Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          dzWuBbL9qoRRQI6EpNwCaE7Ww8zuC/fJkHyCODoh4KQ=
Subject key identifier:   79:74:D3:F6:A6:17:35:F6:9C:04:E2:89:E8:91:2F:F9:F7:90:65:E2
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       3FE38EF39CCB9CA7D1E173FAAF70C661A0934460
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Wed 11 Jun 2025 01:10:28 +0000
ROA not before:           Wed 11 Jun 2025 01:05:28 +0000
ROA not after:            Wed 10 Jun 2026 01:10:28 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 06:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e3:8e:f3:9c:cb:9c:a7:d1:e1:73:fa:af:70:c6:61:a0:93:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Jun 11 01:05:28 2025 GMT
            Not After : Jun 10 01:10:28 2026 GMT
        Subject: CN=7974D3F6A61735F69C04E289E8912FF9F79065E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:80:bc:6c:3e:02:8c:58:07:e0:97:73:cf:
                    f7:f6:b8:57:a8:07:66:05:7b:2a:10:e7:77:63:6e:
                    ac:63:8b:59:5c:84:52:56:8b:4a:cf:e7:cb:e3:bd:
                    25:96:d9:2c:a8:4c:3b:e1:7c:33:17:62:04:8e:8f:
                    0c:79:2e:03:f9:19:8c:01:3e:2d:02:c4:05:47:fe:
                    34:53:32:e5:64:4d:e2:9f:20:74:ee:e0:d8:43:a0:
                    a0:68:0e:48:93:92:58:66:6a:60:05:cc:17:cf:ca:
                    1e:3c:ed:68:30:40:1d:8c:fe:c4:06:c3:35:80:47:
                    f3:ee:18:34:07:89:fe:61:ae:f4:62:2d:57:a0:bb:
                    ef:7c:07:43:13:4a:cf:0a:11:31:28:b5:d5:09:07:
                    70:c8:f6:f8:96:a4:f3:48:aa:c8:0a:34:59:9d:58:
                    05:14:cd:bc:3b:47:c7:78:cf:54:af:b0:28:26:3d:
                    72:11:e1:19:cd:9a:34:ff:26:10:12:8d:ba:4d:d6:
                    39:a7:6b:bc:a9:e3:9d:16:8e:c9:5f:d8:d3:64:97:
                    08:ab:f8:be:34:ce:2a:96:ae:32:35:65:f2:67:b2:
                    f4:9b:ea:04:68:a6:97:04:1a:0f:93:92:54:7a:65:
                    b5:fa:bb:2c:a0:9c:72:ec:51:9a:e6:50:c7:c2:ae:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:74:D3:F6:A6:17:35:F6:9C:04:E2:89:E8:91:2F:F9:F7:90:65:E2
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba57::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:86:db:19:8b:54:3f:73:cb:c6:1b:0e:5d:34:45:84:71:e8:
         ce:70:1d:5e:ba:e5:67:87:68:3a:9a:44:40:c9:94:af:ae:00:
         e0:3c:3e:bf:8f:57:19:89:79:c0:c3:4f:3b:98:3e:f1:a1:a7:
         21:d3:11:9b:65:a9:a5:1c:af:7a:0d:2b:d5:ff:00:ab:31:42:
         0e:5d:e4:0a:30:27:46:9f:61:76:2f:60:a7:0d:95:f0:b8:26:
         56:4a:c5:51:04:94:6b:7f:fb:28:5d:06:46:a0:4c:bc:69:2e:
         ba:c6:36:de:bb:69:6a:04:d4:d4:f7:65:b2:69:71:b4:cc:19:
         92:50:49:1f:ba:d8:07:4f:7d:8d:fe:49:a5:6c:66:74:73:b8:
         98:90:5a:83:14:ef:e5:36:f1:1f:ac:9c:a9:94:0f:73:6d:06:
         2c:3e:28:8b:11:d0:bd:76:56:ea:3b:92:58:4b:52:4a:95:5d:
         b5:d8:11:f7:1d:d9:a9:85:f2:e5:50:dc:5b:73:06:c2:32:b6:
         9c:82:17:60:2f:d8:ce:c6:f8:b6:a8:79:6b:14:51:53:9b:dc:
         d9:2b:01:7d:48:87:45:9c:8a:cb:c4:63:eb:b3:84:06:11:8d:
         36:a6:a9:f1:43:99:91:9e:08:6b:b8:0b:d2:a5:4d:cb:de:12:
         8a:a9:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:55 2025 by rpki-client