Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          rctfmPsZ2ZKRuQhqRsqAB4Preg7ig4DOPR47W2LhIUY=
Subject key identifier:   8E:C6:C3:CA:3F:9B:E9:35:9D:A0:9D:51:D1:8A:7D:9C:65:77:A5:24
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       673E0B03FBF17E00D4D010902E8F6AD3A2148D89
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Mon 26 Feb 2024 12:08:46 +0000
ROA not before:           Mon 26 Feb 2024 12:03:46 +0000
ROA not after:            Mon 24 Feb 2025 12:08:46 +0000
asID:                     200676
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3e:0b:03:fb:f1:7e:00:d4:d0:10:90:2e:8f:6a:d3:a2:14:8d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:46 2024 GMT
            Not After : Feb 24 12:08:46 2025 GMT
        Subject: CN=8EC6C3CA3F9BE9359DA09D51D18A7D9C6577A524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:4c:f4:ea:3f:6d:27:b3:e1:8e:72:1d:75:
                    65:3c:68:32:65:c0:10:17:da:c4:2b:bd:15:70:6d:
                    c9:c8:e4:e6:34:62:5e:ff:e3:f3:b7:fb:5e:6a:8e:
                    04:65:de:f4:8f:2e:ea:df:e3:4a:9f:14:8e:99:26:
                    aa:c8:3e:84:7a:2d:e2:a3:21:f7:fd:e0:4b:2b:43:
                    3f:72:64:b0:9a:99:86:5c:96:c2:43:47:31:f3:ff:
                    9e:5f:58:5f:a4:8d:fd:14:15:f7:53:ff:8f:40:56:
                    22:56:c3:89:be:9d:0b:79:6d:78:78:33:29:8c:07:
                    2f:d3:a5:69:ae:70:5c:83:ce:3b:ae:32:cb:5a:52:
                    ed:c9:22:08:95:04:c9:de:5c:1d:ea:96:47:f1:e6:
                    ce:c6:7f:79:17:60:f6:94:2a:d2:69:bc:9e:f7:20:
                    01:c5:28:97:5e:2c:79:bf:81:e2:6b:a7:5e:5d:a6:
                    59:1a:79:a0:a6:ac:bc:53:c6:17:84:1b:fa:a0:35:
                    5d:6c:9b:a9:32:5b:b7:03:10:8a:b0:b4:e4:ea:0a:
                    7e:e4:73:e4:15:79:cd:c8:fb:fe:d0:ff:f2:21:7b:
                    28:ee:e6:03:a5:9b:51:21:78:a0:fd:68:51:76:3a:
                    d2:05:38:43:2e:d5:71:68:97:3f:f1:52:99:06:38:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C6:C3:CA:3F:9B:E9:35:9D:A0:9D:51:D1:8A:7D:9C:65:77:A5:24
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:9a:17:d0:0d:14:71:b5:83:6c:60:85:49:a6:c2:98:e0:
         ca:51:8e:c1:23:69:b5:f2:27:b5:2e:6c:19:7e:01:af:77:d0:
         c1:a1:cc:73:32:87:a1:31:26:fb:ef:fa:2d:d3:62:b0:81:0c:
         42:59:ce:9e:97:1b:36:68:5d:99:b6:93:64:34:ec:26:72:3a:
         da:11:75:4b:87:2c:49:26:dd:01:fc:ce:71:83:0b:51:de:2b:
         f7:9f:2f:02:19:f7:7e:c1:b3:bd:41:d3:0d:ac:ef:bd:be:df:
         db:25:94:de:63:15:fe:7b:63:29:89:00:a2:8f:d6:e6:53:d3:
         f6:f3:76:94:97:31:45:b3:9f:51:a0:f3:56:23:da:e3:67:3e:
         a6:d5:ec:24:0a:5c:ee:40:f7:6f:b6:0c:9e:5b:e0:ee:52:5c:
         96:5f:29:6f:8c:e2:90:d4:a0:72:b5:99:83:42:d8:82:cd:c7:
         05:08:b2:1b:fa:10:63:6c:17:f1:fd:f4:43:00:31:51:33:23:
         bb:da:75:b6:6a:98:d4:50:e8:72:6c:62:c8:e1:b0:4b:8d:cc:
         a3:c2:0a:42:dd:36:f1:80:d9:d4:da:56:a0:d4:fb:26:2f:f9:
         dd:ab:7e:c5:d1:f9:da:e8:49:15:17:af:02:d2:cc:f8:a8:78:
         ec:1c:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:27 2024 by rpki-client on console-fra.rpki-client.org