Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa
File:                     326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa (raw, json)
Hash identifier:          iJ4NCzl3r2T68E5GjykWZAAIi2YLaDE9Y+SpjQlOumQ=
Subject key identifier:   53:6B:E2:C3:BB:E4:E3:67:61:61:0A:C3:B2:DF:62:A9:B6:11:A8:B1
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       78A031AC9355AD46AF09E9DFD1750D5037A9818F
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:50 +0000
ROA not before:           Sat 06 Jun 2026 10:11:50 +0000
ROA not after:            Sat 05 Jun 2027 10:16:50 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a0:31:ac:93:55:ad:46:af:09:e9:df:d1:75:0d:50:37:a9:81:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:50 2026 GMT
            Not After : Jun  5 10:16:50 2027 GMT
        Subject: CN=536BE2C3BBE4E36761610AC3B2DF62A9B611A8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:6b:4f:bb:20:87:4d:12:83:5b:92:34:c7:
                    02:7b:d1:2c:d7:38:0e:61:45:43:66:b6:be:7b:0f:
                    7b:7c:d3:7b:2d:7c:1f:63:0d:97:9c:49:ae:8d:50:
                    23:45:3f:9d:6f:50:8b:45:fc:73:c7:ad:f6:ae:a5:
                    01:99:a2:ad:33:82:0c:7b:20:68:60:d1:68:1c:ad:
                    75:c8:25:b2:bd:58:ed:bb:48:48:13:a7:1f:03:f0:
                    dd:a0:37:99:26:5d:59:3b:3c:46:d2:39:27:05:10:
                    da:4f:3b:db:cb:08:18:3b:da:55:52:19:a8:13:ec:
                    f0:21:ca:91:76:9c:49:e8:44:73:c0:71:db:dc:7e:
                    64:24:d9:1e:af:ec:50:73:c2:33:1a:43:eb:11:0e:
                    ae:9d:28:19:f0:92:6c:9f:8a:57:16:39:ae:68:4c:
                    ee:dc:01:29:20:f4:a5:7f:3d:bb:ce:93:bd:87:0e:
                    fd:7b:c3:b8:bd:61:aa:83:b1:ec:9e:b0:a4:40:50:
                    8b:c8:60:a2:7b:a2:31:5b:91:5a:a4:c4:73:1d:0e:
                    c0:f7:0f:2b:1a:0b:91:93:34:74:f7:29:3e:8d:50:
                    e9:dd:a0:86:94:d1:2b:ad:67:b1:c7:d2:34:0e:d2:
                    93:37:bb:0c:84:bf:f8:56:b6:c6:58:ab:f1:41:ab:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6B:E2:C3:BB:E4:E3:67:61:61:0A:C3:B2:DF:62:A9:B6:11:A8:B1
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:23:7c:c4:2e:b7:83:94:cf:dc:22:71:69:6f:fe:ad:df:0f:
         a9:2f:f1:75:9a:e5:49:cb:44:34:77:17:77:e5:cd:32:e8:53:
         7c:d8:b5:a4:b5:d5:c7:9e:64:b9:db:91:9f:c4:08:93:a8:84:
         3c:c1:c2:42:80:4a:ab:8f:37:51:1f:bd:5c:40:1b:79:a2:2b:
         55:fb:4e:b4:5b:19:a1:b1:33:57:df:21:9f:21:71:43:2c:89:
         2f:6c:96:be:d3:6f:e4:4e:be:54:a7:00:7f:3c:fe:15:af:3f:
         1a:18:1b:df:95:cc:51:0a:7d:3f:6c:62:45:48:6c:c4:04:7c:
         3f:5a:c2:4c:f8:59:7d:ca:59:5e:2b:14:c7:ff:1b:e9:ec:02:
         ee:90:04:3c:35:48:b6:3d:6d:41:9a:54:d7:52:69:37:16:c2:
         35:16:8f:41:c3:f7:e1:a1:f9:6e:aa:f9:33:88:0d:17:92:ad:
         6d:80:a3:6a:e8:8e:93:24:c0:5d:36:e8:b5:2e:32:fb:60:36:
         e2:7b:7d:11:7c:07:04:be:ec:5d:45:03:70:e5:c0:ff:c2:c0:
         ab:5c:e6:5f:9f:f8:25:f2:87:df:51:d3:ae:61:ce:f6:60:d9:
         b4:51:b5:8d:af:35:2a:45:13:27:ca:e7:e7:44:11:ed:ae:86:
         6a:3c:52:b3
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUeKAxrJNVrUavCenf0XUNUDepgY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3MjhCOTE0NjcwNDM0RENGNTYzM0U4MUUyQjg3MjFE
Rjc1Q0VCODAeFw0yNjA2MDYxMDExNTBaFw0yNzA2MDUxMDE2NTBaMDMxMTAvBgNV
BAMTKDUzNkJFMkMzQkJFNEUzNjc2MTYxMEFDM0IyREY2MkE5QjYxMUE4QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1WtPuyCHTRKDW5I0xwJ70SzX
OA5hRUNmtr57D3t803stfB9jDZecSa6NUCNFP51vUItF/HPHrfaupQGZoq0zggx7
IGhg0WgcrXXIJbK9WO27SEgTpx8D8N2gN5kmXVk7PEbSOScFENpPO9vLCBg72lVS
GagT7PAhypF2nEnoRHPAcdvcfmQk2R6v7FBzwjMaQ+sRDq6dKBnwkmyfilcWOa5o
TO7cASkg9KV/PbvOk72HDv17w7i9YaqDseyesKRAUIvIYKJ7ojFbkVqkxHMdDsD3
DysaC5GTNHT3KT6NUOndoIaU0SutZ7HH0jQO0pM3uwyEv/hWtsZYq/FBqxTjAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUU2viw7vk42dhYQrDst9iqbYRqLEwHwYDVR0j
BBgwFoAUD3KLkUZwQ03PVjPoHiuHId91zrgwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm
NTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURGNzVDRUI4
LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp
ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEY3MjhCOTE0Njcw
NDM0RENGNTYzM0U4MUUyQjg3MjFERjc1Q0VCOC5jZXIwgbgGCCsGAQUFBwELBIGr
MIGoMIGlBggrBgEFBQcwC4aBmHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzExLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTMwMzAzYTNhMmYzNDMwMmQz
NDMwMjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAujANBgkqhkiG
9w0BAQsFAAOCAQEAbSN8xC63g5TP3CJxaW/+rd8PqS/xdZrlSctENHcXd+XNMuhT
fNi1pLXVx55kuduRn8QIk6iEPMHCQoBKq483UR+9XEAbeaIrVftOtFsZobEzV98h
nyFxQyyJL2yWvtNv5E6+VKcAfzz+Fa8/Ghgb35XMUQp9P2xiRUhsxAR8P1rCTPhZ
fcpZXisUx/8b6ewC7pAEPDVItj1tQZpU11JpNxbCNRaPQcP34aH5bqr5M4gNF5Kt
bYCjauiOkyTAXTbotS4y+2A24nt9EXwHBL7sXUUDcOXA/8LAq1zmX5/4JfKH31HT
rmHO9mDZtFG1ja81KkUTJ8rn50QR7a6GajxSsw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:48 2026 by rpki-client