
         84:83:5a:d0:2b:7d:ce:b7:2c:a0:81:e4:d9:a1:80:09:7b:72:
         11:41:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:28 2026 by rpki-client