Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa
File:                     326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (raw, json)
Hash identifier:          QefH/gchPUSUtFvdnkHpfDrlFmrPnqjf4NpDeqlZyzA=
Subject key identifier:   D2:84:E7:3D:34:53:F6:51:3C:54:BB:91:40:34:FD:D0:17:90:4F:B0
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       59D9175212365E9D027EFED01BD02C51AD9E3F2F
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa
Signing time:             Tue 26 Mar 2024 20:22:12 +0000
ROA not before:           Tue 26 Mar 2024 20:17:12 +0000
ROA not after:            Tue 25 Mar 2025 20:22:12 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d9:17:52:12:36:5e:9d:02:7e:fe:d0:1b:d0:2c:51:ad:9e:3f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Mar 26 20:17:12 2024 GMT
            Not After : Mar 25 20:22:12 2025 GMT
        Subject: CN=D284E73D3453F6513C54BB914034FDD017904FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:83:1f:f6:14:39:a2:5a:5d:36:1d:85:3f:
                    a3:0d:be:f8:4e:a7:f3:96:d5:ed:15:93:e5:bc:2c:
                    c7:8b:f4:f1:6a:45:1c:5e:0d:87:0f:8f:ee:2e:93:
                    2b:f3:2b:99:f3:1e:15:0e:dc:85:c0:97:bd:87:68:
                    ff:c8:36:0e:71:2f:4d:9a:44:ab:6f:f1:d5:9a:4c:
                    7c:f3:11:b4:3c:d2:da:dd:43:b3:d6:f4:cb:b3:c2:
                    7c:59:ab:eb:a3:74:f8:e0:e5:39:be:f8:b9:ae:fb:
                    ca:da:7d:d4:9b:29:5a:1b:83:e2:b6:d9:0a:e4:41:
                    05:fe:31:f0:a3:29:5b:a1:44:f5:0c:68:43:87:fa:
                    ec:96:ea:fe:c2:9e:77:14:ab:bb:9d:2a:22:26:9d:
                    29:f1:d1:f4:25:73:af:6a:30:53:ff:b1:4a:41:de:
                    5e:c5:35:2f:38:da:a2:29:f0:24:91:7c:f0:f7:d0:
                    06:9f:49:27:3e:57:f1:55:19:31:bb:23:7a:ba:bc:
                    bc:e8:c6:5a:ea:42:12:37:f4:55:d0:ef:b7:81:ea:
                    11:81:44:1f:dd:c2:96:34:c2:57:0f:88:54:f5:fa:
                    26:7a:09:35:ec:6a:ad:80:08:35:0a:63:90:a7:58:
                    f6:40:d5:d6:c1:77:08:61:37:75:29:7b:c4:50:69:
                    46:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:84:E7:3D:34:53:F6:51:3C:54:BB:91:40:34:FD:D0:17:90:4F:B0
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:b9:6a:c0:dd:c1:9f:27:ef:24:cd:76:8b:a1:8f:c8:99:
         61:15:77:d8:75:2a:b9:86:1f:93:b6:f1:94:c4:a9:01:10:e6:
         fc:42:9e:7f:3d:dc:8e:fc:bd:b3:34:f8:1e:95:c3:10:4e:fb:
         0f:b4:1f:fc:5a:74:f2:74:1e:33:76:80:6d:56:31:fc:19:fb:
         36:63:a5:2a:39:c5:3d:8e:01:44:da:f3:33:41:22:ec:d7:6f:
         ef:4a:df:e2:3b:11:84:5a:4c:cb:14:ab:43:93:df:ef:6b:e5:
         a2:80:31:c6:81:f3:33:9c:94:fe:f1:02:b0:4c:72:1a:66:15:
         9b:86:7c:21:d4:73:a9:35:b6:b4:6a:3e:bb:aa:03:69:bf:68:
         95:d4:1e:cb:c2:ba:76:20:39:f9:81:ad:5b:fb:53:53:1b:ba:
         57:a0:04:77:f9:01:a4:b4:9e:e2:d3:e4:b7:81:49:88:8e:13:
         75:b0:0a:62:f6:7f:92:a3:47:8b:3d:e6:70:2f:cb:f7:de:b5:
         40:ee:79:b9:9f:ac:eb:ff:45:df:ab:45:2a:bd:0b:83:2e:e7:
         c9:f5:25:ae:f8:fa:58:6a:db:c1:14:65:8c:a3:bc:1e:59:c1:
         97:05:c8:29:98:6e:cd:e2:6d:64:2c:bc:45:3f:50:ee:92:62:
         ee:64:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 07:50:53 2024 by rpki-client on console-fra.rpki-client.org