Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          mW+xJRpA1JLCAhpFJnSztJR3X1zJVko4+BIjilS/nmA=
Subject key identifier:   DF:01:10:C4:76:75:C1:18:F7:3E:C7:22:DD:3B:58:FA:53:A3:8F:6E
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       50AFEBCE6C4718949AD9AB1C22A2F22F3DC3E71A
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa
Signing time:             Fri 04 Jul 2025 09:21:18 +0000
ROA not before:           Fri 04 Jul 2025 09:16:18 +0000
ROA not after:            Fri 03 Jul 2026 09:21:18 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:af:eb:ce:6c:47:18:94:9a:d9:ab:1c:22:a2:f2:2f:3d:c3:e7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:18 2025 GMT
            Not After : Jul  3 09:21:18 2026 GMT
        Subject: CN=DF0110C47675C118F73EC722DD3B58FA53A38F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:67:1a:3a:2e:83:72:32:d4:23:16:87:49:
                    03:7c:cc:d9:ce:46:ac:16:07:f1:ae:44:29:98:e5:
                    0d:75:7f:76:6c:72:63:c1:a9:63:48:5c:74:8e:98:
                    00:7f:46:f5:fe:68:57:be:5c:67:07:76:a7:e9:59:
                    54:b2:af:83:20:54:cf:bb:79:c2:3e:ec:01:74:6f:
                    6a:c6:5f:ca:35:3f:5f:89:3e:2c:b9:34:1b:dd:04:
                    76:13:0b:11:62:09:9a:62:45:2c:f9:f3:7b:87:0d:
                    08:80:51:95:70:8b:a2:df:f9:ca:38:6f:58:6c:ac:
                    e7:69:28:98:08:ff:dd:52:90:87:67:31:41:de:d9:
                    4f:d4:3b:31:e0:9b:93:98:c1:4e:dd:1f:c4:b0:83:
                    12:f9:f1:19:63:ff:fa:db:a7:dd:f6:37:77:e5:98:
                    93:b2:0e:b5:87:1c:3a:90:a2:4e:18:70:05:24:47:
                    94:e5:27:61:af:0d:e5:38:db:10:57:c9:ff:b7:e9:
                    17:1a:0b:5b:b9:35:64:cb:24:9e:80:44:39:de:3a:
                    12:34:5a:3a:74:91:b0:fb:19:54:13:42:b3:fd:a0:
                    f8:bc:1a:b1:3b:8b:1d:13:18:cb:3e:d8:88:bc:07:
                    3b:a8:d6:6f:77:30:95:aa:ec:ca:23:ac:b7:0f:3b:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:01:10:C4:76:75:C1:18:F7:3E:C7:22:DD:3B:58:FA:53:A3:8F:6E
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1007::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:54:cf:77:aa:e5:c6:8a:c7:44:f7:b6:a7:a3:c0:95:d6:24:
         26:6e:0d:54:44:53:41:a2:95:0b:ab:cb:25:cd:a6:e4:a2:f9:
         b7:e8:64:f5:83:3b:11:30:49:cd:33:96:af:d5:39:65:90:73:
         c8:53:8e:39:39:40:12:5f:db:4f:28:5b:7f:46:ad:eb:45:87:
         ba:85:29:9f:b7:7d:4d:66:b7:a5:0e:2e:74:9c:8c:a0:df:e6:
         8f:9a:4c:de:7f:fb:9a:29:8b:6f:81:6c:91:c8:f8:75:7d:4e:
         23:21:31:90:18:17:25:93:f6:c0:ba:9d:ee:ad:3f:51:e1:dd:
         38:85:a1:4a:f7:2b:60:69:19:82:5c:95:ae:24:26:4f:55:7a:
         34:d1:b9:7b:5e:76:5a:d0:0f:9b:ca:fd:bd:d1:44:80:54:ab:
         c8:e5:d1:2d:c6:72:73:a6:25:65:3d:94:c1:11:9a:fd:e7:fa:
         d1:2f:36:02:8f:22:d3:53:32:82:12:5f:b5:97:a8:ad:f3:fb:
         3b:e2:ca:5f:56:4e:38:9c:b7:75:be:af:8d:18:7e:4d:9c:99:
         12:9c:b1:00:72:bd:cd:b6:39:18:23:f8:0f:89:a5:f4:29:45:
         6d:af:bc:e1:e5:3b:8d:e2:36:c8:5e:01:37:f4:af:5f:c6:ad:
         87:e0:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:50:54 2025 by rpki-client