Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          8iHgh4mRlo/rwO1Bw19ggiPQiQEw7HmgXiK7jodqthQ=
Subject key identifier:   7B:BC:E0:54:55:1F:66:3D:43:40:71:2A:BF:60:61:F1:4F:F2:DA:63
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       4F0C45C1DC412CC4B54156B13B5FF8393A542CA5
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa
Signing time:             Fri 04 Jul 2025 09:21:19 +0000
ROA not before:           Fri 04 Jul 2025 09:16:19 +0000
ROA not after:            Fri 03 Jul 2026 09:21:19 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0c:45:c1:dc:41:2c:c4:b5:41:56:b1:3b:5f:f8:39:3a:54:2c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:19 2025 GMT
            Not After : Jul  3 09:21:19 2026 GMT
        Subject: CN=7BBCE054551F663D4340712ABF6061F14FF2DA63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:bb:50:7f:ad:5e:37:d3:ad:5d:ec:40:e4:
                    f9:bb:f2:4a:4e:e4:38:30:b8:49:b2:bc:08:2b:75:
                    e8:c3:cf:a6:84:5c:36:b6:4c:a9:22:87:95:82:f1:
                    fb:0b:24:24:f3:9d:3b:a8:2d:a6:5a:2c:30:59:10:
                    72:c8:cf:a3:9d:1b:ea:50:51:e8:78:e0:5d:19:17:
                    3c:b1:82:ab:ff:5c:7d:28:0d:7a:1d:89:b7:2c:cb:
                    6a:70:28:a5:54:83:48:64:94:12:89:b9:a1:74:9b:
                    ac:76:dd:02:6b:54:b3:38:ec:47:18:9c:fc:d6:4b:
                    59:9f:09:ee:5b:dc:9e:5a:8b:60:c4:45:9f:71:d8:
                    e4:24:29:17:ef:1d:9c:5b:94:f0:78:f6:f1:db:b8:
                    37:7a:61:96:40:f8:ce:75:bb:00:15:7c:03:12:e5:
                    7d:fe:bf:32:7c:48:18:52:71:ff:69:a0:6f:c4:e5:
                    c3:d6:19:e0:a6:2e:dd:93:74:9a:0e:73:53:be:ec:
                    ae:db:53:6c:d7:56:c2:d6:22:58:a0:24:b5:f4:92:
                    2e:43:e5:8c:78:c6:0e:d0:ba:60:fd:5e:8d:2c:50:
                    34:7f:1e:e2:04:ca:58:bc:c3:77:60:fb:fa:d3:a0:
                    82:e2:e5:17:d4:a8:9f:2b:ea:d3:47:27:38:66:99:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BC:E0:54:55:1F:66:3D:43:40:71:2A:BF:60:61:F1:4F:F2:DA:63
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:51:5a:43:a4:2a:c4:4c:00:6c:6a:3e:3e:f9:0e:62:87:d0:
         f5:30:5f:d5:6d:d7:11:3e:4d:f0:b6:7e:79:21:01:1b:4a:21:
         34:5f:dd:3a:6c:0a:a2:88:e0:19:f2:b9:21:4b:16:5d:bb:80:
         cc:ba:a5:2c:64:96:d3:4f:3f:8e:a7:7d:82:97:bb:49:02:7b:
         1c:16:38:f5:5a:43:d9:27:df:0c:36:91:fd:ce:4a:19:f2:be:
         32:2c:19:ec:a5:a3:9d:62:d6:49:a2:41:92:a6:21:45:ea:75:
         98:4f:b7:a0:23:a5:56:08:4e:91:1f:bb:9e:34:66:b9:3d:77:
         a4:3d:a5:14:22:38:7e:81:85:5e:9c:71:87:2c:f7:68:c0:27:
         f6:1f:4a:f4:d8:1f:ea:d3:39:45:cb:a0:47:5d:e0:45:5d:8a:
         52:1b:9d:ed:e8:7a:20:db:df:70:7d:8f:3d:eb:b0:0f:06:9e:
         a8:52:0a:b3:09:eb:5b:e7:bd:14:15:2c:17:51:c6:ce:f5:0f:
         24:0a:dc:e8:94:e5:dd:e5:11:d4:f9:9e:f4:fc:87:75:b7:ce:
         90:d8:37:55:08:c2:8b:67:a1:9b:22:48:fc:f3:d0:d6:4b:5b:
         7d:f8:d5:c6:00:a5:c0:72:43:46:6b:2b:64:9e:ca:54:8d:f0:
         7c:49:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:46:31 2025 by rpki-client