Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          ikocRTZQ9+VmscNR/S4mme6u6SVmmBPtHdfMJ1+UhH4=
Subject key identifier:   A3:51:4D:F1:7C:DA:F3:12:2B:B3:66:BE:DF:CC:D8:64:4D:BF:08:35
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       57155AFF2730BED7E7CF902E8BA29D6BFF29CF63
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 06 May 2025 08:50:51 +0000
ROA not before:           Tue 06 May 2025 08:45:51 +0000
ROA not after:            Tue 05 May 2026 08:50:51 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:15:5a:ff:27:30:be:d7:e7:cf:90:2e:8b:a2:9d:6b:ff:29:cf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: May  6 08:45:51 2025 GMT
            Not After : May  5 08:50:51 2026 GMT
        Subject: CN=A3514DF17CDAF3122BB366BEDFCCD8644DBF0835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:f4:9c:3e:25:8c:15:13:37:36:6d:6e:4c:
                    9f:af:ac:c1:22:f1:4a:b4:16:31:e0:7c:4c:2a:31:
                    7f:5d:2c:09:a0:cb:f1:02:00:e1:4a:87:fb:ab:ba:
                    cb:b9:7a:b7:be:6c:72:ee:9e:3d:30:a5:73:03:b5:
                    dc:16:70:37:cd:09:e8:2d:7a:6d:4a:b4:c4:df:09:
                    75:b3:eb:5d:44:e6:b4:9d:a6:31:ac:7f:9b:0c:0b:
                    b8:45:c9:40:ec:9c:e6:55:0d:f4:5c:b1:f2:6b:b1:
                    c4:12:43:25:0a:08:63:f3:89:8d:a1:ae:40:ec:55:
                    c8:78:2a:45:e6:38:07:92:bb:ed:75:12:ff:72:4b:
                    74:73:17:d7:3e:85:84:54:87:a2:50:6a:f3:11:4d:
                    f3:a4:67:3b:3d:73:18:62:3d:4d:1b:78:22:68:b3:
                    24:e8:0e:f1:b0:43:22:37:0f:98:53:40:47:8f:32:
                    7f:1c:75:68:07:83:d9:1c:bc:4d:af:08:ad:ca:e5:
                    2e:f9:66:21:6a:dc:dd:94:b7:ab:ad:1b:2f:aa:a2:
                    e2:c6:af:23:d1:58:9e:35:84:73:4d:8d:3f:3d:92:
                    3f:90:86:41:68:7b:99:35:50:02:11:19:d2:6d:6a:
                    f9:ae:70:4e:f1:52:9b:b3:77:73:74:9e:37:66:e3:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:51:4D:F1:7C:DA:F3:12:2B:B3:66:BE:DF:CC:D8:64:4D:BF:08:35
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:a1:fe:35:55:d5:86:23:21:9d:6e:cd:12:78:14:52:1f:
         3a:1a:dd:e2:38:43:70:70:19:a8:40:23:79:0f:13:f2:c9:d0:
         65:24:02:47:63:40:78:9c:54:6c:d7:3f:5c:80:7d:91:35:bc:
         60:fe:e5:dd:99:b8:fa:cc:c1:52:9a:12:fd:9a:a1:67:12:da:
         a3:4c:da:d9:95:8d:e7:9e:bc:e1:54:64:63:5a:cd:f5:f5:e7:
         b7:b7:d3:e8:ec:28:0d:62:9e:c8:63:79:d4:6b:b2:38:42:94:
         55:39:c2:f1:a5:99:45:30:2c:53:97:11:62:12:53:fc:e8:81:
         2c:98:72:c6:44:8d:fd:b5:d2:40:f8:44:16:df:a7:67:0c:1e:
         f1:60:70:14:71:05:59:f7:36:d8:04:ce:15:9c:a4:7a:5d:3a:
         47:41:8f:ca:f2:10:80:42:91:af:81:3e:bd:ea:a6:ec:1f:af:
         99:d7:03:da:68:45:06:f1:1c:aa:e5:40:0d:b1:1e:91:e7:f1:
         e3:fa:c1:b1:5a:33:10:76:4a:70:b8:e6:44:fa:d9:84:e0:b7:
         3c:cb:a8:88:75:69:1f:f3:b3:ec:02:0d:7f:a8:fb:f1:7b:e6:
         ba:6e:26:e5:fc:e6:e0:c0:48:30:46:df:8f:4f:c2:e2:1f:ad:
         00:f8:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:39:39 2025 by rpki-client