Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313032383a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313032383a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          Gz5zcQ21/RtVA+3C7EYaEpV7+GYbDoSvADgZOuLVKPk=
Subject key identifier:   5A:A5:F9:EE:4B:C0:9D:47:09:8B:24:53:F5:81:BE:01:9F:2C:B4:7D
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       363B8EF9EB579ED5C5145AE923738BF0C9116D57
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313032383a3a2f34382d3438203d3e203534323138.roa
Signing time:             Mon 31 Aug 2026 22:09:55 +0000
ROA not before:           Mon 31 Aug 2026 22:04:55 +0000
ROA not after:            Mon 30 Aug 2027 22:09:55 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 09:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3b:8e:f9:eb:57:9e:d5:c5:14:5a:e9:23:73:8b:f0:c9:11:6d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Aug 31 22:04:55 2026 GMT
            Not After : Aug 30 22:09:55 2027 GMT
        Subject: CN=5AA5F9EE4BC09D47098B2453F581BE019F2CB47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:fa:f5:e4:04:18:04:a8:06:45:1a:d1:c7:
                    7e:66:d1:21:70:d0:63:a6:73:dd:d9:eb:02:73:ca:
                    bf:24:a4:9f:4d:7e:f4:3f:c8:39:c6:b7:83:67:21:
                    95:cf:cf:28:4c:ba:df:1f:c9:43:e6:b7:69:f5:70:
                    15:87:9c:f8:c0:ab:a6:e4:56:05:8a:45:d2:c2:7f:
                    89:90:a0:6c:29:ed:f9:8c:d8:fb:73:95:00:09:e3:
                    31:9b:2b:64:97:de:f8:25:76:fe:b0:4f:ab:25:43:
                    2d:ca:35:24:76:7a:3f:f7:ec:bc:32:04:c4:7e:d7:
                    d0:2c:4f:6d:3e:c7:6f:24:55:b5:9f:da:2a:e6:0f:
                    3a:c5:ef:9c:9a:69:80:c4:da:83:7c:c5:de:24:98:
                    58:74:e3:b7:12:31:71:3b:5e:f6:70:5e:d1:87:1b:
                    fb:7e:d3:a2:1a:13:25:3d:f1:be:a6:e5:0d:d1:7f:
                    28:ac:c0:2c:24:cc:4f:2a:72:aa:96:be:08:65:33:
                    69:c8:72:54:3f:73:4a:a2:fd:40:13:df:29:d6:ca:
                    6f:40:2c:d5:ca:7f:29:12:42:87:a2:03:5a:22:0a:
                    8a:34:cc:16:03:35:dc:25:11:8f:ef:15:e7:69:0c:
                    90:ad:08:f0:5b:3c:15:f8:b7:80:58:45:b8:de:77:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:F9:EE:4B:C0:9D:47:09:8B:24:53:F5:81:BE:01:9F:2C:B4:7D
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313032383a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1028::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:df:55:b4:ab:cc:74:86:5c:df:92:2c:52:c9:9c:28:99:5b:
         8c:c1:13:49:7f:62:42:6c:3c:87:9d:c4:08:b2:15:42:1e:9a:
         fa:0f:22:85:e8:89:c5:e4:9c:d1:55:c6:dc:2a:57:83:45:42:
         43:79:fe:d4:5c:38:c0:76:87:ff:1c:d1:86:88:6e:6b:cc:75:
         8b:d2:bb:0d:5d:6e:b6:6e:3f:fe:2b:69:90:59:97:4b:a6:5a:
         35:fa:5c:3b:0c:8a:64:c9:a6:bb:ee:70:b9:36:65:49:f4:4b:
         e1:0f:57:93:dc:82:73:5a:a5:c7:36:35:9c:75:a3:66:a9:67:
         e3:ff:c5:1b:95:5b:c0:46:3b:c3:2e:8b:a4:a1:31:f1:8d:4f:
         ce:8d:6c:34:41:58:5f:96:70:95:24:32:86:02:7f:20:f1:f4:
         a7:76:65:f1:47:ac:08:7b:10:b8:04:c0:cc:8a:dd:55:49:71:
         a6:e4:b0:5d:95:64:a6:76:f6:a7:3f:cf:5a:27:28:a8:4b:97:
         6d:eb:6f:64:ad:e1:93:d6:6f:74:eb:8c:44:c0:18:2c:63:14:
         d3:7d:2a:f8:f5:f5:ef:40:fc:82:e9:00:d6:43:1e:9a:59:33:
         35:c4:66:08:12:b9:a0:70:59:0a:63:f8:ce:48:c7:d9:8d:28:
         9c:7c:62:a7
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUNjuO+etXntXFFFrpI3OL8MkRbVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVCM0Y0
NzVBQkNENzAeFw0yNjA4MzEyMjA0NTVaFw0yNzA4MzAyMjA5NTVaMDMxMTAvBgNV
BAMTKDVBQTVGOUVFNEJDMDlENDcwOThCMjQ1M0Y1ODFCRTAxOUYyQ0I0N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV4vr15AQYBKgGRRrRx35m0SFw
0GOmc93Z6wJzyr8kpJ9NfvQ/yDnGt4NnIZXPzyhMut8fyUPmt2n1cBWHnPjAq6bk
VgWKRdLCf4mQoGwp7fmM2PtzlQAJ4zGbK2SX3vgldv6wT6slQy3KNSR2ej/37Lwy
BMR+19AsT20+x28kVbWf2irmDzrF75yaaYDE2oN8xd4kmFh047cSMXE7XvZwXtGH
G/t+06IaEyU98b6m5Q3RfyiswCwkzE8qcqqWvghlM2nIclQ/c0qi/UAT3ynWym9A
LNXKfykSQoeiA1oiCoo0zBYDNdwlEY/vFedpDJCtCPBbPBX4t4BYRbjed22BAgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQUWqX57kvAnUcJiyRT9YG+AZ8stH0wHwYDVR0j
BBgwFoAUQzh1V9L3+IsdlJZawdFbP0davNcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNi80MzM4NzU1N0Qy
RjdGODhCMUQ5NDk2NUFDMUQxNUIzRjQ3NUFCQ0Q3LmNybDB6BggrBgEFBQcBAQRu
MGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3Jl
cG8vQ0xPVURJRS1SUEtJLzQvNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVC
M0Y0NzVBQkNENy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aB
inJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4
ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS82LzMyNjEzMDM1M2E2NDY2NjMzMTNhMzEz
MDMyMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM0MzIzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKgXfwRAoMA0GCSqGSIb3DQEBCwUAA4IBAQCW31W0q8x0hlzfkixSyZwomVuM
wRNJf2JCbDyHncQIshVCHpr6DyKF6InF5JzRVcbcKleDRUJDef7UXDjAdof/HNGG
iG5rzHWL0rsNXW62bj/+K2mQWZdLplo1+lw7DIpkyaa77nC5NmVJ9EvhD1eT3IJz
WqXHNjWcdaNmqWfj/8UblVvARjvDLoukoTHxjU/OjWw0QVhflnCVJDKGAn8g8fSn
dmXxR6wIexC4BMDMit1VSXGm5LBdlWSmdvanP89aJyioS5dt629kreGT1m9064xE
wBgsYxTTfSr49fXvQPyC6QDWQx6aWTM1xGYIErmgcFkKY/jOSMfZjSicfGKn
-----END CERTIFICATE-----