Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          73oEGQa3HjZBl8cmpfTHvlxTFK5n9BFX7ZVaH1YIdNo=
Subject key identifier:   F1:79:65:B7:A1:EF:33:63:5E:86:6A:07:45:22:D5:67:EF:E3:C6:89
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       0C4B1F8425F7F16A564C49AD939949ADF2A708C5
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 26 Sep 2026 01:49:14 +0000
ROA not before:           Sat 26 Sep 2026 01:44:14 +0000
ROA not after:            Sat 25 Sep 2027 01:49:14 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba7e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 16:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4b:1f:84:25:f7:f1:6a:56:4c:49:ad:93:99:49:ad:f2:a7:08:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Sep 26 01:44:14 2026 GMT
            Not After : Sep 25 01:49:14 2027 GMT
        Subject: CN=F17965B7A1EF33635E866A074522D567EFE3C689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a3:02:4a:33:71:2e:3a:0d:46:11:9e:ca:a5:
                    c3:14:01:1a:26:7e:d8:12:2a:f1:f8:6f:26:39:ff:
                    db:d7:8b:65:7c:b8:17:0e:5f:83:56:76:ff:bc:e3:
                    3e:dd:b9:ac:d8:67:3c:9c:99:66:e3:99:db:50:e7:
                    5d:31:74:66:1f:2f:45:c9:44:4d:88:62:69:31:47:
                    3e:9e:00:75:ef:0a:fc:b9:98:09:8a:81:b3:fa:39:
                    bb:88:a1:b6:09:69:10:d0:95:06:4e:83:0b:95:58:
                    09:a7:99:05:91:b7:1e:a3:63:7e:7a:74:ed:d4:d1:
                    42:a4:13:f5:9b:9b:e8:d2:4e:a8:0a:ff:4a:ed:33:
                    5c:c4:fb:e1:60:10:45:03:91:c5:6a:b4:7c:a4:6c:
                    21:e5:2d:b0:91:6d:f3:f0:44:77:bc:7e:c0:c6:7d:
                    ea:7a:3e:9e:46:1d:7b:77:1c:da:7d:f4:24:33:9c:
                    de:ba:a6:84:b9:5e:70:b1:67:aa:52:6d:c7:19:ba:
                    fb:69:3d:5e:00:f1:68:7b:88:61:88:05:ed:ea:f1:
                    51:fe:61:6e:99:ce:bb:a4:15:22:ad:35:a9:a2:11:
                    25:16:84:a1:f3:ef:ea:e0:63:02:ff:3e:78:7e:26:
                    82:6f:e1:b5:23:b3:14:da:ea:e7:b1:bf:22:4d:80:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:65:B7:A1:EF:33:63:5E:86:6A:07:45:22:D5:67:EF:E3:C6:89
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba7e::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:8f:b4:fe:1d:8e:61:9a:67:07:62:96:62:81:a8:1f:8b:
         b7:93:ec:fd:d8:c8:db:e4:bc:96:ba:05:64:87:08:cf:de:0d:
         e5:d6:cf:24:a0:1c:b4:ea:af:a2:52:1d:29:cf:33:ac:d6:1e:
         e7:83:c0:ba:c6:e7:b9:fb:6f:fb:14:b3:d3:99:0e:8c:4f:6b:
         d9:38:b7:8b:d6:84:c4:24:26:f6:57:b4:88:ab:04:cc:78:ea:
         ce:e5:88:99:7a:5c:cb:06:7f:fa:3c:63:67:9e:78:3c:bc:8c:
         7b:a4:f2:cf:ca:b5:d4:c7:47:2e:84:8b:2b:91:b5:65:48:be:
         bc:bc:4f:e5:1d:93:0f:a2:55:14:85:d9:96:d8:a6:24:9e:53:
         ae:13:7c:78:af:53:91:18:08:4c:c2:b2:52:bc:6d:25:99:d0:
         ba:09:5e:76:91:b2:06:62:d4:3a:89:76:da:43:8e:51:9b:41:
         48:3e:01:0f:f8:08:3b:87:4f:1e:dd:94:bd:af:80:d0:88:ab:
         8e:46:50:de:7a:dc:f1:98:1c:a1:e2:da:87:0b:85:45:a6:1e:
         8d:2b:67:5f:8e:7c:4a:db:25:dd:a2:a5:9e:ba:6d:3e:7f:51:
         7d:39:d4:32:5e:7f:96:92:c8:0e:fe:19:04:71:56:3b:eb:03:
         b9:30:56:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:36:02 2026 by rpki-client