Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          vlI1MM5LM0TfMarHh8atsdDs4dWf67aeLn3GJ6B2sAw=
Subject key identifier:   04:E2:CA:C4:A5:F4:22:AF:75:69:C8:32:5F:A2:D5:24:42:4B:B4:CA
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       6FFA27C4C3205950383ED40EB44EDA447668D4C4
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa
Signing time:             Mon 03 Jun 2024 11:37:59 +0000
ROA not before:           Mon 03 Jun 2024 11:32:59 +0000
ROA not after:            Mon 02 Jun 2025 11:37:59 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fa:27:c4:c3:20:59:50:38:3e:d4:0e:b4:4e:da:44:76:68:d4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Jun  3 11:32:59 2024 GMT
            Not After : Jun  2 11:37:59 2025 GMT
        Subject: CN=04E2CAC4A5F422AF7569C8325FA2D524424BB4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:c0:d1:d1:1d:e4:77:51:14:dc:ad:9a:dd:
                    4a:0f:c3:b7:db:e1:5b:02:09:81:a1:64:d2:6f:92:
                    85:65:a7:45:89:65:5b:8a:53:98:4f:b8:e1:2f:05:
                    da:90:22:64:82:26:41:1c:33:83:c8:d2:c2:fd:a6:
                    b4:fb:31:46:a9:19:1b:2b:d2:5f:41:01:0c:c3:2c:
                    ea:e2:e6:ef:07:26:69:69:69:9d:06:2c:f6:c4:de:
                    63:f3:bd:a5:0a:43:e1:20:e7:56:26:45:87:a1:8b:
                    15:bc:3b:7a:94:98:e5:6b:91:18:17:7c:69:5f:e9:
                    04:e5:ad:61:30:9e:dc:96:8d:6b:61:e6:48:69:21:
                    9e:5a:b9:99:5e:84:ad:79:bd:86:d7:1b:fe:ad:5f:
                    55:7a:25:d5:3c:01:fc:2f:7c:ec:b8:11:d1:9b:52:
                    24:1f:a5:d7:c5:21:fb:e8:a1:1b:9e:1b:c6:75:74:
                    10:04:bf:ae:b2:fc:c1:28:8f:3e:8e:ed:b3:61:f5:
                    cb:b6:05:58:b9:17:66:2b:e4:f3:58:89:3a:76:0a:
                    f2:50:7d:2d:f1:02:54:da:5f:dc:6c:ab:d8:c7:69:
                    77:4e:6b:ad:5a:69:34:36:c4:25:28:2b:6d:90:12:
                    c3:23:96:92:b8:2b:fd:04:21:57:e0:ca:f0:54:46:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:CA:C4:A5:F4:22:AF:75:69:C8:32:5F:A2:D5:24:42:4B:B4:CA
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1007::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:e9:a1:06:4d:7f:fe:e4:8e:88:37:90:d6:3d:80:75:c7:d7:
         5a:67:76:2b:de:ec:44:3b:a9:73:45:48:c4:2d:7f:f6:70:50:
         3d:b5:49:f2:06:a4:6d:c4:f0:e7:38:db:99:28:bb:ec:10:2d:
         47:97:42:e4:40:01:ff:b3:28:a5:3d:ca:5d:ad:65:1f:0f:d5:
         3c:db:6a:92:7a:44:09:ca:4f:f8:40:4a:7e:bd:27:74:bc:ac:
         5f:c2:9f:d5:fb:24:17:64:7d:fc:53:c6:f5:06:0a:aa:10:3a:
         04:c5:35:44:39:73:73:f7:49:50:20:c5:c3:36:ea:14:98:44:
         22:a4:ca:d1:ce:e9:61:6d:3a:f4:82:b2:6d:59:7f:1b:e8:aa:
         7b:d4:bb:0d:26:de:b5:e1:28:f6:16:6f:23:59:c9:3c:95:5c:
         62:61:45:51:e6:3d:55:f3:fb:e8:b8:aa:28:b1:b0:c9:01:04:
         c7:c4:59:65:27:25:34:a2:c8:2d:6c:a1:64:a7:a5:ea:4c:b1:
         35:0c:05:7b:fc:64:30:94:ca:51:fb:99:fd:02:47:88:39:2c:
         e6:f2:a4:cb:3c:a2:a5:68:d1:a2:76:a0:dd:10:ae:00:e1:42:
         0e:54:f2:52:8f:ca:3c:e7:de:c2:22:fd:b2:17:3b:08:0c:b0:
         bf:1e:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:37 2024 by rpki-client on console-ams.rpki-client.org