Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (raw, json)
Hash identifier:          FJmDRwyNa88TzuKThitXVfvHCvMVhpe7nfDIR/GdreE=
Subject key identifier:   B2:55:29:94:35:92:B2:E5:CC:35:C9:C2:1E:38:92:65:89:91:31:7F
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       23D5FFA74DCD6BAADE833D9BBFE5AE6689F717F5
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa
Signing time:             Mon 26 Feb 2024 12:08:46 +0000
ROA not before:           Mon 26 Feb 2024 12:03:46 +0000
ROA not after:            Mon 24 Feb 2025 12:08:46 +0000
asID:                     59993
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d5:ff:a7:4d:cd:6b:aa:de:83:3d:9b:bf:e5:ae:66:89:f7:17:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:46 2024 GMT
            Not After : Feb 24 12:08:46 2025 GMT
        Subject: CN=B25529943592B2E5CC35C9C21E3892658991317F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:95:2e:6f:29:79:ae:96:fc:46:0c:48:bf:
                    f6:91:a2:3d:ed:86:3a:b5:d4:11:17:11:65:5b:ea:
                    90:eb:57:00:59:83:1a:29:0e:32:12:40:2b:d3:96:
                    1e:fe:b1:fd:2a:0e:60:3d:12:f7:e7:07:94:54:46:
                    bb:1e:27:b8:83:87:b1:10:b6:6e:f6:97:cf:31:31:
                    94:ee:71:4e:20:a1:8c:66:7b:d4:94:84:fd:06:4e:
                    6b:be:6d:6e:f7:38:4d:fa:22:5b:bc:c4:a6:87:f9:
                    4c:4a:79:5a:52:83:36:7b:30:c8:6c:8c:ae:50:25:
                    7c:2d:f8:8d:78:4d:b8:ad:9e:23:10:7c:af:2a:f1:
                    44:56:76:f7:be:19:e8:ba:83:aa:3f:1f:d8:c4:ce:
                    ca:d8:f1:4c:9a:4e:b4:87:5f:09:20:0d:15:87:df:
                    15:73:46:32:b7:7d:5f:a3:01:6e:d2:ac:07:c9:e7:
                    6a:2e:f7:14:ef:f8:79:8f:af:d5:55:21:68:c6:d4:
                    ca:4b:e2:78:01:a1:a4:42:87:ed:3b:31:22:ca:53:
                    61:e9:13:08:d2:f2:77:29:19:30:5b:dc:80:da:09:
                    ac:8a:26:cc:34:ca:3f:8b:f9:79:50:09:ac:fe:bc:
                    87:4f:8a:c6:0a:c3:81:44:83:fb:b6:be:d7:ee:51:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:29:94:35:92:B2:E5:CC:35:C9:C2:1E:38:92:65:89:91:31:7F
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:ba:14:1e:90:d4:e7:a4:eb:6b:ad:f7:9d:54:d0:ce:66:60:
         fe:ce:06:0b:c5:a9:c5:5c:96:99:ab:55:0a:9d:0f:b1:c1:7b:
         cf:a3:9e:d1:18:4a:cd:de:91:7c:14:5a:c5:cf:0d:47:fd:e3:
         de:69:3b:9b:42:ef:9b:69:b8:9e:4f:db:30:bb:47:e3:29:7d:
         52:90:a8:10:d6:de:41:1c:93:8e:53:95:7c:54:c2:77:9c:75:
         d1:1a:4f:1d:4c:4f:08:db:c6:64:6e:b2:a6:60:77:59:d0:df:
         a8:ef:fb:77:0d:bb:a9:3b:ca:38:5f:4c:17:05:65:e6:7f:d2:
         db:b9:91:aa:b9:52:2f:02:36:19:0f:41:48:99:a9:e6:6f:b7:
         1f:bd:65:63:b6:0e:e8:86:b0:81:81:25:6d:a4:4f:90:ed:d8:
         90:6a:6e:7c:d3:9f:1f:41:cf:83:5b:16:7a:f9:28:77:f7:3c:
         32:92:cf:90:08:56:9d:53:86:76:a6:14:25:c0:09:28:8c:10:
         7b:88:2f:ff:f7:d0:d8:9f:e4:fd:df:fa:8a:31:9c:bc:8b:62:
         2d:f0:b9:b2:81:fe:1c:42:5f:1a:e2:ed:31:d3:57:bf:2b:92:
         84:06:98:7a:aa:36:d6:23:3f:cf:0c:f3:37:53:13:16:07:ba:
         0d:21:6c:9d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUI9X/p03Na6regz2bv+WuZon3F/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4
MEU3RTVFQTAeFw0yNDAyMjYxMjAzNDZaFw0yNTAyMjQxMjA4NDZaMDMxMTAvBgNV
BAMTKEIyNTUyOTk0MzU5MkIyRTVDQzM1QzlDMjFFMzg5MjY1ODk5MTMxN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewpUubyl5rpb8RgxIv/aRoj3t
hjq11BEXEWVb6pDrVwBZgxopDjISQCvTlh7+sf0qDmA9EvfnB5RURrseJ7iDh7EQ
tm72l88xMZTucU4goYxme9SUhP0GTmu+bW73OE36Ilu8xKaH+UxKeVpSgzZ7MMhs
jK5QJXwt+I14TbitniMQfK8q8URWdve+Gei6g6o/H9jEzsrY8UyaTrSHXwkgDRWH
3xVzRjK3fV+jAW7SrAfJ52ou9xTv+HmPr9VVIWjG1MpL4ngBoaRCh+07MSLKU2Hp
EwjS8ncpGTBb3IDaCayKJsw0yj+L+XlQCaz+vIdPisYKw4FEg/u2vtfuUerrAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUslUplDWSsuXMNcnCHjiSZYmRMX8wHwYDVR0j
BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3
NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzUzOTM5MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEAqroUHpDU56Tra633nVTQzmZg/s4GC8WpxVyWmatV
Cp0PscF7z6Oe0RhKzd6RfBRaxc8NR/3j3mk7m0Lvm2m4nk/bMLtH4yl9UpCoENbe
QRyTjlOVfFTCd5x10RpPHUxPCNvGZG6ypmB3WdDfqO/7dw27qTvKOF9MFwVl5n/S
27mRqrlSLwI2GQ9BSJmp5m+3H71lY7YO6IawgYElbaRPkO3YkGpufNOfH0HPg1sW
evkod/c8MpLPkAhWnVOGdqYUJcAJKIwQe4gv//fQ2J/k/d/6ijGcvItiLfC5soH+
HEJfGuLtMdNXvyuShAaYeqo21iM/zwzzN1MTFge6DSFsnQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org