Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa
File:                     323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (raw, json)
Hash identifier:          5GFGBcpbnHArCLWsccSEsO6sZ2NYJkzkbTy81rdk7io=
Subject key identifier:   EA:96:C5:0F:CF:C9:F8:9D:60:EE:0B:AC:6C:DB:9C:86:F1:3B:AE:FA
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       35D3564F7762810F1416AB78074438A1166FB23E
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa
Signing time:             Fri 09 Aug 2024 08:46:53 +0000
ROA not before:           Fri 09 Aug 2024 08:41:53 +0000
ROA not after:            Fri 08 Aug 2025 08:46:53 +0000
asID:                     147137
IP address blocks:        2400:46a0:26::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 15:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d3:56:4f:77:62:81:0f:14:16:ab:78:07:44:38:a1:16:6f:b2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Aug  9 08:41:53 2024 GMT
            Not After : Aug  8 08:46:53 2025 GMT
        Subject: CN=EA96C50FCFC9F89D60EE0BAC6CDB9C86F13BAEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:8f:05:9a:a9:44:a2:52:f2:de:34:8e:93:
                    49:a5:fd:41:92:6f:1f:0c:45:64:0f:86:f4:7b:0b:
                    09:79:13:34:d4:15:02:dd:e1:c0:21:96:7e:d9:67:
                    18:86:11:92:f1:70:17:8f:72:33:b5:3a:1b:d6:da:
                    02:4a:6a:4e:e6:96:57:c1:08:dc:b7:f9:49:12:96:
                    e8:c0:db:84:85:cb:01:5c:e5:3e:7e:1e:84:4b:ed:
                    17:a7:8b:a6:d3:34:e6:de:cf:6e:15:41:44:cc:c0:
                    94:74:1e:3a:1a:83:11:21:65:b6:22:b8:b6:a3:c1:
                    9a:0a:e8:f9:62:0b:7c:db:2d:77:b9:78:09:0a:be:
                    df:b7:ce:5e:ed:47:23:eb:4c:a9:1d:3a:f1:0d:2e:
                    44:27:7c:71:eb:07:f9:81:4c:9f:58:48:7f:6a:6b:
                    b5:14:c8:d5:ce:fa:90:46:28:45:db:d0:94:4e:6d:
                    71:ec:b2:fe:eb:9f:bd:eb:fc:37:16:b7:e8:d8:5e:
                    4e:b6:5f:7f:6e:35:2e:af:c9:07:52:b7:08:33:f5:
                    83:f4:74:c9:70:d0:16:c2:e1:26:70:4d:a0:b2:61:
                    ae:64:dc:f1:4d:10:0a:1e:38:bc:d9:e6:48:6f:a0:
                    43:eb:68:d3:ba:eb:10:39:ca:2b:cc:e7:b4:90:b8:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:96:C5:0F:CF:C9:F8:9D:60:EE:0B:AC:6C:DB:9C:86:F1:3B:AE:FA
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:46a0:26::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:3f:e5:ca:de:52:fb:bb:a4:27:86:1b:e8:b0:0d:ea:96:
         47:27:35:b0:08:9b:45:c6:27:6c:f0:f1:d4:21:47:ae:c5:0a:
         ec:e2:38:86:66:5e:f1:65:28:c2:56:45:e5:0d:1b:29:6c:3a:
         1f:4d:20:4d:c6:07:89:28:c6:ce:32:fb:56:c7:97:ca:51:a2:
         6c:3d:58:f0:22:ad:59:fc:e0:a1:1a:3d:4d:3e:74:a9:fd:04:
         cc:50:6f:3f:b1:ac:0b:60:1a:5a:c6:44:14:19:dd:31:75:66:
         50:ca:1d:05:e8:81:26:51:3f:af:7d:89:77:4f:a2:c2:3c:99:
         7c:59:f2:bd:f2:7b:35:7a:4f:e7:13:12:92:e8:8c:64:f9:11:
         39:78:5a:50:df:bc:e5:4c:99:63:bc:ec:b1:d3:35:65:3b:7b:
         df:db:d5:be:c7:f0:55:5e:33:ad:7b:2b:0d:16:b9:44:21:e2:
         3b:eb:d9:71:14:3f:53:9d:86:45:8f:03:23:f3:5a:94:99:38:
         9a:a5:4f:53:5f:b7:5f:7a:d7:9b:4a:0f:2d:18:6a:2b:7f:22:
         59:bb:c1:7b:be:e8:61:e0:8d:80:fe:90:1e:cf:f0:76:34:08:
         be:87:ff:4e:fa:ec:c1:72:6f:cd:4c:5a:a7:a8:47:13:36:91:
         60:a7:82:5d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNdNWT3digQ8UFqt4B0Q4oRZvsj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz
NzI4Mjk4MDAeFw0yNDA4MDkwODQxNTNaFw0yNTA4MDgwODQ2NTNaMDMxMTAvBgNV
BAMTKEVBOTZDNTBGQ0ZDOUY4OUQ2MEVFMEJBQzZDREI5Qzg2RjEzQkFFRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxI8FmqlEolLy3jSOk0ml/UGS
bx8MRWQPhvR7Cwl5EzTUFQLd4cAhln7ZZxiGEZLxcBePcjO1OhvW2gJKak7mllfB
CNy3+UkSlujA24SFywFc5T5+HoRL7Reni6bTNObez24VQUTMwJR0HjoagxEhZbYi
uLajwZoK6PliC3zbLXe5eAkKvt+3zl7tRyPrTKkdOvENLkQnfHHrB/mBTJ9YSH9q
a7UUyNXO+pBGKEXb0JRObXHssv7rn73r/DcWt+jYXk62X39uNS6vyQdStwgz9YP0
dMlw0BbC4SZwTaCyYa5k3PFNEAoeOLzZ5khvoEPraNO66xA5yivM57SQuNHBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6pbFD8/J+J1g7gusbNuchvE7rvowHwYDVR0j
BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF
RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4
Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i
Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzNjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA
JjANBgkqhkiG9w0BAQsFAAOCAQEAEls/5creUvu7pCeGG+iwDeqWRyc1sAibRcYn
bPDx1CFHrsUK7OI4hmZe8WUowlZF5Q0bKWw6H00gTcYHiSjGzjL7VseXylGibD1Y
8CKtWfzgoRo9TT50qf0EzFBvP7GsC2AaWsZEFBndMXVmUModBeiBJlE/r32Jd0+i
wjyZfFnyvfJ7NXpP5xMSkuiMZPkROXhaUN+85UyZY7zssdM1ZTt739vVvsfwVV4z
rXsrDRa5RCHiO+vZcRQ/U52GRY8DI/NalJk4mqVPU1+3X3rXm0oPLRhqK38iWbvB
e77oYeCNgP6QHs/wdjQIvof/TvrswXJvzUxap6hHEzaRYKeCXQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org