Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa
File:                     326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          kOf0Y/COmTzTMU6cdvvc0ZRdNI7Zl9i67Ci7JrJ9pQ4=
Subject key identifier:   A1:B6:76:52:08:D9:66:DD:F7:8D:62:1D:E5:52:9A:B5:B3:3A:2B:0B
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       7E1E1350A2879DB256C6C0529E0795AFCDE8F1C6
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa
Signing time:             Fri 04 Jul 2025 09:21:17 +0000
ROA not before:           Fri 04 Jul 2025 09:16:17 +0000
ROA not after:            Fri 03 Jul 2026 09:21:17 +0000
asID:                     59678
IP address blocks:        2a05:dfc1:1014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1e:13:50:a2:87:9d:b2:56:c6:c0:52:9e:07:95:af:cd:e8:f1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:17 2025 GMT
            Not After : Jul  3 09:21:17 2026 GMT
        Subject: CN=A1B6765208D966DDF78D621DE5529AB5B33A2B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:23:2d:8a:0a:ff:1e:44:00:7b:da:bf:98:
                    e8:18:ab:2c:88:ab:54:80:d6:5c:b2:8c:03:f4:b5:
                    3e:64:64:8f:8e:b9:61:c0:b5:84:97:e0:e1:ce:48:
                    b9:25:08:62:e5:20:91:10:ac:51:a3:ce:f2:15:27:
                    15:d3:04:d6:e7:e9:79:86:e8:cf:d5:d1:50:9c:90:
                    94:a4:1c:a1:8f:44:37:9a:92:1d:3c:87:61:f3:cf:
                    2d:96:79:3f:7c:67:db:04:ad:11:c1:24:2c:3a:eb:
                    da:d9:54:d9:6b:5e:57:a9:44:d6:76:cd:9d:8b:15:
                    02:02:5d:29:b6:9c:cf:70:b6:4d:7e:34:4c:e4:98:
                    db:ef:72:6c:c7:c2:0e:b7:36:76:eb:16:5d:2a:d5:
                    53:14:02:ec:23:18:f7:e2:a4:cf:27:b5:ac:57:78:
                    3d:9e:15:57:5b:dd:5f:79:40:ae:44:e7:d2:29:8b:
                    17:f5:76:74:c4:41:d4:ce:98:86:2b:fe:00:ce:3e:
                    41:b7:43:d0:b0:c6:eb:e1:4f:33:23:9f:0c:ec:e4:
                    f1:28:3c:18:4c:13:ae:94:4c:6c:f7:29:ca:53:61:
                    35:33:6b:77:d9:2e:2d:b9:9c:32:f6:db:50:08:78:
                    18:65:3c:b4:8a:85:e1:b8:e4:05:48:50:6c:91:9b:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:76:52:08:D9:66:DD:F7:8D:62:1D:E5:52:9A:B5:B3:3A:2B:0B
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:dc:1b:db:5b:31:b9:97:a4:81:f1:fa:d3:73:7d:61:4f:37:
         26:b0:3c:e4:c5:00:96:9d:5b:3b:fa:cf:c7:63:fc:b6:af:33:
         36:e8:2c:70:bd:85:dc:89:3b:85:04:1d:bb:18:a8:fb:70:4a:
         85:c5:ee:dd:11:49:dd:4b:8c:26:40:e0:31:4c:55:a1:bd:d8:
         96:96:d9:ce:34:61:47:77:a4:f4:7b:19:46:c3:51:8d:4a:24:
         65:07:fb:78:d8:fb:c0:12:7d:ab:94:3e:3f:17:34:f7:26:be:
         71:94:e7:bd:bf:0e:a4:17:8d:66:23:5f:5c:6a:dc:32:f7:fe:
         3a:77:4f:cc:11:fb:e2:ba:d2:10:40:24:3f:16:13:39:64:17:
         ef:4a:30:ad:4f:00:17:28:20:0e:db:f2:5c:99:7f:fb:91:cc:
         e5:71:98:0d:7c:83:95:00:43:d9:77:8e:eb:77:1e:97:41:9d:
         d6:d7:e4:97:ba:b7:57:52:ca:65:a4:70:89:85:e7:e8:7c:4e:
         cc:4c:13:a0:b6:14:f8:82:af:ee:16:71:41:60:2d:4b:df:09:
         48:bb:96:4b:97:f1:e3:ae:e7:3d:5f:4e:b5:93:0e:10:46:bb:
         d7:99:51:51:6f:e1:a1:25:b8:cb:ac:48:cb:22:49:af:15:fc:
         0a:3f:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:48:53 2025 by rpki-client