Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          tzZ2jtcH1oc3Agcu1MFCgJiJoxSXYMwAs4vIx6WbfQU=
Subject key identifier:   A1:80:5D:17:5A:4A:6C:BA:C1:0C:83:E3:63:8C:4F:CC:07:D7:32:75
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       2DE295BD839A7386B6D7337B87AF31C011E65EB6
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 06 May 2025 08:50:50 +0000
ROA not before:           Tue 06 May 2025 08:45:50 +0000
ROA not after:            Tue 05 May 2026 08:50:50 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e2:95:bd:83:9a:73:86:b6:d7:33:7b:87:af:31:c0:11:e6:5e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: May  6 08:45:50 2025 GMT
            Not After : May  5 08:50:50 2026 GMT
        Subject: CN=A1805D175A4A6CBAC10C83E3638C4FCC07D73275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:e1:76:81:7c:e3:15:d1:a7:23:25:d0:7a:
                    63:9b:3b:22:20:69:98:89:c4:a6:42:f7:42:d5:a5:
                    7b:62:36:36:6f:89:1c:79:62:00:be:b7:d9:9b:ed:
                    ab:dc:66:da:19:72:4a:32:e2:09:0d:84:76:e0:41:
                    31:6a:6d:d7:ec:02:20:ed:8b:e5:40:1d:3c:f4:da:
                    5a:46:4b:d6:c5:22:44:b8:8f:20:3c:ba:aa:27:35:
                    65:d6:ee:3e:bf:65:df:c7:3c:22:39:69:b0:f3:e0:
                    9e:df:1b:84:10:75:aa:21:74:9a:9d:f2:3b:be:8a:
                    5f:f9:50:bc:23:05:38:4e:b8:2a:5b:db:d2:73:ec:
                    d3:97:ad:4d:ba:84:ed:76:57:31:27:ea:07:46:20:
                    ff:3a:42:1c:06:c3:68:a1:0b:6f:c7:83:79:06:1b:
                    72:9b:44:69:62:06:28:8e:cc:d1:ba:70:e0:9d:0e:
                    13:ec:5b:e1:03:39:cc:d1:1e:af:35:75:b2:83:ef:
                    7b:e4:04:70:d0:ab:35:61:88:4b:6b:ed:80:7d:f6:
                    d2:ec:ff:19:96:b4:7f:68:f6:de:a0:cb:c5:14:0a:
                    e7:29:da:0b:c5:16:88:5c:5e:1a:1b:72:04:99:34:
                    e0:4e:5b:05:c6:5a:aa:75:af:e0:e0:e5:9e:58:b4:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:80:5D:17:5A:4A:6C:BA:C1:0C:83:E3:63:8C:4F:CC:07:D7:32:75
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e80::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:60:7d:b6:92:8f:e9:64:a5:56:52:29:fe:c7:cd:a1:87:
         25:29:e3:03:44:1f:fd:28:e8:75:77:e3:b8:c4:cf:01:e3:57:
         f1:38:af:11:08:4d:eb:2b:d8:14:85:0f:e5:a0:53:e1:42:e2:
         d2:b8:bd:dc:df:c3:1b:f0:89:6b:cc:2f:da:cf:6e:1f:5f:92:
         1c:4b:ae:1e:06:f4:63:89:2e:10:a0:dd:29:6a:2d:1d:c7:ee:
         cd:3e:b0:7e:c1:66:c7:a3:eb:a4:11:c2:5e:b5:0e:de:ff:48:
         18:8e:71:76:a4:13:28:49:87:ed:59:09:c1:03:56:58:78:45:
         82:24:25:78:9c:89:c0:d9:74:e8:3d:a2:d2:26:9b:f1:a8:9f:
         9f:ec:eb:9f:88:6e:45:76:65:ff:68:8f:61:47:9a:ba:1b:f2:
         49:3a:55:6f:9c:82:fe:09:07:1b:10:44:0b:27:3a:92:de:15:
         76:d3:15:39:aa:ab:b7:48:e3:a7:e3:4e:4d:6e:92:57:2e:7b:
         d6:2c:d6:38:c4:79:42:d3:9b:c6:54:a8:7d:cd:1d:77:02:b6:
         f9:c5:e1:d3:b0:8a:40:cf:44:e1:67:4c:7b:ba:02:f4:e8:2c:
         6d:93:3a:16:4a:fe:24:44:a8:b9:cc:ff:05:d3:59:2a:a5:cc:
         06:14:cb:8a
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIULeKVvYOac4a21zN7h68xwBHmXrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1
NzU2QjE5QzAeFw0yNTA1MDYwODQ1NTBaFw0yNjA1MDUwODUwNTBaMDMxMTAvBgNV
BAMTKEExODA1RDE3NUE0QTZDQkFDMTBDODNFMzYzOEM0RkNDMDdENzMyNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCuF2gXzjFdGnIyXQemObOyIg
aZiJxKZC90LVpXtiNjZviRx5YgC+t9mb7avcZtoZckoy4gkNhHbgQTFqbdfsAiDt
i+VAHTz02lpGS9bFIkS4jyA8uqonNWXW7j6/Zd/HPCI5abDz4J7fG4QQdaohdJqd
8ju+il/5ULwjBThOuCpb29Jz7NOXrU26hO12VzEn6gdGIP86QhwGw2ihC2/Hg3kG
G3KbRGliBiiOzNG6cOCdDhPsW+EDOczRHq81dbKD73vkBHDQqzVhiEtr7YB99tLs
/xmWtH9o9t6gy8UUCucp2gvFFohcXhobcgSZNOBOWwXGWqp1r+Dg5Z5YtB2RAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUoYBdF1pKbLrBDIPjY4xPzAfXMnUwHwYDVR0j
BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz
NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM4MzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6AMA0GCSqGSIb3DQEB
CwUAA4IBAQBg7WB9tpKP6WSlVlIp/sfNoYclKeMDRB/9KOh1d+O4xM8B41fxOK8R
CE3rK9gUhQ/loFPhQuLSuL3c38Mb8IlrzC/az24fX5IcS64eBvRjiS4QoN0pai0d
x+7NPrB+wWbHo+ukEcJetQ7e/0gYjnF2pBMoSYftWQnBA1ZYeEWCJCV4nInA2XTo
PaLSJpvxqJ+f7OufiG5FdmX/aI9hR5q6G/JJOlVvnIL+CQcbEEQLJzqS3hV20xU5
qqu3SOOn405NbpJXLnvWLNY4xHlC05vGVKh9zR13Arb5xeHTsIpAz0ThZ0x7ugL0
6CxtkzoWSv4kRKi5zP8F01kqpcwGFMuK
-----END CERTIFICATE-----
Generated at Fri May 9 04:04:37 2025 by rpki-client