Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
File:                     326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          22BiUIqOHAzDkTZwKHMtE+Vpka5MZG5LYp6+VhQMqPA=
Subject key identifier:   40:CD:70:3F:83:41:28:A6:AE:9A:20:D7:AD:58:4B:BF:68:02:91:C6
Certificate issuer:       /CN=92E50433A3DEA8210EFF1182AA2F5208427AAEC6
Certificate serial:       6A0013A101F98D98C80C78379D2869351B14FA94
Authority key identifier: 92:E5:04:33:A3:DE:A8:21:0E:FF:11:82:AA:2F:52:08:42:7A:AE:C6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:26 +0000
ROA not before:           Thu 24 Oct 2024 20:58:26 +0000
ROA not after:            Thu 23 Oct 2025 21:03:26 +0000
asID:                     54148
IP address blocks:        2a07:54c1:dead::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:00:13:a1:01:f9:8d:98:c8:0c:78:37:9d:28:69:35:1b:14:fa:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E50433A3DEA8210EFF1182AA2F5208427AAEC6
        Validity
            Not Before: Oct 24 20:58:26 2024 GMT
            Not After : Oct 23 21:03:26 2025 GMT
        Subject: CN=40CD703F834128A6AE9A20D7AD584BBF680291C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:26:2c:b3:63:16:1c:d3:21:12:23:48:45:
                    e1:8b:f8:ad:b0:8b:11:32:f2:d4:a7:6b:f7:e4:91:
                    80:0c:8f:39:fb:33:2f:4e:ac:7c:ff:89:99:d8:de:
                    77:c8:6d:6e:25:a5:2d:3e:18:42:8a:fd:d3:06:08:
                    a2:59:d9:49:3c:86:f7:8f:0a:29:bd:62:e3:54:81:
                    ff:71:c9:d9:36:e0:92:bf:a3:ac:2b:25:d2:ce:20:
                    a1:56:64:79:27:33:ec:e0:fa:42:c5:09:27:31:f5:
                    3c:2d:10:5a:74:90:57:04:4f:53:e1:2d:66:01:0e:
                    b1:45:68:9a:6c:38:60:2c:53:4e:bb:05:71:12:2f:
                    72:3c:7c:3b:37:48:3d:cb:93:f7:55:ff:67:90:20:
                    2f:23:4d:e7:39:d4:4e:32:e4:4d:39:fe:32:bb:a2:
                    1d:e1:a4:b1:2c:52:33:6c:eb:7e:66:c1:32:1a:c6:
                    e6:3a:ab:08:5a:45:e3:11:af:aa:c6:2d:c0:06:08:
                    49:86:6e:2b:bb:30:a4:ef:2c:ae:37:a6:e7:d1:5a:
                    da:66:4f:db:97:87:06:60:05:26:ae:e9:8d:59:b4:
                    01:34:9c:22:1b:82:a1:5a:f0:6d:3e:3e:6a:34:36:
                    b5:6e:68:d7:2e:65:73:69:41:aa:93:c6:46:0b:23:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:70:3F:83:41:28:A6:AE:9A:20:D7:AD:58:4B:BF:68:02:91:C6
            X509v3 Authority Key Identifier:
                keyid:92:E5:04:33:A3:DE:A8:21:0E:FF:11:82:AA:2F:52:08:42:7A:AE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/92E50433A3DEA8210EFF1182AA2F5208427AAEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:72:c9:66:54:cb:f9:99:e5:f7:ff:b4:ac:d7:24:df:9d:7d:
