Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          YySW/sH/T85Frpxg/OMmZXTi+XJ9bd/e6vjVoNBVTfQ=
Subject key identifier:   F8:0F:BB:46:47:8A:99:E6:68:C5:9A:85:15:24:7A:7E:FC:EC:61:70
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       278DA0224E59586AC789E47600E8B1DACEC6EEFD
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 06 May 2025 08:50:51 +0000
ROA not before:           Tue 06 May 2025 08:45:51 +0000
ROA not after:            Tue 05 May 2026 08:50:51 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8d:a0:22:4e:59:58:6a:c7:89:e4:76:00:e8:b1:da:ce:c6:ee:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: May  6 08:45:51 2025 GMT
            Not After : May  5 08:50:51 2026 GMT
        Subject: CN=F80FBB46478A99E668C59A8515247A7EFCEC6170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:a9:dd:08:9b:93:2f:d4:13:d5:70:6f:3d:
                    a0:0f:4c:0b:64:eb:a6:08:9e:a9:9e:15:bc:2d:c3:
                    80:25:de:03:e7:34:76:39:6d:d6:15:26:7b:0e:02:
                    d8:68:c5:ed:09:84:04:9a:74:0c:f1:15:80:45:15:
                    0e:38:3b:fe:34:ee:9f:a6:d6:5e:d8:17:db:99:d0:
                    86:36:e5:2e:c5:7c:46:c2:14:f5:6a:7e:9f:57:ef:
                    d5:1f:78:6c:1e:b4:98:c1:f4:f3:95:2a:cf:8e:fd:
                    53:4b:52:cf:4b:58:18:fc:0b:88:7a:8e:7a:db:36:
                    47:9a:bf:0d:42:3d:f1:7a:bc:a4:71:37:b9:02:73:
                    1b:a1:03:3b:d8:c5:99:95:2e:8c:ee:68:24:c4:f3:
                    94:1e:6c:e5:db:93:ae:c5:8a:36:a4:b5:da:99:3a:
                    d4:4a:66:fb:74:4f:11:c1:04:12:f6:22:49:25:df:
                    cd:f2:65:c4:32:93:7f:97:6f:d4:04:fa:c1:a8:5a:
                    9e:c9:2a:89:76:ff:06:a7:f2:02:e3:c9:f0:48:d1:
                    d7:08:6c:50:98:0e:3a:6b:e6:42:0c:ea:cc:2a:05:
                    db:77:4c:1a:ec:c6:bf:ac:f6:49:d9:5e:ee:4c:19:
                    ce:ec:d5:ff:a0:ca:9e:d7:45:c6:70:24:c2:f4:9c:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:BB:46:47:8A:99:E6:68:C5:9A:85:15:24:7A:7E:FC:EC:61:70
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f15::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:70:cb:fb:71:1c:3a:95:2c:4f:b1:30:8a:33:bf:c9:10:
         bf:78:70:a0:ca:27:48:1a:52:a9:9c:56:b0:87:f3:9f:2e:42:
         71:0e:56:93:f6:3a:7e:17:8b:b1:e0:42:e0:0e:9a:af:8f:c3:
         ac:05:3e:9f:0f:27:36:ce:a8:04:a3:d5:da:f2:f6:1a:06:17:
         83:a5:03:68:db:e9:2e:a8:a4:6c:30:fc:2a:db:cb:3c:f8:97:
         a0:38:67:43:f5:cf:c7:2d:98:63:ef:a2:7d:33:44:ec:8e:a8:
         59:06:ed:68:83:8c:97:72:9e:aa:80:bc:c9:31:46:fe:fd:92:
         8a:a1:2c:11:f7:8a:77:cf:df:ae:33:dd:2e:3a:a4:5f:8f:e9:
         1f:29:b4:d1:56:62:9c:36:b5:50:7f:e0:f4:e5:31:13:bd:db:
         c4:84:12:6c:21:6c:b7:31:d7:0f:59:05:ad:25:31:e5:d4:ca:
         b7:51:8b:43:78:8b:b9:c8:d8:39:f0:57:0c:51:93:db:d1:98:
         95:0f:76:6b:3b:c0:c3:4c:f1:a5:c7:c7:56:a2:2c:ef:f7:4c:
         8b:3d:47:f6:53:ec:91:41:4d:f9:43:86:c3:cb:fd:a7:0c:6f:
         ac:f2:46:9b:89:e6:45:94:43:c6:85:11:0d:79:05:e0:39:d9:
         8a:aa:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:36:05 2025 by rpki-client