Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa (raw, json)
Hash identifier:          MCVz1dewMUgrPHi2gmr/HyNAqXXFO+WYmgFO0TRTsF4=
Subject key identifier:   5D:62:2C:7E:36:28:72:00:AC:EB:E4:9B:EF:FE:1E:87:6E:B7:C4:4D
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       2A9C5886828FAFA99678D596B8BD261388BBD745
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa
Signing time:             Mon 26 Feb 2024 12:08:46 +0000
ROA not before:           Mon 26 Feb 2024 12:03:46 +0000
ROA not after:            Mon 24 Feb 2025 12:08:46 +0000
asID:                     213163
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 16:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9c:58:86:82:8f:af:a9:96:78:d5:96:b8:bd:26:13:88:bb:d7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:46 2024 GMT
            Not After : Feb 24 12:08:46 2025 GMT
        Subject: CN=5D622C7E36287200ACEBE49BEFFE1E876EB7C44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:eb:e8:2c:23:28:5d:17:be:19:96:43:1c:
                    57:05:04:dc:67:b8:62:1f:94:5d:b1:13:50:c7:eb:
                    04:d8:4a:cc:92:f8:1e:2d:d3:95:1d:f3:0b:21:b6:
                    78:82:a7:11:14:b9:d2:45:70:40:4d:22:c7:a9:81:
                    91:22:1c:59:e5:94:61:c9:0f:1e:cf:07:d0:9e:52:
                    c2:b2:0d:21:72:26:cb:51:d3:0c:f6:53:03:38:eb:
                    02:70:4f:95:b1:c1:cd:4f:b4:4e:da:57:d5:3c:85:
                    df:3b:53:88:e5:a1:35:18:b1:90:05:de:48:02:00:
                    66:5f:21:1e:f6:18:9d:01:dd:ab:7b:40:cc:09:3c:
                    92:58:f3:0c:4f:d6:20:db:dc:eb:2d:3d:88:48:39:
                    7a:24:ac:27:f2:16:8a:d7:ea:c4:e3:0f:2f:3a:25:
                    ea:9e:4a:01:18:a5:03:83:19:8e:3a:f8:02:21:a8:
                    29:58:d3:fa:f9:7f:cd:fb:4d:38:a1:43:d2:93:a5:
                    ca:79:70:12:11:4b:e9:b3:5b:ac:24:7d:fc:d1:4a:
                    5a:34:a4:40:e8:a6:72:0c:15:06:0e:d7:84:34:6d:
                    c8:47:70:be:43:07:c4:71:4f:7a:0d:db:03:a8:57:
                    11:5b:89:b0:ce:16:42:f2:c5:6d:92:91:8e:17:40:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:2C:7E:36:28:72:00:AC:EB:E4:9B:EF:FE:1E:87:6E:B7:C4:4D
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:ac:d1:af:7c:ef:0a:de:ea:e5:a4:e0:77:4a:73:6e:23:3b:
         1b:ef:bc:6d:0f:d9:b9:28:71:91:8a:64:7a:d4:db:c4:6a:8a:
         36:f3:74:0f:3c:65:8d:02:06:96:de:54:09:c1:6a:2f:97:1a:
         01:d9:b7:17:2b:01:62:11:ee:bf:b7:a3:4c:c2:42:88:e5:9a:
         42:be:71:b7:13:b1:7e:8e:b8:3f:21:61:2b:13:60:b1:b0:bf:
         a1:45:3d:e1:e6:b1:a1:ff:3b:c8:89:4a:58:29:45:8c:79:34:
         6d:97:6c:09:70:97:68:3d:af:bf:5b:36:68:1e:54:73:b4:5b:
         d2:64:8f:04:e0:fe:8f:7e:85:5e:a2:cf:e8:f4:36:0e:9e:6e:
         bd:b8:c5:52:7c:70:7a:dc:de:c2:05:37:c5:70:45:db:35:d6:
         07:02:de:9d:db:fe:fb:cf:7f:7e:2d:37:e8:c9:45:5e:a4:80:
         c6:73:c9:b2:1b:d6:94:ea:64:cf:1e:52:f3:9b:5b:74:a1:3a:
         2a:f5:27:d2:f7:7e:db:74:72:15:c6:9e:e9:21:06:b3:16:7a:
         8e:7d:5d:f7:8d:89:5b:e5:11:db:1e:17:51:ef:92:8e:9f:12:
         35:da:2d:70:a4:9c:d5:17:2b:81:c2:43:7b:29:2f:c1:22:11:
         52:fa:91:7b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKpxYhoKPr6mWeNWWuL0mE4i710UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4
MEU3RTVFQTAeFw0yNDAyMjYxMjAzNDZaFw0yNTAyMjQxMjA4NDZaMDMxMTAvBgNV
BAMTKDVENjIyQzdFMzYyODcyMDBBQ0VCRTQ5QkVGRkUxRTg3NkVCN0M0NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hOvoLCMoXRe+GZZDHFcFBNxn
uGIflF2xE1DH6wTYSsyS+B4t05Ud8wshtniCpxEUudJFcEBNIsepgZEiHFnllGHJ
Dx7PB9CeUsKyDSFyJstR0wz2UwM46wJwT5Wxwc1PtE7aV9U8hd87U4jloTUYsZAF
3kgCAGZfIR72GJ0B3at7QMwJPJJY8wxP1iDb3OstPYhIOXokrCfyForX6sTjDy86
JeqeSgEYpQODGY46+AIhqClY0/r5f837TTihQ9KTpcp5cBIRS+mzW6wkffzRSlo0
pEDopnIMFQYO14Q0bchHcL5DB8RxT3oN2wOoVxFbibDOFkLyxW2SkY4XQB0TAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUXWIsfjYocgCs6+Sb7/4eh263xE0wHwYDVR0j
BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3
NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMTMzMzEzNjMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwP/u
MA0GCSqGSIb3DQEBCwUAA4IBAQC4rNGvfO8K3urlpOB3SnNuIzsb77xtD9m5KHGR
imR61NvEaoo283QPPGWNAgaW3lQJwWovlxoB2bcXKwFiEe6/t6NMwkKI5ZpCvnG3
E7F+jrg/IWErE2CxsL+hRT3h5rGh/zvIiUpYKUWMeTRtl2wJcJdoPa+/WzZoHlRz
tFvSZI8E4P6PfoVeos/o9DYOnm69uMVSfHB63N7CBTfFcEXbNdYHAt6d2/77z39+
LTfoyUVepIDGc8myG9aU6mTPHlLzm1t0oToq9SfS937bdHIVxp7pIQazFnqOfV33
jYlb5RHbHhdR75KOnxI12i1wpJzVFyuBwkN7KS/BIhFS+pF7
-----END CERTIFICATE-----
Generated at Thu May 2 05:26:13 2024 by rpki-client on console-fra.rpki-client.org