Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          5tOCWQjwFaGbQT1IHPP73+cIt71QswUMBxZtAkY/9zg=
Subject key identifier:   D4:FB:42:11:14:52:5C:C9:DB:43:8D:3F:20:55:68:7C:95:70:88:FB
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       5BF7B8F3479BCF8BFD1F93C9C0AEA99A45082943
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa
Signing time:             Tue 10 Sep 2024 12:19:15 +0000
ROA not before:           Tue 10 Sep 2024 12:14:15 +0000
ROA not after:            Tue 09 Sep 2025 12:19:15 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f7:b8:f3:47:9b:cf:8b:fd:1f:93:c9:c0:ae:a9:9a:45:08:29:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Sep 10 12:14:15 2024 GMT
            Not After : Sep  9 12:19:15 2025 GMT
        Subject: CN=D4FB421114525CC9DB438D3F2055687C957088FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:30:28:8b:ce:ce:71:08:0c:88:eb:da:5b:
                    f9:f5:5b:dc:76:52:5f:d7:2d:c3:c6:86:0d:c3:e5:
                    a7:33:5f:db:d0:12:f6:94:22:76:49:62:6c:d7:53:
                    26:ca:11:db:32:75:10:67:d4:99:82:85:d3:69:9f:
                    c3:a6:41:77:f2:89:28:3b:85:d1:e1:d3:ec:46:c2:
                    77:55:d6:c8:00:2d:9e:58:52:a2:0c:29:4b:54:ba:
                    23:f8:ce:0f:75:93:33:13:37:05:26:9d:77:2a:23:
                    5b:e7:2f:bc:e3:65:b0:e2:f5:ce:79:88:30:d8:59:
                    8d:3c:81:98:dd:d5:b0:02:6b:a6:43:c5:57:5f:48:
                    03:b9:b0:a4:1a:79:35:2b:d4:2b:b6:44:5c:70:f5:
                    e7:4f:04:6f:a8:87:85:81:38:da:b8:60:40:45:81:
                    22:8c:f2:a0:d5:fe:d1:08:52:12:6a:d9:6b:bb:cc:
                    06:aa:86:e3:ae:3b:4b:9e:b6:48:96:9d:a0:6e:08:
                    93:94:1a:41:ef:4f:14:bf:f7:ce:dd:c9:39:3f:bf:
                    fe:d7:e7:6c:e9:3d:9c:ca:5c:ad:20:f7:e5:43:1f:
                    b2:6b:cb:37:01:76:a2:80:36:9b:02:7b:54:a0:c8:
                    c1:df:00:fb:2f:49:5a:e5:9a:5d:66:58:45:c0:82:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FB:42:11:14:52:5C:C9:DB:43:8D:3F:20:55:68:7C:95:70:88:FB
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:e2:7d:ef:96:3a:f6:7a:a4:c3:ed:4c:ec:73:0b:e9:1a:
         e6:64:f8:3c:b0:9c:32:15:09:d3:b7:0e:c7:f0:bd:77:a6:e9:
         98:a5:82:f6:2b:a6:43:13:c0:71:e9:94:88:cf:b5:bf:4c:4b:
         7a:ec:9a:d9:ac:5b:1b:09:13:f7:cb:c2:e1:1e:b3:0b:61:e3:
         9f:d8:ac:35:37:8a:64:17:5c:99:82:e9:16:83:64:85:77:94:
         d5:c2:a8:40:30:07:97:78:8b:01:ce:65:a9:37:f7:c7:ad:0e:
         f0:aa:2d:f6:81:5f:95:57:dd:cd:42:20:01:0f:ab:06:10:c0:
         d6:7d:0a:e7:c4:d0:00:1c:2a:b9:c6:e9:36:36:2e:0f:9c:26:
         c2:33:1e:32:14:65:64:b1:a8:0a:de:df:29:3e:d4:b0:da:c4:
         a2:55:a6:0d:46:9c:ed:5e:ea:4c:4f:5c:8f:e4:5d:2b:6f:31:
         ea:8c:5b:4a:2f:30:4a:39:5f:f4:b6:58:30:7f:0c:1f:e0:3b:
         aa:e9:19:ee:69:02:04:8d:f8:53:06:a3:d6:d2:e3:8d:92:d5:
         ae:70:b3:40:fd:54:7d:5e:06:61:3a:46:c1:3c:62:c4:64:ce:
         38:3a:b5:a8:d6:e6:59:e1:ae:92:fe:c6:e0:06:25:83:bd:6d:
         6b:9f:ec:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:16 2024 by rpki-client on console-ams.rpki-client.org