Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          zXClNEIJEj2Ci35uV7WijqfA0AUwvL0KP6ONkH5PFSY=
Subject key identifier:   37:A1:41:5F:E4:E0:84:F9:FE:51:0A:BE:AB:B7:11:90:81:85:73:47
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       517B4C0C1C3C72EB4E3754890D750DCCB5CD12B8
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:51 +0000
ROA not before:           Sat 06 Jun 2026 10:11:51 +0000
ROA not after:            Sat 05 Jun 2027 10:16:51 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba5e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7b:4c:0c:1c:3c:72:eb:4e:37:54:89:0d:75:0d:cc:b5:cd:12:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:51 2026 GMT
            Not After : Jun  5 10:16:51 2027 GMT
        Subject: CN=37A1415FE4E084F9FE510ABEABB7119081857347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:9f:d2:93:aa:d8:54:00:ce:db:fa:15:6c:
                    a4:83:f9:e2:f9:1a:ac:c2:56:94:e9:90:18:02:99:
                    5b:83:4b:e8:96:42:89:ec:e0:c5:05:d2:54:d1:2a:
                    d5:5a:63:41:be:aa:45:17:7c:c7:a7:3b:d2:1b:5b:
                    5c:bb:98:b1:96:65:59:e0:e5:bb:73:d5:b4:49:14:
                    e3:fe:f3:5d:1d:49:e9:82:c7:d3:33:91:3e:31:bb:
                    0e:74:16:30:70:12:d0:a2:58:b6:1c:01:6c:8d:30:
                    68:3e:7c:7f:08:c4:50:16:88:e5:7f:f0:87:35:d6:
                    f4:bc:1b:a3:0f:02:9e:22:cb:26:6d:80:51:88:34:
                    e2:6c:ca:09:75:b5:99:ce:8c:d5:9c:26:60:a1:8f:
                    7e:a1:db:d2:86:c6:c6:99:fd:32:59:03:d3:95:cc:
                    f7:b4:0a:8d:ac:19:83:f6:0d:00:9a:bd:8f:e3:e9:
                    97:8f:65:64:c0:4f:15:8e:1b:aa:49:b1:01:f2:f9:
                    9d:43:16:86:0a:ab:ea:c0:c1:6d:3b:71:1e:68:c8:
                    84:12:0c:8d:d6:0a:5e:99:a8:f3:91:80:9f:24:2b:
                    bf:4a:a9:68:1b:3d:98:0e:5e:5c:e5:50:d9:ab:ea:
                    e9:eb:06:ec:e9:0f:c4:ab:35:b1:b8:1d:8f:5c:5c:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A1:41:5F:E4:E0:84:F9:FE:51:0A:BE:AB:B7:11:90:81:85:73:47
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba5e::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:4b:d9:b2:e8:ea:54:04:fc:29:ba:82:9e:59:60:c3:68:2d:
         52:46:63:e9:a2:57:df:b6:9e:82:b6:f4:6a:62:f4:98:9f:8a:
         c1:9b:4b:6c:05:37:8a:e3:68:b9:f1:c6:95:8a:a5:10:22:ce:
         e2:28:15:7c:21:18:27:3e:a0:60:0a:ac:e2:d9:42:8a:1f:eb:
         3b:fb:4c:9c:55:2c:e9:d3:6d:37:ac:59:e8:5a:4e:05:2d:de:
         a1:86:d6:18:49:22:80:a4:eb:06:8f:1a:d3:1f:05:f2:88:db:
         96:77:4f:b7:44:8f:b4:70:90:c2:fa:b5:ce:f3:67:41:41:a1:
         ff:c6:11:52:80:5c:6b:af:37:47:7f:00:02:86:70:97:a3:8f:
         12:49:de:2f:32:de:98:8b:f9:ab:1a:a0:8e:ea:47:88:35:da:
         7b:1c:49:17:c3:5e:fc:bd:c5:08:af:de:f0:40:77:6e:9c:f3:
         7c:e0:cb:63:ed:91:78:a0:51:3d:78:33:58:1e:e1:84:78:e5:
         03:dd:e4:ac:04:38:1f:15:bf:f3:b6:07:95:57:8d:fa:90:2d:
         69:63:ee:73:44:91:49:ad:01:00:4d:19:54:97:9b:1f:ef:29:
         c2:47:a0:e7:ad:c6:88:03:21:ef:7c:90:83:46:de:e7:a9:20:
         fe:16:f7:17
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUUXtMDBw8cutON1SJDXUNzLXNErgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3MjhCOTE0NjcwNDM0RENGNTYzM0U4MUUyQjg3MjFE
Rjc1Q0VCODAeFw0yNjA2MDYxMDExNTFaFw0yNzA2MDUxMDE2NTFaMDMxMTAvBgNV
BAMTKDM3QTE0MTVGRTRFMDg0RjlGRTUxMEFCRUFCQjcxMTkwODE4NTczNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UJ/Sk6rYVADO2/oVbKSD+eL5
GqzCVpTpkBgCmVuDS+iWQons4MUF0lTRKtVaY0G+qkUXfMenO9IbW1y7mLGWZVng
5btz1bRJFOP+810dSemCx9MzkT4xuw50FjBwEtCiWLYcAWyNMGg+fH8IxFAWiOV/
8Ic11vS8G6MPAp4iyyZtgFGINOJsygl1tZnOjNWcJmChj36h29KGxsaZ/TJZA9OV
zPe0Co2sGYP2DQCavY/j6ZePZWTATxWOG6pJsQHy+Z1DFoYKq+rAwW07cR5oyIQS
DI3WCl6ZqPORgJ8kK79KqWgbPZgOXlzlUNmr6unrBuzpD8SrNbG4HY9cXOhDAgMB
AAGjggJjMIICXzAdBgNVHQ4EFgQUN6FBX+TghPn+UQq+q7cRkIGFc0cwHwYDVR0j
BBgwFoAUD3KLkUZwQ03PVjPoHiuHId91zrgwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm
NTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURGNzVDRUI4
LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp
ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEY3MjhCOTE0Njcw
NDM0RENGNTYzM0U4MUUyQjg3MjFERjc1Q0VCOC5jZXIwgbgGCCsGAQUFBwELBIGr
MIGoMIGlBggrBgEFBQcwC4aBmHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzExLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTM1NjUzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAul4wDQYJKoZI
hvcNAQELBQADggEBAHVL2bLo6lQE/Cm6gp5ZYMNoLVJGY+miV9+2noK29Gpi9Jif
isGbS2wFN4rjaLnxxpWKpRAizuIoFXwhGCc+oGAKrOLZQoof6zv7TJxVLOnTbTes
WehaTgUt3qGG1hhJIoCk6waPGtMfBfKI25Z3T7dEj7RwkML6tc7zZ0FBof/GEVKA
XGuvN0d/AAKGcJejjxJJ3i8y3piL+asaoI7qR4g12nscSRfDXvy9xQiv3vBAd26c
83zgy2PtkXigUT14M1ge4YR45QPd5KwEOB8Vv/O2B5VXjfqQLWlj7nNEkUmtAQBN
GVSXmx/vKcJHoOetxogDIe98kING3uepIP4W9xc=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:58:58 2026 by rpki-client