Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          2a8dpyz5EAHNvXCqv6ifQ4B0VTk/TpWgxKbk/+FwaDo=
Subject key identifier:   71:79:8C:FE:B0:BF:E4:29:6A:B3:62:94:8B:59:03:54:E5:77:BB:5A
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       703F12973CA44F00574D3BA46ACABC628DC5FC0E
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa
Signing time:             Fri 04 Jul 2025 09:21:19 +0000
ROA not before:           Fri 04 Jul 2025 09:16:19 +0000
ROA not after:            Fri 03 Jul 2026 09:21:19 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3f:12:97:3c:a4:4f:00:57:4d:3b:a4:6a:ca:bc:62:8d:c5:fc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:19 2025 GMT
            Not After : Jul  3 09:21:19 2026 GMT
        Subject: CN=71798CFEB0BFE4296AB362948B590354E577BB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:eb:9c:cd:69:69:76:41:f0:e5:41:8e:1e:
                    80:15:40:cc:98:8d:dc:ff:70:a0:a4:ef:6c:86:3e:
                    ff:9d:9e:e1:cc:12:07:cb:b3:7b:0d:f5:6f:06:b4:
                    41:40:cb:b5:1a:62:06:ab:ed:1d:b1:33:3a:99:4d:
                    98:ce:f9:49:f5:06:f9:5e:a7:2b:63:bd:a5:a7:e4:
                    67:31:d7:93:4b:45:ed:05:c2:a6:f6:3f:ac:b2:bd:
                    ab:20:d3:94:04:5a:7c:51:40:e9:ad:3c:24:75:a8:
                    3e:35:42:97:a6:4f:0a:9c:0d:99:fc:92:75:d5:21:
                    15:ee:f1:15:04:7a:14:10:6d:3b:c2:c1:d3:7a:bf:
                    6a:ad:3e:b0:f6:47:17:58:25:47:ba:85:bb:8c:9b:
                    55:f6:95:17:b3:33:68:ef:78:39:e8:81:01:e6:2b:
                    42:64:4d:fd:87:9c:78:04:d0:22:df:08:63:19:94:
                    41:a6:bb:b9:1a:6b:f9:a4:a9:3c:2a:c7:c6:96:6a:
                    33:cf:bd:ec:bf:17:c7:b6:6d:f7:c7:bc:85:6f:a6:
                    10:6d:10:a7:19:2e:1e:b2:15:e0:78:2f:57:83:b6:
                    ff:65:9d:a8:c6:e9:0f:22:66:2e:ea:8a:ba:4a:8f:
                    0b:4d:a2:c8:35:89:b4:c4:15:61:dc:7f:67:e2:17:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:79:8C:FE:B0:BF:E4:29:6A:B3:62:94:8B:59:03:54:E5:77:BB:5A
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:fd:c1:0b:d7:86:22:54:ea:44:7d:a5:8b:13:64:79:17:
         2c:b9:10:de:e9:64:35:00:97:64:db:27:57:47:28:6d:95:4e:
         62:4e:d8:61:ce:7e:8d:8a:97:5a:3b:8d:01:10:95:55:6e:67:
         96:0e:3e:35:1b:52:ba:ba:18:fb:f6:e8:0c:b9:1a:cb:53:43:
         1b:bc:77:41:80:99:9e:93:db:c6:17:e4:94:12:64:78:a8:7d:
         4b:6e:09:27:09:20:2d:42:00:fc:02:64:61:af:06:48:02:99:
         24:63:ac:4a:fe:e4:9f:10:d8:b2:b6:ef:2b:be:aa:d2:c3:59:
         51:93:c1:f7:bd:e7:c7:d9:ba:b8:1a:b3:90:3c:4e:a4:68:c8:
         28:f0:cc:59:fc:f4:66:69:34:9a:fe:15:4f:2e:3e:22:ad:7d:
         d3:0c:0d:3f:e4:88:9f:b8:06:14:2f:2e:94:e4:46:52:6c:8f:
         e9:4d:ce:01:52:d1:20:16:19:17:3a:8b:aa:a1:8c:6b:e4:6c:
         69:55:6f:bf:d4:42:ca:b1:41:eb:92:45:a9:38:66:4d:67:99:
         5b:b7:fa:aa:d3:89:70:3d:8e:1a:64:8f:c9:eb:f5:85:97:21:
         ac:0f:57:cf:4e:db:e4:06:55:24:ea:2b:28:4f:0a:a3:ee:c5:
         69:29:be:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:49:48 2025 by rpki-client