Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier:          NYKzkcd4l+yxOQmPUuMJDzjQ+pgMtuQQxDzQZQtm5Z0=
Subject key identifier:   E3:E4:96:0E:74:C6:19:B5:04:E0:65:F1:CD:35:84:1C:6C:FD:AD:92
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       71CC2C1C7371C4FE613A479C4E52B0BCB2DBFC0B
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa
Signing time:             Mon 26 Feb 2024 12:08:46 +0000
ROA not before:           Mon 26 Feb 2024 12:03:46 +0000
ROA not after:            Mon 24 Feb 2025 12:08:46 +0000
asID:                     60743
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cc:2c:1c:73:71:c4:fe:61:3a:47:9c:4e:52:b0:bc:b2:db:fc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:46 2024 GMT
            Not After : Feb 24 12:08:46 2025 GMT
        Subject: CN=E3E4960E74C619B504E065F1CD35841C6CFDAD92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:0d:58:3d:dd:b2:92:9b:39:b7:57:f6:21:
                    0b:ff:20:3c:e4:cf:a6:22:df:74:a6:43:cd:83:37:
                    32:78:e5:3c:d2:35:72:e3:c4:b4:95:d4:aa:79:cd:
                    90:e3:e8:71:8b:21:f6:e2:36:d9:05:b4:7e:a0:81:
                    ad:f2:25:5b:a0:db:ce:38:f9:16:af:fa:a9:db:66:
                    8d:93:79:81:a7:76:92:b0:53:c5:50:8d:35:de:bb:
                    86:74:b9:e8:c3:b5:d3:6c:5d:51:89:a3:96:f7:d4:
                    95:80:b9:b9:67:32:2a:9e:d3:7c:dd:0a:9e:58:44:
                    58:1b:0d:1f:99:ae:6a:90:23:79:36:a2:6e:ed:99:
                    94:00:7f:fe:ee:75:a6:22:12:d2:12:b3:c1:4e:d7:
                    d5:14:13:21:c5:30:45:75:73:a8:e8:d5:aa:0c:e4:
                    ea:0c:48:ed:fc:b6:6c:91:3f:5a:87:57:1f:ec:4c:
                    1b:f4:fb:ad:c3:a0:df:f3:7c:6c:90:00:a4:03:df:
                    ab:1c:7b:de:7b:46:20:e7:83:0c:6b:0b:f5:9b:99:
                    55:73:46:4a:c1:2d:81:29:6d:de:4a:de:55:2c:e7:
                    2a:2c:ec:1a:85:fc:61:f9:b6:d9:af:fc:d3:83:ac:
                    ea:bc:ec:6e:63:6c:f2:7e:85:25:bb:af:de:3b:fb:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:96:0E:74:C6:19:B5:04:E0:65:F1:CD:35:84:1C:6C:FD:AD:92
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:5d:f8:a2:13:7d:fc:ac:0f:b3:71:39:73:0f:db:93:5d:
         14:93:b1:85:a5:01:a5:25:27:4f:9a:e7:eb:8d:f3:82:02:19:
         00:75:7c:82:1c:f3:a8:c0:28:c9:80:30:1a:9b:95:23:7a:1b:
         f3:37:0c:48:6e:67:03:0d:37:f1:3f:c8:c1:3f:6a:5c:d1:d3:
         1a:88:1a:2c:80:23:84:fa:04:16:25:a9:ea:39:18:f1:a2:1a:
         11:60:c4:ee:bf:46:1e:e9:23:69:64:34:66:b6:ec:d4:d3:cb:
         a3:69:74:91:ad:de:ab:77:8b:ca:ab:db:42:86:2b:d0:40:8e:
         ab:b0:1a:89:c4:9b:a6:51:b3:9d:04:ab:71:06:9f:a1:d1:2b:
         fb:3c:86:f4:82:4e:78:5a:f3:ef:21:8b:b5:ba:0a:f5:21:f4:
         47:a9:8e:ae:8e:47:29:bb:69:71:a8:ac:b5:e6:4f:ad:66:ff:
         13:d1:bd:53:54:c7:46:72:61:b2:a4:db:d2:c6:6d:8d:5f:ee:
         ef:a0:82:d6:88:cf:72:60:67:14:57:ff:c7:78:e1:e8:58:ac:
         f5:2a:5d:3b:0e:ab:18:ab:38:3c:10:78:c6:9f:b7:c6:43:80:
         eb:d6:d6:c9:f6:a4:a0:c9:45:55:01:ac:59:aa:54:16:5c:d5:
         c1:ee:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org