Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa
File:                     326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          ru4Yr5RUV+7D5LNisUxhVc3n5JvyKoCUlzd333tpYgc=
Subject key identifier:   CD:D3:35:78:C6:89:83:F7:71:16:AE:79:18:4F:07:55:4D:D0:FD:7D
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       579E515618D3EEB1ACC95C16213846FBE07C4729
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 04 Jul 2025 09:21:19 +0000
ROA not before:           Fri 04 Jul 2025 09:16:19 +0000
ROA not after:            Fri 03 Jul 2026 09:21:19 +0000
asID:                     16509
IP address blocks:        2a05:dfc1:1004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9e:51:56:18:d3:ee:b1:ac:c9:5c:16:21:38:46:fb:e0:7c:47:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:19 2025 GMT
            Not After : Jul  3 09:21:19 2026 GMT
        Subject: CN=CDD33578C68983F77116AE79184F07554DD0FD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:30:5a:06:da:b3:50:12:83:2d:b1:d2:52:
                    87:08:aa:9b:bb:1e:9b:9b:53:d8:4d:56:87:b3:eb:
                    6d:7a:7d:62:00:a8:4d:2f:f9:7e:2e:33:dc:36:f7:
                    52:fe:8b:e0:5b:6d:02:b6:2d:24:c4:7b:31:93:5f:
                    c9:75:94:5a:ce:03:d5:6e:72:98:8b:2b:07:a7:d7:
                    76:09:fc:ea:c7:1a:19:d5:5a:78:f0:28:0f:8d:b5:
                    b0:c7:8b:55:ed:a0:1d:8d:12:f3:13:1d:45:d3:00:
                    2d:b8:7d:81:e8:28:97:e6:f1:c2:cb:40:cf:49:47:
                    96:8b:31:37:b9:db:ad:8a:55:46:fa:1d:c5:c8:17:
                    60:c9:ec:db:82:a9:0e:f8:c4:15:f7:e2:4c:ca:64:
                    48:b7:4d:84:45:cc:a7:1d:8c:89:42:c1:73:67:f8:
                    36:9a:4a:56:ad:76:07:84:72:01:be:54:d2:0b:a3:
                    11:56:fc:b5:2e:b2:7e:88:73:d7:4f:9e:bb:84:19:
                    c0:ca:6b:49:7d:c4:1c:67:41:8c:45:53:b1:42:34:
                    cc:f7:c1:9e:02:9a:d6:c7:02:15:48:f5:93:ba:ba:
                    b7:95:28:59:1b:55:2a:2e:ce:9d:e7:3a:1e:64:5c:
                    b6:be:29:5b:e7:c3:d0:1c:aa:36:13:4d:16:c2:43:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D3:35:78:C6:89:83:F7:71:16:AE:79:18:4F:07:55:4D:D0:FD:7D
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:17:e2:42:94:cb:2b:d2:c1:92:87:4d:86:06:2d:a8:c5:
         10:8b:62:98:2f:4b:66:32:4a:cc:d3:3c:2f:c4:c7:15:9d:b7:
         ac:d7:56:1c:7b:14:c7:9f:ba:78:73:a7:8f:04:e0:2a:1e:13:
         ff:d0:fa:19:8e:90:99:5d:b8:ac:e9:b5:01:6a:f8:2f:63:47:
         47:3d:bc:ea:fa:d1:b7:d6:64:f8:0f:0b:a5:07:f9:5d:31:ce:
         e6:34:08:ea:65:bb:82:81:12:79:d1:2d:7b:1b:f9:df:1f:6e:
         0f:e4:4c:f2:ab:06:cb:98:9d:af:5e:60:ab:16:e4:36:b2:dc:
         e1:35:25:4d:aa:ff:3b:f2:d0:bd:42:69:f2:8c:81:8b:26:21:
         e9:83:8b:59:19:3c:24:64:9e:de:6a:45:f6:83:15:13:f3:f0:
         81:a1:c7:5c:02:cd:49:31:16:7a:7c:8b:01:cd:96:66:12:54:
         8e:dc:81:fd:f8:7f:f0:d0:6f:80:69:c8:0b:48:1e:03:9f:99:
         22:fc:c6:55:a0:0a:3d:ed:78:84:59:03:43:e8:34:90:e6:ca:
         eb:00:cd:bd:cb:4b:a3:f8:9e:1a:7c:a0:c1:35:28:da:5f:e8:
         90:82:a3:f5:a3:91:73:8b:3b:1c:b1:ba:6a:76:91:0d:f8:c3:
         41:60:6d:65
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUV55RVhjT7rGsyVwWIThG++B8RykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVCM0Y0
NzVBQkNENzAeFw0yNTA3MDQwOTE2MTlaFw0yNjA3MDMwOTIxMTlaMDMxMTAvBgNV
BAMTKENERDMzNTc4QzY4OTgzRjc3MTE2QUU3OTE4NEYwNzU1NEREMEZEN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3TBaBtqzUBKDLbHSUocIqpu7
HpubU9hNVoez6216fWIAqE0v+X4uM9w291L+i+BbbQK2LSTEezGTX8l1lFrOA9Vu
cpiLKwen13YJ/OrHGhnVWnjwKA+NtbDHi1XtoB2NEvMTHUXTAC24fYHoKJfm8cLL
QM9JR5aLMTe5262KVUb6HcXIF2DJ7NuCqQ74xBX34kzKZEi3TYRFzKcdjIlCwXNn
+DaaSlatdgeEcgG+VNILoxFW/LUusn6Ic9dPnruEGcDKa0l9xBxnQYxFU7FCNMz3
wZ4CmtbHAhVI9ZO6ureVKFkbVSouzp3nOh5kXLa+KVvnw9AcqjYTTRbCQ9kPAgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQUzdM1eMaJg/dxFq55GE8HVU3Q/X0wHwYDVR0j
BBgwFoAUQzh1V9L3+IsdlJZawdFbP0davNcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNi80MzM4NzU1N0Qy
RjdGODhCMUQ5NDk2NUFDMUQxNUIzRjQ3NUFCQ0Q3LmNybDB6BggrBgEFBQcBAQRu
MGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3Jl
cG8vQ0xPVURJRS1SUEtJLzQvNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVC
M0Y0NzVBQkNENy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aB
inJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4
ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS82LzMyNjEzMDM1M2E2NDY2NjMzMTNhMzEz
MDMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKgXfwRAEMA0GCSqGSIb3DQEBCwUAA4IBAQAJDxfiQpTLK9LBkodNhgYtqMUQ
i2KYL0tmMkrM0zwvxMcVnbes11YcexTHn7p4c6ePBOAqHhP/0PoZjpCZXbis6bUB
avgvY0dHPbzq+tG31mT4DwulB/ldMc7mNAjqZbuCgRJ50S17G/nfH24P5EzyqwbL
mJ2vXmCrFuQ2stzhNSVNqv878tC9QmnyjIGLJiHpg4tZGTwkZJ7eakX2gxUT8/CB
ocdcAs1JMRZ6fIsBzZZmElSO3IH9+H/w0G+AacgLSB4Dn5ki/MZVoAo97XiEWQND
6DSQ5srrAM29y0uj+J4afKDBNSjaX+iQgqP1o5FzizscsbpqdpEN+MNBYG1l
-----END CERTIFICATE-----
Generated at Sat Jul 5 10:45:57 2025 by rpki-client