Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa
File:                     326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          5KWoBzCozmROZ5jsxvkzz0dYuwogBRUOnYa0SsLxObU=
Subject key identifier:   07:F3:A9:6F:57:BE:4C:A2:2D:DD:F3:0B:60:C1:46:27:CD:BD:66:2C
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       27F7DF37D44F1504A0E3D862F057E9D897D42B4D
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa
Signing time:             Thu 16 May 2024 22:33:26 +0000
ROA not before:           Thu 16 May 2024 22:28:26 +0000
ROA not after:            Thu 15 May 2025 22:33:26 +0000
asID:                     59678
IP address blocks:        2a05:dfc1:1014::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f7:df:37:d4:4f:15:04:a0:e3:d8:62:f0:57:e9:d8:97:d4:2b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: May 16 22:28:26 2024 GMT
            Not After : May 15 22:33:26 2025 GMT
        Subject: CN=07F3A96F57BE4CA22DDDF30B60C14627CDBD662C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:14:ca:87:ae:e3:9e:40:8d:ca:ee:ac:2f:
                    cb:64:5b:16:1f:2f:b8:ab:d2:f8:bc:b4:09:e7:44:
                    cc:33:c7:04:ac:0a:6c:9e:23:ee:cd:0c:f7:c0:82:
                    76:89:1a:64:53:51:56:65:33:cf:ff:1d:89:3f:76:
                    23:56:97:c0:a8:88:e2:89:7e:1c:4b:9c:90:36:0e:
                    9f:a3:74:ce:8c:3d:c0:03:84:a6:e8:cf:2c:e1:a1:
                    29:5a:3c:17:a8:14:65:50:4b:32:9f:98:06:f0:2a:
                    a0:92:6b:ac:67:43:50:9e:26:4a:10:7e:aa:32:6f:
                    1e:ae:91:bd:11:c3:17:65:a7:1a:57:60:6a:f0:8e:
                    32:55:f8:a0:37:54:cd:d7:45:38:dc:b3:9e:dd:24:
                    6c:d1:39:ff:f0:1a:19:8b:0d:52:81:99:2e:72:51:
                    c1:08:e9:86:92:88:62:5e:d1:60:ef:c5:8e:62:1f:
                    f2:8f:bf:49:c1:9f:6f:ce:77:7e:41:61:a9:83:7d:
                    62:7a:2f:c6:cb:e3:56:c3:bc:32:6f:9c:98:d9:6e:
                    ad:3e:fa:f9:e0:3f:a5:bd:3f:ba:74:4c:a3:af:74:
                    c5:f7:ab:89:59:48:6f:51:54:f7:3b:7a:0f:1d:71:
                    01:05:b7:e0:b5:1a:59:1b:62:74:71:44:e8:1c:7b:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:A9:6F:57:BE:4C:A2:2D:DD:F3:0B:60:C1:46:27:CD:BD:66:2C
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:7a:09:eb:0e:e1:75:2d:9a:4f:26:31:8c:9f:72:d8:4a:
         b8:2c:57:4e:b3:e3:e2:b3:bc:91:98:73:23:53:6d:17:d9:f9:
         b0:af:a2:50:e4:53:ee:4f:3f:f9:71:fc:87:46:91:dc:96:32:
         ae:6e:0e:c1:2e:00:ee:81:79:7e:8d:df:52:0c:dc:77:85:42:
         bf:65:25:5a:f3:f5:dd:f6:55:d2:d3:28:6a:94:52:38:93:33:
         38:6c:20:7d:d5:19:ea:ce:18:88:1f:b8:e4:3e:13:08:9e:04:
         2e:eb:41:df:1d:c9:60:4a:5e:8c:b1:29:c6:90:e0:cb:b3:1c:
         12:9b:6d:84:68:72:e1:2d:75:83:bd:d2:93:16:e2:0a:f5:73:
         b3:06:59:15:03:f3:d0:c9:10:e6:3e:0e:e6:86:4a:28:12:26:
         ff:b6:08:85:91:88:f4:65:ff:f4:d2:34:01:79:6d:53:a3:ae:
         a5:58:dd:e9:82:8f:7f:5c:b4:00:bd:cf:9d:5d:86:8e:74:d5:
         c4:9a:ee:bd:f7:9a:61:e7:f1:8c:bd:41:44:79:e6:c1:8b:88:
         c8:61:4e:35:8a:f4:49:83:e5:aa:dd:c0:66:61:2b:16:0d:de:
         07:06:af:4e:97:e2:a6:1e:c3:35:8c:b9:c8:cf:86:d1:31:9c:
         5b:86:c6:83
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUJ/ffN9RPFQSg49hi8Ffp2JfUK00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc3RjRCODJDNjBGMEIwMTcxRjA5NzZDRENGQURCNDQx
ODI5REM4MzAeFw0yNDA1MTYyMjI4MjZaFw0yNTA1MTUyMjMzMjZaMDMxMTAvBgNV
BAMTKDA3RjNBOTZGNTdCRTRDQTIyRERERjMwQjYwQzE0NjI3Q0RCRDY2MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3xTKh67jnkCNyu6sL8tkWxYf
L7ir0vi8tAnnRMwzxwSsCmyeI+7NDPfAgnaJGmRTUVZlM8//HYk/diNWl8CoiOKJ
fhxLnJA2Dp+jdM6MPcADhKbozyzhoSlaPBeoFGVQSzKfmAbwKqCSa6xnQ1CeJkoQ
fqoybx6ukb0RwxdlpxpXYGrwjjJV+KA3VM3XRTjcs57dJGzROf/wGhmLDVKBmS5y
UcEI6YaSiGJe0WDvxY5iH/KPv0nBn2/Od35BYamDfWJ6L8bL41bDvDJvnJjZbq0+
+vngP6W9P7p0TKOvdMX3q4lZSG9RVPc7eg8dcQEFt+C1GlkbYnRxROgcewR5AgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQUB/Opb1e+TKIt3fMLYMFGJ829ZiwwHwYDVR0j
BBgwFoAU939LgsYPCwFx8Jds3PrbRBgp3IMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMy9GNzdGNEI4MkM2
MEYwQjAxNzFGMDk3NkNEQ0ZBREI0NDE4MjlEQzgzLmNybDB6BggrBgEFBQcBAQRu
MGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3Jl
cG8vQ0xPVURJRS1SUEtJLzAvRjc3RjRCODJDNjBGMEIwMTcxRjA5NzZDRENGQURC
NDQxODI5REM4My5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aB
inJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4
ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzEz
MDMxMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM5MzYzNzM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKgXfwRAUMA0GCSqGSIb3DQEBCwUAA4IBAQAV1HoJ6w7hdS2aTyYxjJ9y2Eq4
LFdOs+Pis7yRmHMjU20X2fmwr6JQ5FPuTz/5cfyHRpHcljKubg7BLgDugXl+jd9S
DNx3hUK/ZSVa8/Xd9lXS0yhqlFI4kzM4bCB91RnqzhiIH7jkPhMIngQu60HfHclg
Sl6MsSnGkODLsxwSm22EaHLhLXWDvdKTFuIK9XOzBlkVA/PQyRDmPg7mhkooEib/
tgiFkYj0Zf/00jQBeW1To66lWN3pgo9/XLQAvc+dXYaOdNXEmu6995ph5/GMvUFE
eebBi4jIYU41ivRJg+Wq3cBmYSsWDd4HBq9Ol+KmHsM1jLnIz4bRMZxbhsaD
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:10 2024 by rpki-client on console-fra.rpki-client.org