Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          7LDGgxdYDYtxIUq3RZekv9MnxfWBufm4AVdviR8x0TQ=
Subject key identifier:   45:94:94:36:69:50:78:F4:7E:8F:BD:42:63:CE:6B:16:4D:CB:29:D0
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       1921D8FEA2E20A0D1F7E74759D3D49C40A4A47A6
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 06 May 2025 08:50:50 +0000
ROA not before:           Tue 06 May 2025 08:45:50 +0000
ROA not after:            Tue 05 May 2026 08:50:50 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8eb0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:d8:fe:a2:e2:0a:0d:1f:7e:74:75:9d:3d:49:c4:0a:4a:47:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: May  6 08:45:50 2025 GMT
            Not After : May  5 08:50:50 2026 GMT
        Subject: CN=45949436695078F47E8FBD4263CE6B164DCB29D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:af:6c:f2:0b:24:6f:26:fe:3a:e2:04:f5:
                    e2:4b:ae:c2:a7:e3:2c:8b:78:fa:f8:1e:e3:c6:f4:
                    08:17:d9:1b:61:09:a7:b5:bd:b1:da:63:58:33:31:
                    df:5e:67:47:3b:c5:0a:2b:e4:56:97:47:5a:34:d7:
                    94:be:3f:2b:9a:8d:ed:99:71:f3:ed:c7:ef:4b:19:
                    9e:10:ec:e5:ac:48:9a:5b:2e:a5:91:66:5e:26:6d:
                    55:08:a0:ad:9c:c5:09:96:97:7d:91:7a:c7:34:ee:
                    bf:62:9e:fb:1b:00:ad:e9:8a:72:57:1e:f3:2f:49:
                    aa:e5:95:0d:14:22:88:84:e4:8d:38:c4:aa:38:6f:
                    2e:f4:66:7f:99:da:bb:e1:0d:56:c1:2d:3d:23:64:
                    20:6a:35:b6:a2:03:13:c2:ac:10:cb:36:3f:0e:55:
                    1c:61:ff:fd:cb:1c:82:35:44:60:eb:0e:42:67:ab:
                    e8:01:57:27:d4:f7:aa:a4:8b:6e:1b:01:5a:91:06:
                    6a:aa:52:de:e4:93:fd:7f:87:f3:17:d4:c0:f5:f2:
                    44:a5:07:4f:33:93:0e:c0:44:78:c2:81:32:32:61:
                    0d:93:4b:58:72:94:d8:2b:6d:08:e5:4b:b6:09:c8:
                    d8:61:6d:a0:25:5d:3a:bb:f2:3c:0d:a1:3b:5c:6e:
                    78:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:94:36:69:50:78:F4:7E:8F:BD:42:63:CE:6B:16:4D:CB:29:D0
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8eb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ce:95:af:7b:57:4a:96:09:8f:b9:b3:b9:ab:e1:89:48:32:26:
         56:aa:52:2d:fa:8c:87:ff:c4:5f:5b:1e:d9:db:fa:5d:49:9a:
         8b:80:e0:ef:a0:91:35:8b:ba:4b:7a:57:46:21:d1:04:df:38:
         df:64:1b:fc:82:2d:49:31:e8:09:2b:ee:95:5e:c9:b2:82:fe:
         33:1f:75:c8:3a:23:7b:d3:b3:a1:7d:1d:66:02:f7:e8:ce:b0:
         c9:d3:f1:ee:22:de:e6:00:21:f4:20:e5:6c:59:9d:b2:ef:86:
         6c:ec:9d:36:b0:f4:66:b5:f9:11:66:3a:3e:67:00:39:60:56:
         6f:44:32:44:86:50:f4:90:1c:6c:49:8c:10:0f:03:6f:f5:b0:
         b0:f5:58:e8:5c:3f:d9:ea:ef:01:77:0a:e4:22:42:c6:05:fc:
         65:04:4a:eb:80:03:40:b2:53:85:a7:e2:4b:60:bd:e9:ea:fa:
         5e:d7:44:69:d2:54:44:99:3f:80:5c:c6:08:51:e1:a2:96:d1:
         fd:88:4d:71:cc:82:fc:bd:8b:f8:09:45:01:46:a8:2d:9e:1b:
         bf:91:d8:38:97:b2:1b:77:d0:6a:a3:c4:ea:a3:96:17:f0:04:
         98:f4:c9:50:2a:63:e7:ad:a7:aa:4c:fa:df:6a:be:92:b4:50:
         92:4a:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:41:06 2025 by rpki-client