Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier:          LdDzbAf4Hx5fps0UMsvX9SZsrVVLzyN44t93xf+Vncs=
Subject key identifier:   6D:49:0E:C9:F6:9A:01:86:9F:33:54:5E:FD:11:A0:58:41:17:19:F2
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       013ED4D27B8363708C1B763C3E58E479FA71759A
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa
Signing time:             Mon 26 Feb 2024 12:08:45 +0000
ROA not before:           Mon 26 Feb 2024 12:03:45 +0000
ROA not after:            Mon 24 Feb 2025 12:08:45 +0000
asID:                     211380
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:d4:d2:7b:83:63:70:8c:1b:76:3c:3e:58:e4:79:fa:71:75:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:45 2024 GMT
            Not After : Feb 24 12:08:45 2025 GMT
        Subject: CN=6D490EC9F69A01869F33545EFD11A058411719F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:38:a9:5e:9c:d5:cf:86:18:1c:ab:10:8b:
                    ba:85:ce:8e:db:37:ed:5e:d6:36:0b:37:d8:53:56:
                    ed:6c:14:69:88:ed:23:f3:58:99:50:f1:25:ca:01:
                    38:30:2b:bd:69:74:60:1a:87:6e:eb:25:01:e4:00:
                    ee:cd:e1:6e:86:b1:04:48:bc:7b:63:bf:37:43:b5:
                    ae:73:14:2a:4b:4e:00:97:95:18:23:20:4c:e2:c3:
                    92:95:05:19:2b:97:b8:3e:40:d9:93:34:d3:2e:fd:
                    26:46:aa:d6:9a:33:34:0d:01:61:45:d2:78:f7:13:
                    84:d0:0d:d6:a6:e7:2d:3b:dc:9c:c6:62:45:32:4b:
                    05:f1:d8:70:77:33:e7:47:e5:68:aa:9d:26:78:41:
                    1f:9d:44:59:e5:52:0f:6d:91:ba:9e:55:bb:a3:e9:
                    0a:12:4c:43:ff:73:b1:1c:a7:a5:43:d9:06:be:b4:
                    b0:de:1c:3e:be:e1:28:5a:d8:9e:5a:f3:eb:51:cb:
                    c9:dc:12:a8:41:16:82:9c:73:8e:c4:31:9e:05:cd:
                    6e:e7:61:5c:fc:6a:79:5e:b6:66:2c:0f:27:2d:dc:
                    b3:04:94:3d:be:4a:17:a6:4f:16:7e:93:7b:59:ca:
                    b2:10:c8:5c:41:25:60:52:76:33:bb:1c:6e:ff:c2:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:49:0E:C9:F6:9A:01:86:9F:33:54:5E:FD:11:A0:58:41:17:19:F2
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:03:2b:23:27:b3:42:63:4e:4a:f9:09:d6:e9:e7:29:ba:1a:
         53:4d:8b:fa:89:52:08:fa:b0:74:ae:fa:79:cf:25:a6:69:99:
         05:56:5d:1b:e8:9f:aa:85:49:7b:a7:72:a5:e2:ac:52:39:44:
         01:46:04:5b:84:b7:a9:2d:0e:89:49:1c:e3:da:33:8e:41:1b:
         8b:9a:85:86:b8:84:84:12:e3:a7:d8:52:70:ba:89:d7:72:a6:
         d6:85:0b:db:3a:be:79:a3:12:11:d8:00:a7:1f:ee:19:1c:89:
         19:32:43:80:27:40:d9:a2:9c:68:7b:d8:2f:27:22:41:a7:49:
         06:39:67:ff:8b:30:9b:11:1f:85:bb:24:b6:65:7c:b0:44:6b:
         12:14:5f:d5:0a:14:61:4c:0a:17:b8:8a:ed:9d:d5:30:76:dc:
         3c:5b:78:6a:a2:51:e5:94:54:07:5d:6e:8d:8c:fb:8c:2d:ba:
         76:a6:27:9c:c8:87:23:3a:11:9b:e3:58:d4:eb:bb:06:21:78:
         80:f0:cc:16:fd:f6:24:3c:bf:80:bb:d4:15:fe:0c:c2:8c:12:
         57:db:77:6e:68:77:1a:78:3a:2c:33:c4:c0:eb:b4:02:b2:60:
         49:aa:83:c9:84:10:3f:05:1b:74:00:94:3b:a7:21:c7:46:9d:
         f5:a2:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:15 2024 by rpki-client on console-ams.rpki-client.org