Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa
File:                     326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (raw, json)
Hash identifier:          Mm4b5uiTirSzAclhjwrvqH8mQa5vVh+TWe3AWlTU2YA=
Subject key identifier:   0F:40:60:87:76:6A:A9:A4:F0:5C:19:DB:66:32:06:55:9B:11:7C:19
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       7769D94B8C89A18D7EF3E100842C53C5C1E2FFC1
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa
Signing time:             Fri 04 Jul 2025 09:21:18 +0000
ROA not before:           Fri 04 Jul 2025 09:16:18 +0000
ROA not after:            Fri 03 Jul 2026 09:21:18 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1000::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:69:d9:4b:8c:89:a1:8d:7e:f3:e1:00:84:2c:53:c5:c1:e2:ff:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:18 2025 GMT
            Not After : Jul  3 09:21:18 2026 GMT
        Subject: CN=0F406087766AA9A4F05C19DB663206559B117C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:ef:01:ab:b0:f1:2a:a3:aa:aa:9f:50:64:
                    f4:e8:6c:17:fd:72:8d:d9:66:85:fb:61:fd:cb:4a:
                    5c:c0:8a:3a:47:b7:af:6e:5c:03:4c:f6:cd:94:04:
                    58:3e:27:92:db:39:5d:ea:95:b5:2e:84:1d:ac:df:
                    72:9f:5b:3f:0e:d9:dc:17:ed:5d:27:8c:fb:c1:c5:
                    e3:ca:12:80:47:7d:15:f1:89:08:39:b4:74:97:ca:
                    0d:bd:9f:53:e1:ed:5a:ae:45:2f:fb:bf:cb:32:a1:
                    b4:e8:76:22:f4:2f:e9:dd:d8:1a:53:30:e1:90:37:
                    1f:ee:0b:b4:b6:5f:f6:1c:e4:c4:16:9d:8a:59:02:
                    22:69:af:e6:e2:b6:7c:86:27:b7:8f:15:3e:77:6d:
                    c8:ea:80:22:d9:02:0c:08:ff:f1:d2:5a:00:6b:18:
                    3c:53:e6:cf:07:0c:7a:7e:7d:49:cd:ba:ca:56:c3:
                    41:54:d9:c1:fe:c8:ff:46:40:2e:c7:05:a8:89:f2:
                    0e:3a:96:71:74:cd:f4:db:4e:46:30:42:80:50:b8:
                    0c:d4:49:81:1b:4f:c8:3d:c1:2b:8d:c2:46:48:eb:
                    02:7f:fd:a0:20:ad:2f:c1:36:96:a9:d4:75:a8:25:
                    74:62:e2:73:c5:2d:67:e3:b9:a8:64:68:4d:c2:4e:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:40:60:87:76:6A:A9:A4:F0:5C:19:DB:66:32:06:55:9B:11:7C:19
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:0a:06:d1:49:ee:a2:10:36:d4:2b:61:4f:28:57:bd:85:97:
         8d:ba:ff:42:56:e1:3e:3b:8e:84:e4:b5:4a:d9:8b:63:eb:c7:
         9a:91:96:4c:85:00:ca:42:93:e8:d8:52:a5:ba:29:6a:8c:08:
         32:3a:71:ec:0b:c9:9e:80:be:0b:77:c0:ab:80:90:7a:ad:1e:
         02:a3:b3:c0:4a:47:e6:ca:ce:ad:67:de:f6:c8:da:f1:2e:10:
         bb:3b:04:c9:f8:2a:d7:4e:a5:9c:e7:2f:05:c1:92:91:8f:bc:
         80:8c:06:7c:96:b9:58:02:ea:7a:14:48:18:4c:4e:99:f3:89:
         ac:04:3a:09:ec:56:df:c2:c3:16:21:5f:a9:39:8e:08:4c:8f:
         c8:17:ce:71:84:1f:d6:7c:05:4a:6b:f6:ee:76:50:c0:79:81:
         89:b0:4d:2f:50:75:8e:ce:f3:b8:5b:9e:5d:ac:5b:c2:2d:9e:
         0d:09:1f:fd:1a:24:ee:74:50:0f:15:cb:31:59:39:bd:e5:db:
         8e:27:f3:42:22:60:07:e9:d8:16:cc:87:9a:be:04:7f:52:90:
         79:2f:d6:10:29:8d:49:19:01:f3:94:92:5e:9e:8e:a6:e2:bb:
         af:23:62:ba:0f:b5:fa:8b:07:21:d8:74:d6:73:15:35:09:53:
         d0:3b:b6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:51:43 2025 by rpki-client