Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa
File:                     326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          bBg4ywEuEufh6qxFRSuum4zrsIIAwwtKuw+dmfJfHv8=
Subject key identifier:   44:4D:2D:B6:F8:A8:BA:27:FA:4B:60:1B:80:CA:15:6B:EA:3F:6C:00
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       25A255B477569CC105B1231328238A566CE9CB9C
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa
Signing time:             Tue 10 Sep 2024 13:19:22 +0000
ROA not before:           Tue 10 Sep 2024 13:14:22 +0000
ROA not after:            Tue 09 Sep 2025 13:19:22 +0000
asID:                     14618
IP address blocks:        2a05:dfc1:1004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Oct 2024 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a2:55:b4:77:56:9c:c1:05:b1:23:13:28:23:8a:56:6c:e9:cb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Sep 10 13:14:22 2024 GMT
            Not After : Sep  9 13:19:22 2025 GMT
        Subject: CN=444D2DB6F8A8BA27FA4B601B80CA156BEA3F6C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:38:76:95:f0:4e:90:f5:e4:f6:24:e0:75:62:
                    aa:27:41:62:6f:08:e2:78:75:d2:b7:5f:a7:ac:c7:
                    f4:e5:e7:b0:08:3c:25:6d:01:60:08:89:7b:3c:60:
                    e9:d6:0d:50:7d:a2:4f:28:e2:f6:04:18:87:e3:2c:
                    b9:b0:ec:c3:dc:99:9d:86:f0:95:25:75:fa:ac:e1:
                    44:b2:10:11:3f:e0:90:f6:79:96:77:3e:a1:7b:e4:
                    c9:08:d1:c7:a1:26:d5:8d:80:3a:f7:6a:e8:17:9a:
                    44:83:38:21:b7:ea:42:09:8c:58:04:85:4f:0f:cf:
                    f8:9c:af:e5:24:d3:66:79:14:00:31:2c:70:9b:d3:
                    6d:c9:83:25:2d:f5:32:2e:0d:f2:8b:03:95:02:97:
                    f7:82:29:a3:b9:17:36:96:c5:01:9e:bb:0e:c2:8d:
                    a8:02:05:93:e0:23:de:48:31:12:dd:bb:dc:a1:34:
                    cc:1c:9d:da:9e:7c:51:4e:9f:cc:fc:5b:ca:f7:5b:
                    fe:e4:b0:92:39:e9:77:66:9a:65:6e:6b:27:a6:46:
                    4b:65:2f:86:83:d9:fa:78:e8:de:c4:f5:b4:df:c0:
                    e5:3d:a2:be:ed:63:27:40:30:b0:1a:15:1e:06:69:
                    f4:35:a0:43:1b:d0:30:cc:50:e6:ce:31:10:df:e6:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:2D:B6:F8:A8:BA:27:FA:4B:60:1B:80:CA:15:6B:EA:3F:6C:00
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:25:fe:4d:92:61:c3:cf:e7:00:c4:56:04:10:2c:63:d2:e3:
         e0:2a:2f:2e:95:00:8a:d9:70:ed:77:81:66:47:a5:2f:36:bb:
         5f:d8:be:4a:0f:ea:26:9f:7f:92:1d:cd:52:05:9d:b1:a5:e6:
         c3:5b:58:56:c0:21:b7:0d:48:fd:0b:6b:e7:e5:1b:21:d5:6e:
         c1:00:75:7c:c3:6b:15:cc:c4:f6:0f:dc:49:f3:c2:9f:b1:8a:
         bd:89:7d:1b:1b:28:47:b3:d6:8d:44:cd:60:85:f4:7b:ca:9b:
         8e:6a:9f:ad:dd:11:5b:31:3c:62:09:5e:21:f7:70:5c:20:dd:
         34:38:6f:f9:d7:05:cc:fe:d1:90:84:62:29:8c:32:99:c3:fc:
         d9:5a:51:83:0c:bb:c7:d5:dd:9f:38:84:ea:70:6f:bc:11:80:
         b2:f9:5b:d3:ec:46:4d:fe:96:77:e4:1a:c8:98:2b:c6:37:ce:
         46:8b:61:92:75:c6:77:26:a7:b3:66:7f:b2:e0:d1:aa:ad:b9:
         a3:98:62:fe:e9:60:3e:08:49:57:9f:1e:0c:8d:0d:06:15:22:
         3e:f9:3c:87:e8:13:21:ec:3c:98:84:bf:95:c3:e3:e9:9c:bd:
         6d:ba:b4:f1:7f:44:21:52:f9:bd:7e:b3:db:b1:5e:b0:73:ed:
         0b:5a:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 08:03:32 2024 by rpki-client on console-ams.rpki-client.org