Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa
File:                     326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          3WLSIcHRaqoUSvOKcFveGRmjtEIxN5ph1DKZtQOG09Q=
Subject key identifier:   B5:EC:4D:FC:66:A8:6D:A9:8F:72:16:F1:2A:53:EE:71:D9:E7:39:48
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       6CF5DC1B11D9485785DD15A71D14147B81C02CDA
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa
Signing time:             Tue 10 Sep 2024 13:17:41 +0000
ROA not before:           Tue 10 Sep 2024 13:12:41 +0000
ROA not after:            Tue 09 Sep 2025 13:17:41 +0000
asID:                     16509
IP address blocks:        2a05:dfc1:1004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f5:dc:1b:11:d9:48:57:85:dd:15:a7:1d:14:14:7b:81:c0:2c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Sep 10 13:12:41 2024 GMT
            Not After : Sep  9 13:17:41 2025 GMT
        Subject: CN=B5EC4DFC66A86DA98F7216F12A53EE71D9E73948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4d:6a:14:f0:c0:92:1e:71:5f:20:50:43:cb:
                    44:8f:28:30:3e:fb:ce:99:79:97:7c:b1:0c:ea:59:
                    5f:5d:5c:75:da:1c:7d:e2:c7:f0:22:d7:19:bf:da:
                    8a:f2:71:ee:ab:c6:ef:87:72:af:74:71:09:fe:c9:
                    00:3e:f1:b7:43:ce:a6:4d:39:eb:5a:2b:56:ee:a9:
                    fa:50:cf:01:c6:0a:a5:9b:01:ed:f0:1e:cf:19:39:
                    39:c8:07:5c:89:47:59:c1:fb:a1:f4:07:60:7e:45:
                    5d:96:48:6d:5a:bb:f2:d2:20:ac:2b:ea:81:97:1d:
                    b1:62:ee:49:d5:c3:02:29:80:36:f3:b1:20:76:74:
                    f6:8f:aa:af:9c:11:83:69:53:30:cb:7d:be:19:4b:
                    7b:60:ef:0d:0d:99:50:87:fc:c7:74:fa:32:2e:43:
                    c2:03:1a:53:8c:9e:94:ac:25:58:93:1d:37:ef:a5:
                    0d:27:67:d9:91:5b:65:b5:c2:ad:0e:dd:37:24:04:
                    a4:5e:d4:1d:b0:ba:b6:2b:f9:5f:45:6c:23:31:d4:
                    ef:a0:ca:93:5c:d6:f4:7c:7b:fa:49:e3:1e:88:fe:
                    b9:98:e1:08:02:4a:72:f4:ae:09:0d:11:30:a1:8a:
                    1a:47:6a:62:4e:7c:b3:e9:f4:c7:5c:4c:47:07:c8:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EC:4D:FC:66:A8:6D:A9:8F:72:16:F1:2A:53:EE:71:D9:E7:39:48
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:8e:b6:b5:c6:26:ab:8a:b7:86:68:08:44:3f:78:3d:c0:
         c5:f1:db:57:be:26:ec:de:ff:db:59:3e:48:d3:4b:7f:80:04:
         ce:bf:d6:c7:f3:17:d2:7f:22:92:3a:e9:50:6e:c2:2d:fc:60:
         cd:15:9f:07:9b:76:d8:be:4d:4c:35:14:58:68:e5:ca:21:51:
         c9:a8:50:ab:32:bd:87:c0:e2:c8:5f:19:56:9e:94:44:d3:b3:
         f0:3e:ba:cb:8a:e0:89:66:93:86:68:a2:c9:76:89:cb:78:34:
         33:58:03:58:1f:db:e2:c0:96:da:c0:17:10:d9:27:38:2a:6f:
         78:a4:40:a5:f0:69:0d:f8:31:1b:ee:a6:e5:18:e8:2e:71:30:
         19:ec:7e:6b:c0:22:4c:63:b4:40:34:7b:56:96:c4:30:15:39:
         21:f6:fb:22:89:38:c7:5e:6c:5a:a6:10:e1:26:1f:83:29:3d:
         80:22:47:eb:74:75:c6:d2:98:74:eb:df:86:81:6d:08:f1:a0:
         dc:9e:f9:51:a9:2a:7d:0c:6b:e2:78:13:8b:0e:55:5e:cc:74:
         71:5a:9f:65:4b:b7:f1:b2:03:0b:90:89:2d:00:26:ad:46:f8:
         66:ac:23:04:18:35:60:51:0b:27:14:15:75:36:9f:a3:e5:67:
         4c:09:f4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org