Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa
File:                     326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (raw, json)
Hash identifier:          qdP0HRm4N8QhGlcJYvvaoAeplDO4ZyRJr8ineDX3Ogs=
Subject key identifier:   57:CC:EF:63:06:4A:77:DC:F8:B5:3A:DD:CB:A0:57:69:F7:72:E5:00
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       38B20DFF129BE36BCDF7C816E2A68A23D3AE34AC
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa
Signing time:             Fri 05 Jun 2026 20:46:16 +0000
ROA not before:           Fri 05 Jun 2026 20:41:16 +0000
ROA not after:            Fri 04 Jun 2027 20:46:16 +0000
asID:                     152671
IP address blocks:        2a06:9f81:3042::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b2:0d:ff:12:9b:e3:6b:cd:f7:c8:16:e2:a6:8a:23:d3:ae:34:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jun  5 20:41:16 2026 GMT
            Not After : Jun  4 20:46:16 2027 GMT
        Subject: CN=57CCEF63064A77DCF8B53ADDCBA05769F772E500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8f:54:be:3d:8d:27:43:56:07:05:97:9c:5c:
                    82:01:10:be:20:67:78:7c:e0:9b:c2:cb:99:e1:06:
                    0f:c7:37:17:69:f3:09:74:1f:29:1f:b9:16:58:c2:
                    69:ba:33:37:f9:03:74:e8:95:c0:9a:7f:ef:38:5f:
                    82:84:fd:9f:b9:b3:d7:8b:1c:a9:dc:e5:35:2b:22:
                    24:77:52:0c:74:27:c8:cd:e0:d6:fc:14:5a:b2:8e:
                    31:04:d0:3c:39:dc:9e:b8:66:d5:fb:27:c6:4c:b4:
                    cc:02:aa:a2:ff:e1:c2:17:19:76:2d:0e:94:8c:96:
                    88:02:5b:b9:80:5f:c6:27:bd:a5:db:9a:34:37:24:
                    b3:97:42:9e:f9:c7:70:ce:17:84:33:47:d8:df:f4:
                    18:bf:ce:b3:c3:ca:ae:8d:8d:39:63:f4:96:ff:89:
                    8e:0c:7e:69:78:73:48:eb:ef:38:ab:b2:64:f9:b6:
                    4f:59:5e:d6:47:4c:76:25:58:05:40:ef:53:79:13:
                    67:75:18:47:13:f9:a4:8e:53:1f:8c:73:02:31:7f:
                    a9:59:a4:9a:b7:71:44:86:da:a2:ae:15:52:c8:d5:
                    be:3c:99:11:94:fa:aa:14:ac:e3:61:ed:87:c6:bf:
                    cb:bf:1b:6d:94:c3:57:66:5e:b5:67:e8:9b:45:21:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CC:EF:63:06:4A:77:DC:F8:B5:3A:DD:CB:A0:57:69:F7:72:E5:00
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3042::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:87:67:6d:63:67:ac:1d:2a:36:f3:a2:13:62:5f:e0:5c:ac:
         b4:e4:b3:22:b0:aa:bf:0a:cd:72:51:f5:d5:00:2b:7c:bb:9c:
         68:29:6e:b7:ec:7f:5c:6f:d8:62:4e:1a:1c:50:f9:0d:5c:5f:
         8f:d4:58:a0:17:d6:db:dc:14:c5:87:2a:7b:e4:3b:0e:36:37:
         17:b4:b3:70:1d:8f:18:f7:21:71:49:15:3f:09:06:9b:cc:21:
         23:ef:71:d6:8f:01:f7:4f:5d:69:be:71:5b:12:f2:4e:6d:63:
         bc:df:92:02:9e:cc:25:4f:f9:fd:58:15:04:72:da:16:ee:05:
         35:2b:7d:b7:3d:e8:a9:6e:91:63:3a:cd:b6:ae:0a:28:d8:6f:
         7f:40:28:d6:12:01:50:18:22:54:23:5a:f2:e3:60:c6:86:44:
         e5:fe:a6:67:01:4a:4c:39:21:ed:e8:18:0d:02:d1:b7:3f:d2:
         b1:0c:db:75:f3:19:80:a4:62:36:d2:46:19:fb:92:96:f0:72:
         fa:b3:5a:c2:3f:ac:2e:32:8a:22:b7:3a:0a:be:9b:c3:a7:8f:
         d7:89:d1:f6:93:ad:d4:69:2e:2b:f7:4d:41:29:7d:27:bb:5c:
         fe:44:5a:03:08:56:c8:d2:68:8a:4e:19:b0:a6:1b:a7:10:38:
         2d:c2:fc:cc
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUOLIN/xKb42vN98gW4qaKI9OuNKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3
MTdDOTNDQzAeFw0yNjA2MDUyMDQxMTZaFw0yNzA2MDQyMDQ2MTZaMDMxMTAvBgNV
BAMTKDU3Q0NFRjYzMDY0QTc3RENGOEI1M0FERENCQTA1NzY5Rjc3MkU1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqj1S+PY0nQ1YHBZecXIIBEL4g
Z3h84JvCy5nhBg/HNxdp8wl0HykfuRZYwmm6Mzf5A3TolcCaf+84X4KE/Z+5s9eL
HKnc5TUrIiR3Ugx0J8jN4Nb8FFqyjjEE0Dw53J64ZtX7J8ZMtMwCqqL/4cIXGXYt
DpSMlogCW7mAX8YnvaXbmjQ3JLOXQp75x3DOF4QzR9jf9Bi/zrPDyq6NjTlj9Jb/
iY4Mfml4c0jr7zirsmT5tk9ZXtZHTHYlWAVA71N5E2d1GEcT+aSOUx+McwIxf6lZ
pJq3cUSG2qKuFVLI1b48mRGU+qoUrONh7YfGv8u/G22Uw1dmXrVn6JtFIRHpAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUV8zvYwZKd9z4tTrdy6BXafdy5QAwHwYDVR0j
BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1
RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm
Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDM0MzIzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM1MzIzNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMEIwDQYJKoZIhvcN
AQELBQADggEBAFCHZ21jZ6wdKjbzohNiX+BcrLTksyKwqr8KzXJR9dUAK3y7nGgp
brfsf1xv2GJOGhxQ+Q1cX4/UWKAX1tvcFMWHKnvkOw42Nxe0s3Adjxj3IXFJFT8J
BpvMISPvcdaPAfdPXWm+cVsS8k5tY7zfkgKezCVP+f1YFQRy2hbuBTUrfbc96Klu
kWM6zbauCijYb39AKNYSAVAYIlQjWvLjYMaGROX+pmcBSkw5Ie3oGA0C0bc/0rEM
23XzGYCkYjbSRhn7kpbwcvqzWsI/rC4yiiK3Ogq+m8Onj9eJ0faTrdRpLiv3TUEp
fSe7XP5EWgMIVsjSaIpOGbCmG6cQOC3C/Mw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:12:55 2026 by rpki-client