Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          3RvAUptVpz9t+/vEUr2T+oD3r3m2M7/+gCge4rPhKxg=
Subject key identifier:   AD:F1:E1:5F:9A:70:C7:81:B1:19:DC:2E:4C:3E:51:8E:43:A1:09:61
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       45972936094930A6F1F1AD418A1F2FF8E3A76479
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Fri 05 Jun 2026 20:46:06 +0000
ROA not before:           Fri 05 Jun 2026 20:41:06 +0000
ROA not after:            Fri 04 Jun 2027 20:46:06 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3044::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:97:29:36:09:49:30:a6:f1:f1:ad:41:8a:1f:2f:f8:e3:a7:64:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jun  5 20:41:06 2026 GMT
            Not After : Jun  4 20:46:06 2027 GMT
        Subject: CN=ADF1E15F9A70C781B119DC2E4C3E518E43A10961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:eb:39:8f:e2:c5:77:f2:90:46:b1:36:87:
                    39:c7:19:62:d1:cd:9b:a0:68:bd:f9:31:40:9a:f3:
                    b4:9b:ff:2d:bb:12:df:a7:80:ea:f7:81:a5:b0:fa:
                    b0:e5:a5:cc:ae:d2:16:83:8b:f9:3e:29:f9:d1:30:
                    f4:04:5e:6e:f0:9e:75:5d:d1:a6:ff:32:3e:28:8b:
                    09:77:3b:26:d0:c4:30:5f:4b:33:a8:4f:f6:25:d5:
                    9f:0a:38:ce:d9:4f:67:d9:0f:c3:76:37:d0:fc:3f:
                    2e:82:27:10:ba:0c:76:d7:27:7c:a8:ff:68:93:a2:
                    e3:b4:3f:90:82:ef:31:7f:b5:66:1e:81:84:dc:52:
                    3b:a0:95:94:af:69:10:7f:37:8a:b6:35:2f:44:5f:
                    da:e2:d8:ef:50:10:23:f6:44:1e:65:f1:3b:6c:20:
                    34:e9:98:75:d0:8d:77:00:70:0d:8e:fb:0c:b6:39:
                    b9:18:5f:77:04:cf:c8:39:20:8b:b8:18:c2:1f:d6:
                    46:15:f2:24:0f:3b:b7:20:67:7d:d0:c5:ef:06:f3:
                    68:1e:b5:f0:eb:0f:4f:d5:e9:3e:87:69:41:fb:67:
                    4a:93:b2:5e:91:77:8f:be:1d:28:7b:5c:9e:5a:ba:
                    9d:e9:48:e1:3a:a1:35:e9:0b:b2:d6:df:75:2f:ad:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F1:E1:5F:9A:70:C7:81:B1:19:DC:2E:4C:3E:51:8E:43:A1:09:61
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3044::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:94:22:3d:65:e6:d3:bd:7e:dc:0b:c6:02:34:71:a4:9a:
         de:59:35:0c:27:35:a0:59:92:b9:2a:a6:d2:f0:bf:15:6b:84:
         e1:eb:84:0a:79:90:48:40:56:d7:11:0f:b3:a6:5c:c1:37:94:
         9c:70:a8:bc:15:9f:56:c5:be:34:e6:f0:91:6c:66:e3:1f:a3:
         a7:be:63:4c:6d:fd:f7:36:c0:06:34:eb:2d:bb:2a:0a:f7:fd:
         dd:28:69:56:2d:f0:9f:54:e1:a9:14:84:1a:8e:ec:70:78:7d:
         83:f3:39:e3:84:5d:8a:c0:2c:3a:a6:9e:a3:af:d3:1b:a0:7d:
         46:82:a1:a0:5c:e1:80:69:b7:66:a4:04:85:af:90:d9:10:24:
         30:eb:7e:d6:bc:c0:09:ec:89:9f:74:58:f9:d7:95:99:2e:b6:
         4c:87:1f:20:09:c7:4d:76:33:ee:d2:7c:39:a4:04:6b:56:7d:
         66:5e:e6:69:92:40:6d:35:1c:c2:ee:b6:bc:c6:d8:ac:21:ff:
         0a:58:11:a0:2b:3f:da:b5:12:09:37:10:53:ff:83:01:5c:7f:
         92:35:39:10:da:7d:98:ea:d2:7b:3c:2f:71:c9:83:b0:30:8c:
         4b:9c:64:b1:80:53:16:f3:d9:52:97:0d:e6:aa:4e:64:eb:36:
         99:af:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:23 2026 by rpki-client