Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (raw, json)
Hash identifier:          LHg5w//MypRTyAA2aCuwDXiQ0oRtS9qDRqP2j+SyqbU=
Subject key identifier:   8A:49:52:9B:9B:AE:7E:EC:C2:8A:35:DD:15:38:24:F9:31:47:8B:E5
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       71F5865F453BBCC22759439795489BD1ECF3236D
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa
Signing time:             Mon 26 Feb 2024 12:08:46 +0000
ROA not before:           Mon 26 Feb 2024 12:03:46 +0000
ROA not after:            Mon 24 Feb 2025 12:08:46 +0000
asID:                     200952
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f5:86:5f:45:3b:bc:c2:27:59:43:97:95:48:9b:d1:ec:f3:23:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:46 2024 GMT
            Not After : Feb 24 12:08:46 2025 GMT
        Subject: CN=8A49529B9BAE7EECC28A35DD153824F931478BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:83:d2:23:f4:6c:50:62:4b:97:20:75:34:
                    cf:66:2a:2b:77:4f:50:7a:08:40:31:09:f6:a8:b4:
                    02:bf:22:bf:ff:9e:e6:74:7c:75:4c:b0:96:bd:db:
                    15:c5:72:64:e3:7d:c6:b8:3f:46:6c:7f:90:96:ef:
                    29:82:91:bf:57:07:7c:83:6d:90:f7:c3:79:c3:1b:
                    de:3c:2f:27:8c:73:8c:a9:c0:f9:31:5e:10:1c:31:
                    96:87:bc:91:1c:a7:ab:e2:d6:ba:0d:dd:76:2a:42:
                    6e:0c:8d:93:18:aa:61:00:ab:27:e7:fe:ab:98:52:
                    46:d7:d2:94:88:5b:03:21:eb:b3:e6:8a:37:65:b6:
                    2c:c8:07:f3:3b:c1:05:16:77:8c:dc:11:72:31:d4:
                    c1:7c:4d:a1:7d:d3:de:b2:6b:f8:ac:8c:0f:6f:44:
                    4f:d5:c6:74:8f:22:4c:45:4e:f9:3a:bb:1f:fb:a1:
                    92:e6:48:00:a0:2f:8c:97:0c:79:0f:c8:d3:c6:b1:
                    b3:5c:e7:71:1c:0b:e0:1f:6c:54:ba:e7:74:64:f7:
                    62:7b:87:6c:8c:0f:7b:fc:0c:92:07:c1:e4:95:d2:
                    55:0e:b9:15:fd:c1:66:73:2f:19:66:ad:ce:08:d7:
                    4d:47:61:7b:da:54:0a:b9:9e:07:6b:ab:e8:d4:b5:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:49:52:9B:9B:AE:7E:EC:C2:8A:35:DD:15:38:24:F9:31:47:8B:E5
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:51:c6:49:60:c9:dd:fe:b6:36:91:11:3c:74:e1:46:15:ed:
         d3:29:74:9f:5f:fe:89:ce:e8:81:3c:39:bb:26:aa:8f:f0:c0:
         3c:18:93:f7:e6:8f:48:18:aa:69:d2:df:f3:72:00:fe:1f:70:
         da:e3:a4:c3:83:10:4d:80:f7:52:5d:b9:1d:67:03:44:46:bd:
         90:63:b7:36:f5:d8:ed:2e:3d:ea:6a:72:4b:af:a9:dd:58:0c:
         78:f3:55:cc:6b:15:ae:ad:24:81:b2:24:49:28:b5:39:36:6a:
         a8:19:db:75:8d:52:a3:d6:17:97:87:9a:ed:2e:c3:7a:f4:ac:
         68:ab:a7:1f:7d:ac:fe:2a:17:06:ce:36:79:29:89:93:5b:6b:
         49:fd:fb:2b:fc:d0:ab:63:71:de:ec:05:8d:ce:cf:a5:6a:e5:
         7d:b3:82:e8:6d:14:84:99:27:1d:17:b8:03:96:b5:3e:fb:18:
         49:d1:40:54:74:8f:3e:80:c8:5f:2b:f6:d5:ef:41:b7:49:3d:
         7a:0a:c1:de:e7:01:95:d4:e2:1c:a4:5b:d9:8a:52:16:ee:86:
         0d:af:7f:50:7a:70:25:23:00:77:f5:dd:4a:28:7c:0b:dd:86:
         f4:6a:4e:77:68:9b:1e:23:f6:b8:20:9e:50:c4:c1:a9:19:d4:
         bf:b1:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org