Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier:          5kpACOiXHl/aZpKQBfg2NkN4RC7yLnlrLBRLcrY4Fhw=
Subject key identifier:   EC:AB:DC:01:21:AB:A2:58:A4:96:0E:77:94:C9:96:87:EC:0D:E0:C1
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       0E531E51D59220F2C51390BD29644BEC019196A7
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa
Signing time:             Mon 26 Feb 2024 12:08:46 +0000
ROA not before:           Mon 26 Feb 2024 12:03:46 +0000
ROA not after:            Mon 24 Feb 2025 12:08:46 +0000
asID:                     210667
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:53:1e:51:d5:92:20:f2:c5:13:90:bd:29:64:4b:ec:01:91:96:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:46 2024 GMT
            Not After : Feb 24 12:08:46 2025 GMT
        Subject: CN=ECABDC0121ABA258A4960E7794C99687EC0DE0C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:48:5d:0c:23:28:c2:a0:de:3d:89:d4:32:
                    6b:df:8d:30:3a:a9:61:3e:03:e8:8e:7d:2d:9c:e8:
                    4d:59:41:8a:ef:dc:04:2c:b4:d6:4e:0a:a1:dd:c2:
                    ea:db:d8:e4:69:d2:2f:60:15:eb:ca:f4:83:7a:ab:
                    8f:a9:59:9f:94:9c:6a:4a:b3:bc:58:ec:66:70:10:
                    96:54:a0:57:07:42:39:42:d7:cb:65:d2:d5:d4:71:
                    c3:75:ea:e9:ee:60:3d:50:4a:06:92:d7:7d:57:1a:
                    c1:74:c7:fd:13:6a:76:f0:d9:ec:24:fd:a1:09:28:
                    b0:39:44:a2:52:3b:6d:3a:7c:a6:7d:e0:ea:db:5f:
                    5b:f7:0f:51:54:2b:7d:92:56:72:28:fe:2e:d6:e0:
                    29:86:c5:8f:8b:74:15:23:b9:a9:23:08:c8:d9:69:
                    66:92:a7:c5:d5:ed:b4:d2:1c:f0:48:41:1a:b6:ed:
                    f2:a0:aa:41:6c:12:f6:53:ae:ee:1c:b0:98:35:35:
                    ec:94:a2:49:88:17:42:8d:51:e2:a6:0b:de:15:28:
                    ea:05:b2:9c:56:5b:d9:ef:f4:61:00:19:18:35:1b:
                    d2:5b:fd:1e:73:bc:23:b9:ad:ea:f5:17:23:da:ae:
                    46:a5:5a:6e:fd:24:04:a7:71:71:1b:dd:6f:14:4d:
                    fa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AB:DC:01:21:AB:A2:58:A4:96:0E:77:94:C9:96:87:EC:0D:E0:C1
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:f2:11:5e:ab:cd:fc:66:8c:67:4a:04:c7:1b:d1:4f:cb:c0:
         11:91:7a:7f:c6:4f:94:02:64:97:2d:4f:fb:74:b2:c9:40:4c:
         69:de:f9:21:e6:c8:29:d6:c9:f3:ab:7b:69:3e:54:c7:dd:c5:
         aa:90:89:7e:63:bc:20:19:f0:5e:e3:66:88:9e:e1:93:09:17:
         fb:f5:26:6e:e6:d8:c6:28:ae:7f:a3:39:88:4f:b3:65:f1:ab:
         8f:87:6a:6c:70:a2:3d:6e:92:9e:ae:d1:29:c3:94:08:d9:37:
         4c:fd:38:e9:14:14:80:5a:13:58:8d:67:f9:c2:f6:30:ce:0d:
         d2:10:a2:9b:d0:8b:5f:ac:be:cd:3b:4a:f5:74:4f:5d:cf:03:
         43:42:3e:38:c0:25:0d:53:eb:88:ce:e9:79:dc:fc:2b:e9:a6:
         b9:f8:a5:be:ec:69:c6:20:ff:ca:e7:b0:92:a1:0c:c5:6b:2a:
         13:f3:02:2e:61:0c:b9:c0:61:a9:46:98:7b:08:96:a1:7e:a6:
         79:03:56:8b:c8:20:3d:ef:de:f7:e2:b9:79:45:b6:0d:de:6f:
         09:b0:4e:3b:22:57:ee:6c:5e:64:c6:d9:dc:f9:bd:79:6d:cf:
         04:0f:fc:81:c9:cb:3c:16:91:9e:2f:46:e0:2a:d7:0e:6b:dc:
         79:aa:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:36:40 2024 by rpki-client on console-fra.rpki-client.org