Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa
File:                     326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          EepqtJ/1AIBSbcvfmTBNRqAuwz/KXjpikda3abvNVMo=
Subject key identifier:   68:5F:2A:47:B1:94:89:FD:4C:85:5D:5A:2E:F6:FE:45:87:8D:74:1B
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       7AC1EF44E90566C984F5AF38D2B94E70AC606E9C
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 04 Jul 2025 09:21:18 +0000
ROA not before:           Fri 04 Jul 2025 09:16:18 +0000
ROA not after:            Fri 03 Jul 2026 09:21:18 +0000
asID:                     14618
IP address blocks:        2a05:dfc1:1004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c1:ef:44:e9:05:66:c9:84:f5:af:38:d2:b9:4e:70:ac:60:6e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:18 2025 GMT
            Not After : Jul  3 09:21:18 2026 GMT
        Subject: CN=685F2A47B19489FD4C855D5A2EF6FE45878D741B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:e5:8a:bc:7f:6d:ab:05:2c:11:f4:64:88:
                    1d:29:f0:7f:ce:5c:75:c1:69:9b:aa:1a:85:ac:cb:
                    37:43:8d:85:fc:92:0a:e9:41:e2:4c:9e:d0:48:0b:
                    99:69:9b:8d:42:fa:54:ff:a9:e4:b4:35:69:fe:11:
                    06:18:aa:b8:91:a0:e3:be:35:30:3f:2c:bc:1c:72:
                    f4:8a:76:8b:40:f9:e8:fb:49:9f:d1:e8:e2:36:75:
                    67:f7:e4:56:b5:e8:9d:c2:18:61:ab:0d:bd:c8:5d:
                    f2:cd:b3:00:b7:33:7d:64:f9:42:c0:21:29:70:31:
                    22:3f:87:1d:4b:56:27:f6:eb:ad:e4:4d:a2:aa:d9:
                    6e:b2:87:c6:7f:5c:68:54:3e:bd:8c:2e:51:c5:45:
                    c4:e0:6b:a2:04:96:ae:29:36:a3:4e:d5:b7:d3:64:
                    9c:d6:33:08:9b:fb:04:98:74:4c:e3:fe:86:d7:5a:
                    7a:55:97:5e:1e:11:8a:a3:7c:10:39:35:81:5c:79:
                    56:de:c0:42:73:cb:74:8a:c9:a5:c6:66:65:18:d1:
                    87:08:48:5d:f0:d2:14:a8:17:40:37:44:db:57:10:
                    1a:ae:07:0b:22:50:7f:bf:33:4c:36:12:b6:c4:b2:
                    40:be:a9:5b:49:68:1f:b1:b9:34:28:68:4f:15:18:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5F:2A:47:B1:94:89:FD:4C:85:5D:5A:2E:F6:FE:45:87:8D:74:1B
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:5d:2c:d9:8c:79:c8:dd:0c:33:5a:14:85:ba:85:7b:3e:0a:
         59:1b:43:e5:46:d9:e8:8e:8c:d0:fa:91:63:79:13:5a:91:b3:
         bb:f8:b9:ca:7b:3c:d5:dd:62:1e:0a:f9:0d:81:27:1c:79:f3:
         c2:bd:20:46:af:3c:91:f1:7c:d8:76:e8:17:43:00:4e:7d:0f:
         39:d5:74:1b:19:11:fa:f1:4b:0d:9a:9d:ff:e3:d4:97:9a:b2:
         3f:b8:ef:19:09:9b:13:91:b6:d8:9f:6d:71:b5:b2:9a:6b:32:
         c1:d9:b8:3b:0f:31:3e:86:39:9a:f5:e5:e1:fb:21:de:a0:7d:
         d1:3b:e5:b2:02:d4:eb:e8:63:dc:22:90:8c:6d:d0:a7:d9:13:
         d3:dd:e4:67:f3:27:3f:91:4c:72:2e:f5:56:09:73:db:2f:9d:
         e1:de:f1:32:22:8e:05:ca:de:23:99:a6:6f:0a:30:c8:72:3f:
         45:23:b8:24:1f:e2:2e:5c:ed:87:e4:43:20:fc:d5:95:4a:f8:
         81:02:f4:35:fb:38:bb:b0:28:4a:8f:9f:1e:cc:3a:1b:f4:c8:
         d7:9d:a1:70:98:ca:60:90:9e:db:b8:2a:a9:cb:ff:13:25:6b:
         37:18:06:0d:fd:e2:c3:8a:a9:36:b4:8d:f5:88:9e:8c:9c:99:
         ee:d1:a9:df
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUesHvROkFZsmE9a840rlOcKxgbpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVCM0Y0
NzVBQkNENzAeFw0yNTA3MDQwOTE2MThaFw0yNjA3MDMwOTIxMThaMDMxMTAvBgNV
BAMTKDY4NUYyQTQ3QjE5NDg5RkQ0Qzg1NUQ1QTJFRjZGRTQ1ODc4RDc0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PeWKvH9tqwUsEfRkiB0p8H/O
XHXBaZuqGoWsyzdDjYX8kgrpQeJMntBIC5lpm41C+lT/qeS0NWn+EQYYqriRoOO+
NTA/LLwccvSKdotA+ej7SZ/R6OI2dWf35Fa16J3CGGGrDb3IXfLNswC3M31k+ULA
ISlwMSI/hx1LVif2663kTaKq2W6yh8Z/XGhUPr2MLlHFRcTga6IElq4pNqNO1bfT
ZJzWMwib+wSYdEzj/obXWnpVl14eEYqjfBA5NYFceVbewEJzy3SKyaXGZmUY0YcI
SF3w0hSoF0A3RNtXEBquBwsiUH+/M0w2ErbEskC+qVtJaB+xuTQoaE8VGOjfAgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQUaF8qR7GUif1MhV1aLvb+RYeNdBswHwYDVR0j
BBgwFoAUQzh1V9L3+IsdlJZawdFbP0davNcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNi80MzM4NzU1N0Qy
RjdGODhCMUQ5NDk2NUFDMUQxNUIzRjQ3NUFCQ0Q3LmNybDB6BggrBgEFBQcBAQRu
MGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3Jl
cG8vQ0xPVURJRS1SUEtJLzQvNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVC
M0Y0NzVBQkNENy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aB
inJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4
ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS82LzMyNjEzMDM1M2E2NDY2NjMzMTNhMzEz
MDMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKgXfwRAEMA0GCSqGSIb3DQEBCwUAA4IBAQChXSzZjHnI3QwzWhSFuoV7PgpZ
G0PlRtnojozQ+pFjeRNakbO7+LnKezzV3WIeCvkNgSccefPCvSBGrzyR8XzYdugX
QwBOfQ851XQbGRH68UsNmp3/49SXmrI/uO8ZCZsTkbbYn21xtbKaazLB2bg7DzE+
hjma9eXh+yHeoH3RO+WyAtTr6GPcIpCMbdCn2RPT3eRn8yc/kUxyLvVWCXPbL53h
3vEyIo4Fyt4jmaZvCjDIcj9FI7gkH+IuXO2H5EMg/NWVSviBAvQ1+zi7sChKj58e
zDob9MjXnaFwmMpgkJ7buCqpy/8TJWs3GAYN/eLDiqk2tI31iJ6MnJnu0anf
-----END CERTIFICATE-----
Generated at Sat Jul 5 10:57:08 2025 by rpki-client