Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa
File:                     326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (raw, json)
Hash identifier:          DZRukcmd95/CGy0FlZlIkAqKif6bdCvjwCU/Yk6I/eE=
Subject key identifier:   72:0A:58:1F:41:01:17:E3:26:09:1C:FB:18:8A:06:99:0B:74:6E:7B
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       3C9CF23E66E21CCA2423B55782C335BFAF5AC803
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa
Signing time:             Fri 04 Jul 2025 09:21:19 +0000
ROA not before:           Fri 04 Jul 2025 09:16:19 +0000
ROA not after:            Fri 03 Jul 2026 09:21:19 +0000
asID:                     59678
IP address blocks:        2a0a:6040:4b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9c:f2:3e:66:e2:1c:ca:24:23:b5:57:82:c3:35:bf:af:5a:c8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jul  4 09:16:19 2025 GMT
            Not After : Jul  3 09:21:19 2026 GMT
        Subject: CN=720A581F410117E326091CFB188A06990B746E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:9e:62:98:b5:74:00:ba:cc:1a:bf:9e:47:
                    a4:92:e7:c9:ad:8f:9b:39:58:5a:8e:bc:44:e2:f7:
                    86:47:5c:6e:44:46:ae:31:29:4b:d2:f1:81:bd:47:
                    fa:0a:be:21:e5:fa:cc:d8:ea:79:f9:b9:79:64:bd:
                    41:b0:db:8d:90:41:6a:a9:0c:16:71:2d:3c:bd:4a:
                    35:0e:74:68:84:c6:40:45:bd:79:c7:a2:fd:6d:0b:
                    a6:ca:7f:13:8e:26:21:5f:a5:77:89:a9:e4:13:ae:
                    e8:c3:36:b9:e4:a3:66:30:d6:48:9a:82:f6:84:8f:
                    14:ba:62:6a:7c:01:6a:52:e1:4d:72:aa:2e:5f:a5:
                    63:e9:02:f8:cd:cc:d8:68:d0:a7:f7:e7:9d:68:a8:
                    e9:55:69:13:88:2a:08:ca:2f:69:41:3f:d6:b7:a6:
                    4e:0c:86:76:6c:f7:60:d9:58:8d:5f:5a:15:71:05:
                    c4:8b:5d:7c:8d:6a:21:36:f6:c5:ce:1c:af:0b:d3:
                    73:89:45:6b:ed:ab:f5:09:73:06:4e:f4:2e:01:61:
                    19:29:2e:31:14:49:43:c5:1c:b1:1f:4c:06:c5:2a:
                    8d:fa:78:1c:d2:63:33:29:6c:9e:10:48:f9:e1:e4:
                    44:ec:ef:48:cf:ad:fb:fc:9c:c5:ba:af:ad:dd:86:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0A:58:1F:41:01:17:E3:26:09:1C:FB:18:8A:06:99:0B:74:6E:7B
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:34:6d:0a:0e:11:6e:fe:61:f8:25:ba:75:a2:ce:c8:12:
         6d:5b:26:3f:61:61:18:19:0a:e3:f3:af:b8:58:c5:9c:eb:c2:
         5c:21:31:cd:17:a7:85:e4:d7:38:f7:96:f9:a7:b5:49:7c:47:
         6a:bb:06:24:56:fc:ce:50:67:5c:ac:e6:67:75:a1:ef:a2:fc:
         bf:5b:20:1b:d1:18:70:3c:37:18:e6:06:d4:df:a0:8f:67:4d:
         0f:c1:ab:7f:b1:b6:64:34:44:3d:9c:d3:e3:df:88:5c:1c:95:
         82:81:cb:ca:38:a8:12:2a:3d:3e:c0:35:2e:fa:c6:4f:c3:f1:
         93:bc:7c:e1:3c:54:2e:ef:f9:74:b4:30:d7:71:12:5a:b9:f9:
         68:d2:53:f6:0c:a1:36:10:7e:88:61:c6:36:cc:66:35:d6:ce:
         2c:f6:41:87:08:76:c9:1d:ed:c1:fc:9d:af:4d:da:38:ab:ef:
         5b:9d:f4:6e:e4:16:3f:0e:a0:33:a8:3e:bb:17:a9:e6:f5:bb:
         a0:94:1a:93:08:55:f6:5c:cd:52:8a:aa:26:d4:92:fc:b3:9c:
         b3:f8:c9:0a:87:6f:ee:29:7b:5f:ad:19:cd:fd:9a:51:20:2c:
         03:02:ed:ae:37:10:c5:3c:56:cc:ed:83:15:9e:24:1a:7c:87:
         86:13:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:22:39 2025 by rpki-client