Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier:          1lgQbRXqW3Hw8CCbmu9twdaNGrnr8DjuuLOwdxoTLbI=
Subject key identifier:   06:D2:AF:83:44:48:3B:1C:3F:B0:AE:11:85:B7:B6:CD:AE:A6:FA:0A
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       08F092FAE3F07F3DDF473AB69E2EFC81011E3948
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa
Signing time:             Mon 26 Feb 2024 12:08:45 +0000
ROA not before:           Mon 26 Feb 2024 12:03:45 +0000
ROA not after:            Mon 24 Feb 2025 12:08:45 +0000
asID:                     203619
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f0:92:fa:e3:f0:7f:3d:df:47:3a:b6:9e:2e:fc:81:01:1e:39:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:45 2024 GMT
            Not After : Feb 24 12:08:45 2025 GMT
        Subject: CN=06D2AF8344483B1C3FB0AE1185B7B6CDAEA6FA0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:11:32:f4:97:fa:a3:cb:5f:b9:b2:5e:b8:33:
                    7f:bc:f1:c6:9a:f0:87:d3:e5:a3:33:76:6c:35:b4:
                    88:23:06:c8:c3:50:c3:5a:44:a3:dc:4b:19:75:a7:
                    1b:03:1e:88:da:36:4d:04:92:36:69:5f:bb:14:a6:
                    a5:13:25:88:fa:4a:bd:87:0d:f3:d1:75:a7:7f:72:
                    94:81:f8:96:2f:c0:15:13:6f:e3:a9:bb:03:7e:52:
                    5f:be:b9:80:bc:0b:8c:14:4a:bb:9f:00:26:e7:fb:
                    cd:74:75:68:81:5e:0d:ba:c5:77:64:e1:07:45:a8:
                    70:14:74:63:29:f6:b1:ff:a3:b4:69:d3:64:6b:3b:
                    7f:38:1a:e4:00:9f:ac:7e:43:55:03:54:34:71:67:
                    b7:c0:c8:01:ef:ba:35:28:a2:e5:f7:3e:00:10:e0:
                    f7:e3:79:11:82:65:bc:0e:a0:92:ae:04:38:9c:c6:
                    c4:ed:67:ef:7e:7c:dd:58:37:89:1c:7c:f7:9b:ff:
                    c2:4d:da:b1:a9:bd:34:74:61:51:2a:89:6b:9a:c6:
                    af:94:2f:97:87:75:d4:8d:7b:26:83:9f:88:02:01:
                    b9:ed:b6:ff:c7:2c:c8:1b:52:15:96:6c:7d:53:5f:
                    d6:2f:d9:77:68:1d:68:6b:02:a8:86:3a:7b:89:61:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D2:AF:83:44:48:3B:1C:3F:B0:AE:11:85:B7:B6:CD:AE:A6:FA:0A
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:e0:b1:f3:ed:25:4c:60:45:81:59:b9:5f:5f:66:b3:7e:
         98:82:8c:81:30:60:ae:ac:48:a7:3f:f2:d2:06:8a:af:98:f5:
         10:6d:52:58:dd:70:e8:6c:63:b6:ee:cc:06:5f:8a:98:94:2a:
         9b:9b:3b:a5:79:12:6c:af:93:ac:54:a7:4a:2a:b9:ff:7f:da:
         14:bb:48:f5:1e:c1:5c:f0:82:26:a9:88:08:a9:67:bc:44:fd:
         39:a5:42:34:22:d5:fd:78:f6:b9:f4:cb:6f:6d:37:0f:f7:4c:
         48:74:ab:46:f0:1e:1c:9c:ee:64:e2:da:86:59:6e:3e:00:3c:
         f1:63:ba:59:95:65:47:c0:29:3c:0f:4c:e4:33:d6:39:b2:76:
         e7:51:47:ee:9a:5e:74:a5:e3:a3:de:ff:39:0c:4d:64:61:d3:
         f4:1b:cd:76:8a:7b:13:aa:73:13:68:45:d0:fb:5f:8c:3c:0e:
         ec:33:cd:a8:5d:b2:0e:4a:87:80:b9:d4:2f:a5:0f:3a:23:09:
         9b:7b:ff:c5:ac:08:e2:6d:e1:80:76:02:f1:24:62:bb:36:a2:
         b5:f5:a6:4a:6d:73:56:4a:b8:a1:ae:b4:15:24:26:7e:38:f0:
         87:4a:de:83:89:33:dc:a7:60:6f:76:ba:0e:2e:33:de:a0:e8:
         0a:3f:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:18 2024 by rpki-client on console-fra.rpki-client.org