Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          KTyh2SEV5HU612WTdMvSAjCnScbC24rbm18nZVQRDCM=
Subject key identifier:   3C:D5:D1:98:BD:E1:E3:6A:04:2C:22:B8:C0:37:E2:32:48:C7:58:AE
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       4975166DBA474D1431261F3B6CD4A02246159717
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa
Signing time:             Fri 04 Jul 2025 09:21:18 +0000
ROA not before:           Fri 04 Jul 2025 09:16:18 +0000
ROA not after:            Fri 03 Jul 2026 09:21:18 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:75:16:6d:ba:47:4d:14:31:26:1f:3b:6c:d4:a0:22:46:15:97:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:18 2025 GMT
            Not After : Jul  3 09:21:18 2026 GMT
        Subject: CN=3CD5D198BDE1E36A042C22B8C037E23248C758AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:e7:f5:3a:c2:31:fb:28:92:c1:b1:e6:1d:
                    7b:99:57:8c:02:3f:1c:b2:82:bc:e1:86:93:b3:80:
                    44:3e:00:fb:a2:d3:71:ce:b9:e2:c4:1b:9c:08:30:
                    c1:c2:5c:3e:88:9e:c8:49:d6:1d:f7:c6:c5:79:b5:
                    c1:63:6d:cd:0d:b3:a1:70:16:09:13:4f:b8:74:4e:
                    0f:0a:c1:18:8a:c3:0a:d3:a2:f1:25:37:52:dd:0e:
                    a9:50:cb:50:cf:d1:78:33:6c:12:ab:43:f6:ca:a4:
                    4b:5e:99:26:af:b1:99:19:a1:cd:6c:57:f9:4b:d1:
                    02:b5:86:e3:46:5a:eb:c6:5e:18:b8:25:df:a6:7f:
                    47:e2:ec:11:96:64:29:f9:c1:01:3e:54:d1:50:54:
                    49:41:83:2d:c1:b3:5b:e4:0d:58:86:21:a8:ff:1e:
                    c6:24:d9:50:e3:f1:19:23:bf:4b:c8:46:02:dd:9f:
                    43:8f:ed:09:e3:cc:4b:ea:47:25:e8:ed:cb:3d:98:
                    cf:01:ec:a6:f0:d8:14:28:2c:8e:d5:1e:39:02:77:
                    77:a9:c5:c3:d2:4f:9d:78:fa:c1:fd:38:df:dd:2d:
                    6f:97:95:63:33:2d:9c:7f:f0:d8:17:11:0b:10:aa:
                    d7:94:2c:56:73:12:d7:8d:31:37:da:e1:ce:07:a4:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D5:D1:98:BD:E1:E3:6A:04:2C:22:B8:C0:37:E2:32:48:C7:58:AE
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:3e:92:bf:c7:00:48:00:21:ba:d3:20:9c:a4:36:21:d3:5d:
         9f:7c:98:fc:d5:d5:20:a1:4a:b5:89:b2:8c:29:45:44:ad:c2:
         05:5d:83:56:93:8a:5c:57:0f:67:f6:d9:2e:cb:09:51:24:44:
         a1:20:f5:c4:53:ac:70:0c:1c:65:99:98:6b:52:ea:a6:22:1b:
         ce:d3:d1:65:6e:0f:a9:3e:f4:21:4c:63:6f:10:f0:c3:35:4e:
         e6:40:8b:af:f9:50:eb:9d:d6:b1:13:dd:3d:75:c5:82:41:5c:
         79:4b:fa:06:e5:fa:9a:a2:9d:10:b3:83:51:d5:40:94:2f:ee:
         e0:ce:83:52:7e:c9:3e:5c:82:83:7d:79:06:43:65:17:87:62:
         c2:b8:02:16:8c:8c:8c:24:da:d7:53:b1:39:af:31:18:d7:61:
         74:df:ef:a3:25:a6:e4:e0:ae:01:10:1b:4e:34:cb:1c:d9:f9:
         43:e1:8a:a4:f8:53:a1:c1:c4:2e:54:6a:8c:40:d5:8d:14:c4:
         13:10:7a:48:00:f5:87:44:7d:ee:8d:35:6f:25:a7:0a:4f:ae:
         21:6d:42:25:78:b8:6d:c6:c3:d3:62:e9:d9:92:5f:f5:d4:27:
         fc:9f:53:59:37:75:bb:38:4d:da:48:b7:d4:9f:f4:0f:5b:37:
         a2:96:7d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:48:49 2025 by rpki-client