Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa
File:                     326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (raw, json)
Hash identifier:          EfQs0Dyc3Wx7OtcpRhbWwhl4LjeqxgwLU85Hzo9Kcgs=
Subject key identifier:   AB:94:DF:42:6C:19:5A:95:ED:23:FC:29:A7:F4:1B:2E:F4:13:11:D2
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       0D3CDEE984A76B28FFCB51448CB0718843E3B7F1
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     199545
IP address blocks:        2a0a:6040:4b4b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3c:de:e9:84:a7:6b:28:ff:cb:51:44:8c:b0:71:88:43:e3:b7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=AB94DF426C195A95ED23FC29A7F41B2EF41311D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:b7:59:6b:07:eb:e1:cf:8b:68:3e:fa:4a:
                    1f:58:2c:18:35:f7:9f:49:15:83:d4:10:3f:3f:cf:
                    90:1a:18:c6:b6:f2:ba:e7:b7:22:17:20:67:14:7d:
                    94:4c:cc:54:c4:7c:4c:5f:ee:4a:d0:d7:67:19:0f:
                    c8:f0:99:d0:4b:b5:47:2c:d6:22:c3:bc:06:a9:2f:
                    2e:7e:b1:ec:cb:fb:6d:0e:f8:53:4e:33:96:b6:d3:
                    d3:4c:2d:8d:ee:12:c5:48:3c:01:9e:47:15:8e:67:
                    06:f5:df:10:97:64:1f:99:a7:55:bf:cf:41:6e:de:
                    3b:f1:49:d4:4e:c9:7c:d5:1f:f7:aa:d7:a1:c6:49:
                    e8:b3:47:b2:d7:ef:87:b2:5c:89:ca:0f:13:60:1d:
                    6e:da:d8:1f:a6:9e:4e:79:10:79:8a:6e:e3:91:0d:
                    77:56:86:bb:e6:85:67:da:d6:e2:ce:89:ca:5b:6a:
                    b5:a3:95:fc:20:04:18:46:de:a0:50:30:31:42:29:
                    39:68:ad:a6:09:fc:4b:5a:1a:3b:df:2b:ae:6a:b0:
                    65:87:56:22:e3:2a:ec:0f:23:5e:4f:90:04:67:d0:
                    ef:30:e9:be:83:e9:69:31:4d:eb:74:08:e7:db:9f:
                    8f:be:d7:71:36:20:db:cc:9f:3d:e2:e4:01:c4:5c:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:94:DF:42:6C:19:5A:95:ED:23:FC:29:A7:F4:1B:2E:F4:13:11:D2
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4b4b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:41:48:52:7e:83:77:11:2c:be:68:3f:96:35:b7:b6:d5:58:
         45:fc:fd:8d:90:17:8d:50:10:e8:5c:53:ec:a0:6e:75:63:eb:
         f4:08:58:2f:5b:f6:78:07:c9:45:18:1a:c1:7d:e1:45:45:68:
         3f:cf:8f:2e:d7:ae:24:cb:e3:d6:3e:67:3e:64:eb:34:c4:7d:
         ad:bb:2c:bf:6a:e5:fd:c3:10:9e:d1:49:81:a9:f0:18:43:d2:
         9c:46:fb:67:b2:ee:4a:a3:ec:ef:9b:5e:3c:3d:76:5d:3b:80:
         77:48:b7:d1:50:c4:b1:6b:fe:ea:e4:7c:93:5c:c7:15:6b:5a:
         2e:e8:37:3d:8c:58:a8:07:62:96:a6:34:9e:1c:0f:79:6f:91:
         7d:d0:84:6c:ba:12:3a:32:bd:da:f5:55:b6:67:e0:46:cf:05:
         74:f9:41:f9:a2:cd:5f:8c:85:e9:4d:71:d2:4f:34:e2:2c:35:
         d0:bd:54:c5:e9:a4:48:85:24:c8:3c:f5:03:e0:97:78:5c:71:
         b5:8e:b6:48:10:8b:c7:08:29:2f:39:e0:15:4a:aa:6d:92:85:
         0d:fa:83:42:74:4e:34:94:cb:d9:a0:ef:64:25:38:71:8a:37:
         34:16:2f:c9:fe:80:7c:50:41:f4:ba:27:b1:c0:96:bb:76:ad:
         27:1c:5f:69
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUDTze6YSnayj/y1FEjLBxiEPjt/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc3RjRCODJDNjBGMEIwMTcxRjA5NzZDRENGQURCNDQx
ODI5REM4MzAeFw0yNDAyMjYxMjAzNTBaFw0yNTAyMjQxMjA4NTBaMDMxMTAvBgNV
BAMTKEFCOTRERjQyNkMxOTVBOTVFRDIzRkMyOUE3RjQxQjJFRjQxMzExRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6LdZawfr4c+LaD76Sh9YLBg1
959JFYPUED8/z5AaGMa28rrntyIXIGcUfZRMzFTEfExf7krQ12cZD8jwmdBLtUcs
1iLDvAapLy5+sezL+20O+FNOM5a209NMLY3uEsVIPAGeRxWOZwb13xCXZB+Zp1W/
z0Fu3jvxSdROyXzVH/eq16HGSeizR7LX74eyXInKDxNgHW7a2B+mnk55EHmKbuOR
DXdWhrvmhWfa1uLOicpbarWjlfwgBBhG3qBQMDFCKTloraYJ/EtaGjvfK65qsGWH
ViLjKuwPI15PkARn0O8w6b6D6WkxTet0COfbn4++13E2INvMnz3i5AHEXEAvAgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUq5TfQmwZWpXtI/wpp/QbLvQTEdIwHwYDVR0j
BBgwFoAU939LgsYPCwFx8Jds3PrbRBgp3IMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMy9GNzdGNEI4MkM2
MEYwQjAxNzFGMDk3NkNEQ0ZBREI0NDE4MjlEQzgzLmNybDB6BggrBgEFBQcBAQRu
MGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3Jl
cG8vQ0xPVURJRS1SUEtJLzAvRjc3RjRCODJDNjBGMEIwMTcxRjA5NzZDRENGQURC
NDQxODI5REM4My5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aB
jHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4
ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQ2
MjM0NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM5MzkzNTM0MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAqCmBAS0swDQYJKoZIhvcNAQELBQADggEBAI9BSFJ+g3cRLL5oP5Y1t7bV
WEX8/Y2QF41QEOhcU+ygbnVj6/QIWC9b9ngHyUUYGsF94UVFaD/Pjy7XriTL49Y+
Zz5k6zTEfa27LL9q5f3DEJ7RSYGp8BhD0pxG+2ey7kqj7O+bXjw9dl07gHdIt9FQ
xLFr/urkfJNcxxVrWi7oNz2MWKgHYpamNJ4cD3lvkX3QhGy6Ejoyvdr1VbZn4EbP
BXT5QfmizV+MhelNcdJPNOIsNdC9VMXppEiFJMg89QPgl3hccbWOtkgQi8cIKS85
4BVKqm2ShQ36g0J0TjSUy9mg72QlOHGKNzQWL8n+gHxQQfS6J7HAlrt2rSccX2k=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org