Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa (raw, json)
Hash identifier:          w2jBkF3hLaSy125WFn1fE9WUZO76NNL5DFDhzsNBLm0=
Subject key identifier:   A9:3E:8E:3A:BE:AA:1B:19:43:2D:E5:6A:15:80:2F:62:EA:EB:83:3A
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       1FD60AE774945F3B11E186C13DEDEC3B2E14D7B1
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa
Signing time:             Mon 26 Feb 2024 12:08:46 +0000
ROA not before:           Mon 26 Feb 2024 12:03:46 +0000
ROA not after:            Mon 24 Feb 2025 12:08:46 +0000
asID:                     210645
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d6:0a:e7:74:94:5f:3b:11:e1:86:c1:3d:ed:ec:3b:2e:14:d7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:46 2024 GMT
            Not After : Feb 24 12:08:46 2025 GMT
        Subject: CN=A93E8E3ABEAA1B19432DE56A15802F62EAEB833A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:18:24:32:65:24:84:30:c0:c1:4f:48:46:
                    2f:9e:ed:48:46:5e:8f:35:b9:f2:40:ca:db:63:b6:
                    2d:9a:79:34:23:7c:7c:37:29:e9:dd:1e:fd:28:4e:
                    e7:cf:af:88:c1:71:26:d6:15:70:84:c9:ce:87:a8:
                    d3:b5:45:1f:40:87:2e:eb:26:2c:ce:e5:cb:05:fd:
                    77:3d:c3:28:c6:f1:77:22:8d:81:04:78:cd:40:dc:
                    2a:fb:cb:7a:8f:93:a9:0a:f0:0d:97:2a:1e:85:a1:
                    92:cc:c8:63:6e:e5:e1:38:47:99:c0:fb:1a:d8:7d:
                    90:5a:4f:b3:d6:e9:f2:7b:68:b9:3f:5d:48:ed:1d:
                    c6:96:af:03:f8:db:35:23:fd:c3:ed:86:2b:b4:53:
                    72:12:35:31:09:ef:3d:7c:90:10:3a:c4:6e:30:df:
                    d2:4c:eb:a2:7e:3c:61:18:ae:7c:51:a0:aa:b7:02:
                    96:a0:3d:81:41:36:db:4b:e0:15:b2:9c:eb:c8:e6:
                    09:a9:78:1f:d7:cf:30:b4:34:b4:6a:f6:3a:05:06:
                    7f:7f:81:fa:9b:f3:be:e9:67:ba:b8:b5:8a:5d:3f:
                    3a:6c:4a:8e:ee:d4:08:7b:45:88:27:84:d6:c5:1a:
                    ee:d5:c7:4d:39:8b:1d:f7:7b:07:eb:bc:cc:37:fb:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3E:8E:3A:BE:AA:1B:19:43:2D:E5:6A:15:80:2F:62:EA:EB:83:3A
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:0a:f6:06:d1:ee:13:72:7a:2c:88:8c:36:72:e4:ba:6a:2b:
         5d:a7:18:ab:97:f6:ee:ca:f5:6e:bd:29:aa:79:c9:5f:78:6f:
         9f:72:96:4b:e5:1a:da:a5:28:7f:06:b9:74:ff:3c:0e:88:1c:
         32:8d:dd:7d:f9:36:75:56:a8:ca:83:a1:cb:fe:b6:24:b3:27:
         e3:12:8e:7c:ed:fc:a9:93:dd:9c:31:8e:b9:d8:c5:40:4a:16:
         07:e8:f1:29:50:d2:22:d4:c7:40:ed:1d:48:1e:c8:b9:91:c3:
         f1:63:48:d9:23:5c:37:c6:10:14:a4:56:73:d0:94:50:a1:62:
         30:bf:be:fa:34:ff:97:a9:d5:6f:a1:38:86:63:ad:76:3f:aa:
         75:91:1b:32:9d:d5:34:c0:5b:4e:ed:7e:46:01:8c:e2:34:0f:
         3c:e7:12:37:f4:7b:04:9b:b7:89:26:c0:84:35:eb:6a:93:64:
         28:bd:6d:37:74:76:fd:52:cc:f5:e3:cc:30:a4:5a:c7:7c:7b:
         28:92:80:50:5c:cf:78:4f:a9:37:db:39:70:86:f6:b5:4f:49:
         78:a5:73:f5:51:fa:b0:b0:94:59:cc:c0:15:d6:da:db:05:e3:
         fd:a1:59:44:31:20:46:64:3e:b2:64:34:12:23:34:65:9e:7e:
         d0:bd:58:77
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUH9YK53SUXzsR4YbBPe3sOy4U17EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4
MEU3RTVFQTAeFw0yNDAyMjYxMjAzNDZaFw0yNTAyMjQxMjA4NDZaMDMxMTAvBgNV
BAMTKEE5M0U4RTNBQkVBQTFCMTk0MzJERTU2QTE1ODAyRjYyRUFFQjgzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvBgkMmUkhDDAwU9IRi+e7UhG
Xo81ufJAyttjti2aeTQjfHw3KendHv0oTufPr4jBcSbWFXCEyc6HqNO1RR9Ahy7r
JizO5csF/Xc9wyjG8XcijYEEeM1A3Cr7y3qPk6kK8A2XKh6FoZLMyGNu5eE4R5nA
+xrYfZBaT7PW6fJ7aLk/XUjtHcaWrwP42zUj/cPthiu0U3ISNTEJ7z18kBA6xG4w
39JM66J+PGEYrnxRoKq3ApagPYFBNttL4BWynOvI5gmpeB/XzzC0NLRq9joFBn9/
gfqb877pZ7q4tYpdPzpsSo7u1Ah7RYgnhNbFGu7Vx005ix33ewfrvMw3+7kTAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUqT6OOr6qGxlDLeVqFYAvYurrgzowHwYDVR0j
BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3
NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMTMwMzYzNDM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQBkCvYG0e4TcnosiIw2cuS6aitdpxirl/buyvVu
vSmqeclfeG+fcpZL5RrapSh/Brl0/zwOiBwyjd19+TZ1VqjKg6HL/rYksyfjEo58
7fypk92cMY652MVAShYH6PEpUNIi1MdA7R1IHsi5kcPxY0jZI1w3xhAUpFZz0JRQ
oWIwv776NP+XqdVvoTiGY612P6p1kRsyndU0wFtO7X5GAYziNA885xI39HsEm7eJ
JsCENetqk2QovW03dHb9Usz148wwpFrHfHsokoBQXM94T6k32zlwhva1T0l4pXP1
UfqwsJRZzMAV1trbBeP9oVlEMSBGZD6yZDQSIzRlnn7QvVh3
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org