Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa
File:                     326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (raw, json)
Hash identifier:          XOxJ43IhSkoYuesqh9xtD9ymff3NSr4MGCAg8rKUF9c=
Subject key identifier:   5B:8B:63:F3:B7:2D:40:4D:33:C5:26:57:26:E8:65:9D:75:38:1F:9F
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       2DA98566308EDFA92423003E380A00E5F7AD0382
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa
Signing time:             Sat 21 Sep 2024 23:00:10 +0000
ROA not before:           Sat 21 Sep 2024 22:55:10 +0000
ROA not after:            Sat 20 Sep 2025 23:00:10 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1000::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a9:85:66:30:8e:df:a9:24:23:00:3e:38:0a:00:e5:f7:ad:03:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Sep 21 22:55:10 2024 GMT
            Not After : Sep 20 23:00:10 2025 GMT
        Subject: CN=5B8B63F3B72D404D33C5265726E8659D75381F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:ba:98:94:24:95:da:d8:06:11:ee:d6:a8:
                    cf:25:b8:6e:9e:f3:aa:ae:70:3c:19:6a:a0:e5:17:
                    84:fd:e6:e1:2e:b6:9d:7f:50:73:99:dd:12:a9:84:
                    1d:22:e6:e3:d8:d3:24:1f:61:09:34:9a:bc:6c:d5:
                    cd:94:6d:40:0b:10:c8:28:94:3f:ad:3e:4b:88:7c:
                    75:7c:e6:7e:28:b5:e2:d8:03:73:e9:0e:9a:a3:a8:
                    a3:de:a9:90:29:1f:c4:fa:cc:b2:e7:9e:8a:ce:36:
                    f0:fe:ae:7d:a2:7d:ee:97:9e:c5:cd:dd:8f:80:a3:
                    d2:ff:ea:b8:93:40:7e:6a:8b:8c:f4:42:4c:b5:4f:
                    e0:e5:7b:81:a3:d2:2e:35:f7:b6:21:72:4d:8e:99:
                    89:58:d5:c3:d9:3d:51:a9:b7:cd:00:41:cd:a8:e1:
                    34:d0:6c:2e:2e:23:87:95:ee:6c:a7:60:5e:bc:13:
                    91:c8:0a:82:b1:d5:40:63:c8:b6:71:1c:55:c2:0a:
                    d7:4e:d2:21:dd:80:a1:6e:65:93:e9:04:d1:88:d8:
                    6d:97:25:00:cc:e4:b9:b3:2f:44:1c:7f:06:3e:b8:
                    e2:4d:68:c6:c9:fe:08:e9:ed:20:45:89:f9:85:2c:
                    72:bc:ff:dc:6f:64:aa:f7:03:c6:00:d0:a0:22:2e:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:63:F3:B7:2D:40:4D:33:C5:26:57:26:E8:65:9D:75:38:1F:9F
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:2f:fb:14:c1:f6:29:ef:8f:46:d3:0d:6a:82:ad:93:7a:91:
         93:85:5e:c6:af:f4:48:7a:0f:12:a1:ab:a5:9f:2a:79:93:e6:
         2b:d7:e5:50:fc:70:ce:b9:93:1b:60:2c:90:d8:65:05:8f:26:
         50:56:60:db:82:93:4d:d8:07:34:05:56:db:e3:81:cd:81:06:
         88:8e:4a:63:51:6b:f7:46:6e:a0:af:be:77:fe:9e:04:c2:90:
         e3:70:45:e5:ee:dd:85:2c:ed:41:9e:ab:56:98:ef:e5:7b:e5:
         8d:24:0e:92:c5:eb:03:e2:f7:62:e5:c2:1a:5f:f7:3f:93:09:
         9a:9b:89:d4:f0:41:2d:22:6d:7d:e8:41:1a:6f:b1:3d:f5:c3:
         b3:8a:35:a4:55:72:06:5f:b5:2a:6c:89:31:f3:ef:d2:03:69:
         64:86:ef:09:d2:6f:7a:13:4d:05:91:33:c1:b5:d2:0f:03:e5:
         b3:7b:1b:db:21:a1:aa:34:d5:82:15:d2:9c:82:83:a3:f1:a2:
         d4:63:d2:38:b8:c7:2d:fe:50:6d:cb:56:da:f8:b9:61:d1:61:
         49:ec:90:ae:27:57:7f:1d:e4:09:57:9f:25:d2:eb:f1:33:25:
         2b:63:5c:04:5e:41:53:b0:92:eb:f9:c9:42:e2:3a:53:90:cd:
         5a:d0:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:37 2024 by rpki-client on console-ams.rpki-client.org