         05:b3:c2:d8:45:c6:0f:d1:49:63:66:0f:51:7a:6f:7f:69:e0:
         e7:dc:c3:77:86:9e:cc:93:76:ae:5d:e8:e1:52:5d:0e:c1:d7:
         7a:74:39:47:0c:26:ae:da:e5:d7:bb:2a:5e:8e:a8:82:40:5c:
         64:39:33:af:18:7c:15:fb:0f:eb:24:56:c7:af:db:06:9c:15:
         23:f6:b0:2a:2b:20:04:66:2e:00:1a:f3:e5:14:fb:d7:21:1d:
         34:2e:1d:82:37:47:14:31:3b:b1:b9:11:e5:3b:c3:e6:20:03:
         bd:92:f6:9c:30:10:34:19:9f:3a:51:c7:aa:1c:4c:88:6a:27:
         ba:0f:d0:fd:7e:b8:ee:6f:84:5d:f2:80:ff:7f:67:99:ec:63:
         02:78:32:24:b4:62:f3:7a:f1:af:4d:8d:40:8e:6b:66:ea:8b:
         91:df:c7:40:d0:b3:93:60:6f:42:15:88:cc:84:9b:0f:97:d3:
         69:f1:68:33:92:4d:7e:f8:b8:92:28:38:d3:7c:c1:73:d6:b5:
         f6:df:a7:c2:f8:58:65:53:6d:7c:b1:01:9f:f6:18:6f:cc:f6:
         e2:71:3f:44:08:39:54:3e:38:8f:c8:1c:85:6b:ce:8a:e6:68:
         d3:ef:e8:d5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUagAToQH5jZjIDHg3nShpNRsU+pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJFNTA0MzNBM0RFQTgyMTBFRkYxMTgyQUEyRjUyMDg0
MjdBQUVDNjAeFw0yNDEwMjQyMDU4MjZaFw0yNTEwMjMyMTAzMjZaMDMxMTAvBgNV
BAMTKDQwQ0Q3MDNGODM0MTI4QTZBRTlBMjBEN0FENTg0QkJGNjgwMjkxQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkLCYss2MWHNMhEiNIReGL+K2w
ixEy8tSna/fkkYAMjzn7My9OrHz/iZnY3nfIbW4lpS0+GEKK/dMGCKJZ2Uk8hveP
Cim9YuNUgf9xydk24JK/o6wrJdLOIKFWZHknM+zg+kLFCScx9TwtEFp0kFcET1Ph
LWYBDrFFaJpsOGAsU067BXESL3I8fDs3SD3Lk/dV/2eQIC8jTec51E4y5E05/jK7
oh3hpLEsUjNs635mwTIaxuY6qwhaReMRr6rGLcAGCEmGbiu7MKTvLK43pufRWtpm
T9uXhwZgBSau6Y1ZtAE0nCIbgqFa8G0+Pmo0NrVuaNcuZXNpQaqTxkYLI4wZAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUQM1wP4NBKKaumiDXrVhLv2gCkcYwHwYDVR0j
BBgwFoAUkuUEM6PeqCEO/xGCqi9SCEJ6rsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU5MWZiNDNiNDAxOTJiYWNiN2FiYjdhMjgvMS85MkU1MDQzM0Ez
REVBODIxMEVGRjExODJBQTJGNTIwODQyN0FBRUM2LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi8wLzkyRTUwNDMzQTNERUE4MjEwRUZGMTE4MkFBMkY1MjA4NDI3QUFFQzYu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTJi
YWNiN2FiYjdhMjgvMS8zMjYxMzAzNzNhMzUzNDYzMzEzYTY0NjU2MTY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzUzNDMxMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMHerTAN
BgkqhkiG9w0BAQsFAAOCAQEAqXLJZlTL+Znl9/+0rNck3519BbPC2EXGD9FJY2YP
UXpvf2ng59zDd4aezJN2rl3o4VJdDsHXenQ5Rwwmrtrl17sqXo6ogkBcZDkzrxh8
FfsP6yRWx6/bBpwVI/awKisgBGYuABrz5RT71yEdNC4dgjdHFDE7sbkR5TvD5iAD
vZL2nDAQNBmfOlHHqhxMiGonug/Q/X647m+EXfKA/39nmexjAngyJLRi83rxr02N
QI5rZuqLkd/HQNCzk2BvQhWIzISbD5fTafFoM5JNfvi4kig403zBc9a19t+nwvhY
ZVNtfLEBn/YYb8z24nE/RAg5VD44j8gchWvOiuZo0+/o1Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:10:10 2024 by rpki-client on console-fra.rpki-client.org