Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          urEAvY+WLFgpAnFT8jaa7b6yy2wpz9DABNTtNIVWERA=
Subject key identifier:   73:A8:7B:44:31:37:CD:2D:A6:C7:5A:58:8E:65:A3:90:14:9E:00:F2
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       7582B4B6351AE1B469908FBC49282E797ED7C21C
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Mon 26 Feb 2024 12:08:47 +0000
ROA not before:           Mon 26 Feb 2024 12:03:47 +0000
ROA not after:            Mon 24 Feb 2025 12:08:47 +0000
asID:                     200454
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:82:b4:b6:35:1a:e1:b4:69:90:8f:bc:49:28:2e:79:7e:d7:c2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:47 2024 GMT
            Not After : Feb 24 12:08:47 2025 GMT
        Subject: CN=73A87B443137CD2DA6C75A588E65A390149E00F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:94:d5:09:5c:95:38:00:a4:76:80:9c:50:5c:
                    0a:fc:e4:a2:54:ce:ef:06:61:b4:1d:c0:9e:2a:33:
                    f1:86:01:33:aa:76:0b:67:d6:87:27:ea:80:64:ca:
                    65:7f:96:e6:e2:fc:e7:e7:dc:19:a0:5b:09:de:26:
                    8b:1a:35:4f:6a:b5:03:27:db:ad:d9:53:71:8a:ce:
                    e5:a0:6c:e8:d1:ef:a7:a3:ca:57:c6:cf:12:be:a4:
                    a9:57:e3:21:e8:3e:fb:fb:3b:bc:82:0b:36:66:2f:
                    b2:7b:a1:70:fd:a0:87:70:e9:30:a8:43:dd:87:01:
                    f3:52:98:5c:19:eb:1d:38:30:6b:5d:8d:f4:56:48:
                    85:61:49:7a:68:36:56:bc:53:c8:ad:d4:38:00:e0:
                    a6:7e:8a:18:68:a7:38:db:fc:d0:77:de:12:de:e3:
                    5b:c4:6c:90:dc:2b:fc:3c:ff:7e:ea:b2:ab:6b:92:
                    7d:11:f3:90:92:6c:55:f3:e1:62:3b:4b:17:6a:cf:
                    69:ca:3c:84:79:fd:5c:ff:ce:52:d1:36:37:ed:1e:
                    b8:96:f3:d0:02:89:c7:6b:67:18:02:cb:1b:76:eb:
                    ae:e5:b1:1c:71:f7:c1:18:5a:f7:97:f4:f1:3f:46:
                    b0:f9:ad:ca:ec:bd:c4:d3:75:a3:ce:14:b6:85:13:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:7B:44:31:37:CD:2D:A6:C7:5A:58:8E:65:A3:90:14:9E:00:F2
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:86:9c:e6:d2:2c:bd:31:d0:d0:f4:66:73:97:f1:41:97:
         b0:1b:ea:cc:80:c5:e2:b9:71:b4:fe:ef:3f:7d:88:ff:43:71:
         22:db:67:5c:65:6c:6c:df:6b:c7:d0:cc:b0:f6:64:31:0f:01:
         10:6e:76:e6:41:7b:84:13:72:c8:72:ea:08:da:31:4a:5c:e3:
         7f:ea:19:58:10:2c:6e:5f:3e:9e:43:ee:73:1d:35:15:cd:d6:
         8a:fc:d0:81:7e:11:be:5d:0b:ea:2c:62:f0:46:73:26:d6:a3:
         ee:03:3b:f9:0f:ff:da:36:89:12:57:ab:f4:92:9a:1d:c0:76:
         64:bc:5a:2f:cf:ba:a5:1a:cd:c8:f1:05:f4:b2:21:f9:6b:67:
         cd:a8:95:fa:50:72:0e:82:e5:7a:a5:72:a3:06:57:8d:a9:b1:
         2d:a6:e9:a0:bc:01:58:76:11:e3:5e:26:2f:8b:c4:13:6f:87:
         9f:fe:da:5e:b5:12:29:8a:f8:08:26:86:09:9f:c4:da:dc:d1:
         e4:de:d9:f1:b4:b7:d2:a7:3b:b0:5d:02:bd:85:bb:92:d5:32:
         22:d4:53:2c:cd:5d:ef:a3:8b:09:c7:ef:9d:9d:77:b2:df:60:
         e5:13:2e:ad:4c:48:c2:4d:76:fa:71:0f:79:19:a4:ff:bc:f4:
         d5:99:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:12:04 2024 by rpki-client on console-ams.rpki-client.org