Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          DVXNMpvy0boeRtNLdtrCI+Iokb9Eulmb0i2Qfsfxfqs=
Subject key identifier:   52:BF:3A:23:AF:40:B7:56:7E:ED:AF:15:ED:B1:9C:D6:20:23:40:51
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       78E73C6A3E54E6E9FAA47B1ADE0F5C37CFFFCCE2
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:49 +0000
ROA not before:           Sat 06 Jun 2026 10:11:49 +0000
ROA not after:            Sat 05 Jun 2027 10:16:49 +0000
asID:                     199518
IP address blocks:        2a0a:6040:baa1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e7:3c:6a:3e:54:e6:e9:fa:a4:7b:1a:de:0f:5c:37:cf:ff:cc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:49 2026 GMT
            Not After : Jun  5 10:16:49 2027 GMT
        Subject: CN=52BF3A23AF40B7567EEDAF15EDB19CD620234051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:8e:7b:55:a0:a4:21:e7:13:11:a4:40:e5:
                    93:03:10:aa:05:38:52:c9:60:4b:c4:8f:2c:0a:33:
                    9c:fd:4f:96:a0:88:88:cb:f7:6b:eb:6d:1a:a4:d1:
                    b2:59:2f:7b:31:3b:73:5d:53:c5:be:f3:10:1a:fe:
                    9e:49:3b:1f:41:43:32:7e:8e:1c:d9:b9:4e:85:02:
                    11:21:91:63:d0:3d:ca:7d:67:e8:26:91:91:45:dd:
                    e0:a7:ff:3f:43:e0:d7:4a:1b:9f:8b:16:07:88:af:
                    a1:fc:49:de:4b:5d:03:93:1a:05:90:1d:0c:71:a5:
                    f4:6d:1b:70:17:2e:23:b5:3d:7b:06:20:c3:1c:d5:
                    11:bf:5d:62:e1:d5:6d:10:97:fb:03:fa:22:59:a3:
                    d0:64:9e:49:de:66:51:aa:3e:d3:0c:97:52:e9:fb:
                    82:ef:b1:26:cc:1c:81:0c:19:3e:7a:cc:c8:ce:e9:
                    bd:48:29:27:f7:79:9b:2e:73:7f:ff:fa:7a:26:d0:
                    e0:76:70:9d:30:5d:3c:ce:86:24:9a:cb:07:41:7d:
                    fd:98:8a:16:c4:b0:fc:8d:ff:80:f9:83:bb:47:a7:
                    ea:28:6e:83:1a:32:a5:02:6b:72:85:63:0a:25:34:
                    4c:f6:6c:43:4b:63:c8:e6:42:bc:00:44:3e:cf:34:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BF:3A:23:AF:40:B7:56:7E:ED:AF:15:ED:B1:9C:D6:20:23:40:51
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:baa1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:71:31:23:39:74:bb:1a:00:32:8e:ef:9b:9a:04:fe:4d:6b:
         f1:1b:60:f8:73:b1:d4:17:4e:85:70:f7:9b:9a:c3:2e:4c:6f:
         e3:ac:31:ad:11:1f:3d:2d:50:bf:14:77:b3:41:cd:29:d7:83:
         f1:2e:34:b5:b3:e7:3f:96:d0:6f:86:75:08:d8:47:79:93:a0:
         38:6f:6d:fd:0f:0d:13:bf:62:ea:b5:59:de:98:95:c3:41:5e:
         7b:0f:65:ee:7d:48:7b:27:8a:79:fd:79:45:fd:ff:2c:43:aa:
         f4:02:5c:57:06:75:96:54:51:5b:82:4c:8e:99:0b:97:e8:0c:
         9a:f3:a8:2d:20:6a:87:9a:aa:8e:ce:ba:23:81:09:47:47:ae:
         36:84:e0:7a:9b:ab:b4:5b:19:db:86:d2:19:a1:bf:63:95:ca:
         99:dc:aa:00:db:bc:28:c5:eb:84:1a:0c:04:64:35:0f:60:35:
         62:97:f8:99:f0:7f:cd:62:88:d9:e5:3a:a0:4b:91:94:b6:20:
         ec:b1:df:39:03:43:43:9d:91:44:d1:e2:ee:16:fb:60:6f:85:
         b2:16:a4:b4:f6:63:aa:46:b6:ea:83:dd:e2:47:78:ef:fa:0f:
         af:a6:3d:36:74:7c:3f:fa:eb:de:bd:25:9b:27:f3:16:e8:05:
         b9:0f:cc:12
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUeOc8aj5U5un6pHsa3g9cN8//zOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3MjhCOTE0NjcwNDM0RENGNTYzM0U4MUUyQjg3MjFE
Rjc1Q0VCODAeFw0yNjA2MDYxMDExNDlaFw0yNzA2MDUxMDE2NDlaMDMxMTAvBgNV
BAMTKDUyQkYzQTIzQUY0MEI3NTY3RUVEQUYxNUVEQjE5Q0Q2MjAyMzQwNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRiI57VaCkIecTEaRA5ZMDEKoF
OFLJYEvEjywKM5z9T5agiIjL92vrbRqk0bJZL3sxO3NdU8W+8xAa/p5JOx9BQzJ+
jhzZuU6FAhEhkWPQPcp9Z+gmkZFF3eCn/z9D4NdKG5+LFgeIr6H8Sd5LXQOTGgWQ
HQxxpfRtG3AXLiO1PXsGIMMc1RG/XWLh1W0Ql/sD+iJZo9BknkneZlGqPtMMl1Lp
+4LvsSbMHIEMGT56zMjO6b1IKSf3eZsuc3//+nom0OB2cJ0wXTzOhiSaywdBff2Y
ihbEsPyN/4D5g7tHp+ooboMaMqUCa3KFYwolNEz2bENLY8jmQrwARD7PNOkRAgMB
AAGjggJjMIICXzAdBgNVHQ4EFgQUUr86I69At1Z+7a8V7bGc1iAjQFEwHwYDVR0j
BBgwFoAUD3KLkUZwQ03PVjPoHiuHId91zrgwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm
NTBlOC8xMS8wRjcyOEI5MTQ2NzA0MzREQ0Y1NjMzRTgxRTJCODcyMURGNzVDRUI4
LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp
ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvMEY3MjhCOTE0Njcw
NDM0RENGNTYzM0U4MUUyQjg3MjFERjc1Q0VCOC5jZXIwgbgGCCsGAQUFBwELBIGr
MIGoMIGlBggrBgEFBQcwC4aBmHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzExLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjI2MTYxMzEzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM5MzkzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAuqEwDQYJKoZI
hvcNAQELBQADggEBAFtxMSM5dLsaADKO75uaBP5Na/EbYPhzsdQXToVw95uawy5M
b+OsMa0RHz0tUL8Ud7NBzSnXg/EuNLWz5z+W0G+GdQjYR3mToDhvbf0PDRO/Yuq1
Wd6YlcNBXnsPZe59SHsninn9eUX9/yxDqvQCXFcGdZZUUVuCTI6ZC5foDJrzqC0g
aoeaqo7OuiOBCUdHrjaE4Hqbq7RbGduG0hmhv2OVypncqgDbvCjF64QaDARkNQ9g
NWKX+Jnwf81iiNnlOqBLkZS2IOyx3zkDQ0OdkUTR4u4W+2BvhbIWpLT2Y6pGtuqD
3eJHeO/6D6+mPTZ0fD/66969JZsn8xboBbkPzBI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:40:24 2026 by rpki-client