Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa
File:                     326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (raw, json)
Hash identifier:          VpgS+RML1f6D9HT2iGquOB/7Rg+/aypKQBnS7XagYpo=
Subject key identifier:   0B:5C:1F:05:00:6B:3C:2B:1F:6C:B0:F9:68:0C:60:BF:D5:71:DB:4F
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       1B90861D7792A0FF28D6152CBF28397F97D5DADE
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa
Signing time:             Fri 04 Jul 2025 09:21:19 +0000
ROA not before:           Fri 04 Jul 2025 09:16:19 +0000
ROA not after:            Fri 03 Jul 2026 09:21:19 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:90:86:1d:77:92:a0:ff:28:d6:15:2c:bf:28:39:7f:97:d5:da:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:19 2025 GMT
            Not After : Jul  3 09:21:19 2026 GMT
        Subject: CN=0B5C1F05006B3C2B1F6CB0F9680C60BFD571DB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:93:d6:60:bf:07:fb:9d:0a:16:fb:51:9b:
                    c2:45:29:c7:4a:59:4e:93:ab:61:cf:d0:21:b0:55:
                    33:da:24:36:50:e9:c6:66:f7:db:f9:88:f3:a6:d4:
                    f2:7b:37:35:93:db:48:73:44:d6:b8:48:e4:00:a4:
                    48:ce:1f:ef:26:90:c5:6f:f9:33:c9:c6:77:34:a0:
                    d0:27:cf:20:c3:32:01:34:79:30:5b:f0:58:fd:30:
                    1c:3c:24:18:d2:1f:9b:7a:54:b4:27:ea:35:90:f3:
                    c8:74:91:d1:ad:3f:84:64:34:18:34:ac:2f:10:d3:
                    12:6d:c1:12:6a:e8:3e:8d:db:86:85:02:27:95:ae:
                    c8:8e:20:20:65:d2:b1:c0:df:c1:76:23:bf:c0:d9:
                    5d:b9:6f:2d:a9:fd:0f:bb:80:ee:af:fb:4a:23:e0:
                    6b:d4:10:41:2e:fa:6c:b2:d2:5c:df:a7:c5:a4:6a:
                    ff:0e:b3:c4:31:2c:f7:f8:55:9d:f4:3b:af:48:d5:
                    8f:20:df:1d:f1:4c:d1:fb:cf:76:c2:2a:a8:6f:c1:
                    32:42:9c:38:10:fb:26:62:82:0e:69:62:b5:28:35:
                    1f:e2:6a:6e:8a:b4:eb:d2:dc:df:42:a9:93:84:6f:
                    64:a6:07:be:81:f9:46:90:17:aa:a5:f7:0f:5b:5d:
                    4c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5C:1F:05:00:6B:3C:2B:1F:6C:B0:F9:68:0C:60:BF:D5:71:DB:4F
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:aa:57:d9:91:0b:06:1a:c4:48:b3:b6:f1:84:e0:41:5c:0a:
         f3:d4:0a:38:ea:a3:2a:e8:6e:a0:38:84:b7:0b:ee:7f:bd:ac:
         e5:c9:c5:bc:71:b7:2e:c0:e7:a7:40:4d:e4:57:71:fb:ff:8b:
         02:0d:00:e5:42:38:20:0e:e3:d2:47:e4:cb:cc:51:20:a1:e4:
         1d:a6:b9:81:cf:49:2a:34:d5:0d:88:db:52:3f:12:47:cb:ea:
         c4:a6:98:d7:08:3c:e3:b2:1d:02:90:e5:83:4d:f9:2c:6d:ae:
         b8:bf:5a:0a:7e:b4:ca:9a:7a:4f:4c:48:9b:5c:43:65:09:45:
         18:13:ae:5c:a1:ab:dc:88:58:e3:20:e9:26:bd:e0:f6:07:15:
         e3:1c:10:59:68:55:9e:e8:15:56:c1:96:b7:88:bd:6e:56:23:
         07:47:6f:40:27:12:96:e7:af:ab:b7:9a:6c:a1:b2:6f:d5:c5:
         83:b7:21:a1:2f:c9:80:06:18:60:6b:7e:aa:e2:c7:e0:d6:80:
         8e:ac:91:1e:13:52:25:3f:9c:b9:4f:8b:43:2b:41:b1:0e:79:
         fa:d5:7f:a2:85:76:48:ad:48:67:d6:4b:a9:78:6a:f5:a9:88:
         4b:b9:3c:44:9f:23:d5:76:19:de:71:2d:7c:8b:bb:e4:7d:10:
         54:cb:12:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:51:42 2025 by rpki-client