Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          csL/8uLq1UgxBpcO44oz/btXL48jpRUqtrtqPXHPhh0=
Subject key identifier:   A7:D0:DA:53:C0:7B:CD:22:1B:DC:96:58:16:D7:39:A3:66:FC:CA:05
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       73510E35AE2D8DF268655CD8D7BB45269517558F
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa
Signing time:             Thu 30 May 2024 11:35:30 +0000
ROA not before:           Thu 30 May 2024 11:30:30 +0000
ROA not after:            Thu 29 May 2025 11:35:30 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1014::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 06:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:51:0e:35:ae:2d:8d:f2:68:65:5c:d8:d7:bb:45:26:95:17:55:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: May 30 11:30:30 2024 GMT
            Not After : May 29 11:35:30 2025 GMT
        Subject: CN=A7D0DA53C07BCD221BDC965816D739A366FCCA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:28:23:59:b0:0f:b3:d7:9b:09:c4:bb:2b:20:
                    40:62:bd:ad:1d:7a:e9:55:f7:e4:a6:a3:72:b0:92:
                    bf:7c:24:30:fe:4f:77:59:28:f0:16:5a:88:5d:f4:
                    35:72:fa:3d:e9:12:f3:de:17:b4:ba:b9:b5:15:6f:
                    a6:41:70:30:91:16:79:2c:3d:db:49:1b:f6:ec:9b:
                    2c:ad:36:6f:2b:6d:8a:7a:3d:66:94:69:c5:82:ac:
                    4f:89:0c:b9:44:bb:5e:cb:52:2b:ce:5a:ac:8b:58:
                    0f:80:2c:13:8c:37:a1:b7:e9:9e:8b:b1:8d:a4:8a:
                    ba:f4:91:59:a6:3d:57:07:d3:74:10:10:08:c4:cf:
                    1c:c1:6e:e7:c9:71:b7:26:b5:23:79:6f:d2:24:d1:
                    de:4e:b5:27:b9:c1:fa:35:09:0e:ca:e2:63:74:b6:
                    28:32:a8:20:27:7c:40:3d:c2:71:f3:e5:b6:07:b2:
                    4c:14:cd:39:04:e3:25:39:b8:94:55:b1:31:18:1d:
                    fc:57:92:b6:90:60:02:04:ea:4c:d6:64:1b:71:c3:
                    54:eb:8a:43:2f:82:b3:49:d3:53:91:cb:cd:f3:0b:
                    c3:7f:da:c9:df:1c:6c:aa:63:20:ef:19:23:48:8d:
                    3f:f9:54:58:02:c7:9f:3a:11:1e:f4:4e:0b:c0:f7:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D0:DA:53:C0:7B:CD:22:1B:DC:96:58:16:D7:39:A3:66:FC:CA:05
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:af:07:2e:83:29:2b:43:98:c0:cf:d3:36:7a:f3:1f:be:36:
         73:3f:87:be:7e:a4:b3:46:85:17:a5:88:85:86:50:07:aa:22:
         3a:d3:c5:a5:fc:7b:52:89:09:ba:52:7f:ac:43:e8:8d:c4:4a:
         6e:65:d0:25:d6:14:80:f8:84:15:9f:23:73:9c:7d:d6:79:c1:
         00:97:f1:12:e2:2a:99:b5:1e:7b:ad:82:f6:dd:2c:70:6b:8f:
         0c:fb:32:3e:7f:5f:6e:ff:01:cb:73:ff:a0:5b:48:b8:9f:dc:
         ac:42:f1:df:dc:4e:1b:80:8b:2e:2e:05:b3:f1:ca:0a:8c:44:
         f6:b3:a5:4d:1d:4a:92:f6:48:17:f1:8b:4a:4d:c8:3f:6b:1d:
         9c:2d:76:46:63:98:11:ed:8b:77:ea:49:00:db:2c:60:dd:17:
         1b:e2:24:2f:c0:2b:dc:2f:ad:55:53:96:77:0a:8a:eb:13:aa:
         48:ae:5b:29:4e:f8:5b:69:2f:80:77:a0:5f:e6:32:ca:bb:ce:
         eb:4d:2b:af:b7:a6:3e:72:29:28:34:d0:86:05:86:61:56:b9:
         85:b5:86:2a:de:bd:d3:83:dc:9b:1b:81:84:1a:d8:da:48:ff:
         54:64:2f:1a:db:24:5a:7f:86:4e:10:bc:f4:e2:3b:30:91:0c:
         b6:b1:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:17:32 2024 by rpki-client on console-fra.rpki-client.org