Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa
File:                     326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          12jNufED+FuODjx9LesNG0DO8etBYCymhmW5u/tLBiw=
Subject key identifier:   B4:2B:D5:B8:72:49:EE:FB:29:D6:98:39:39:87:E4:F3:77:7B:13:D9
Certificate issuer:       /CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB
Certificate serial:       0FFD7A66DEDFFB2CDCDD6AA6CEF3FDFA9A9BD56A
Authority key identifier: 8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:32 +0000
ROA not before:           Thu 24 Oct 2024 20:58:32 +0000
ROA not after:            Thu 23 Oct 2025 21:03:32 +0000
asID:                     54148
IP address blocks:        2a05:dfc1:91b9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Dec 2024 07:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fd:7a:66:de:df:fb:2c:dc:dd:6a:a6:ce:f3:fd:fa:9a:9b:d5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB
        Validity
            Not Before: Oct 24 20:58:32 2024 GMT
            Not After : Oct 23 21:03:32 2025 GMT
        Subject: CN=B42BD5B87249EEFB29D698393987E4F3777B13D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:de:f5:29:44:13:a1:3f:72:28:8e:ca:97:
                    e0:1f:e4:59:26:f8:ba:ba:ff:3e:52:37:b7:0f:60:
                    b3:70:a1:91:22:91:2d:62:bf:68:d4:45:6f:a0:72:
                    f5:ab:ac:92:bf:2b:f1:81:f0:e9:ae:03:b1:7d:62:
                    ec:e7:05:73:ee:19:fd:3a:b8:10:92:a3:fd:f5:0e:
                    0c:3c:96:e7:00:f1:d6:b5:c8:94:14:b1:db:5d:28:
                    6a:54:d7:cb:a5:67:83:6e:43:53:ac:98:11:41:25:
                    81:58:16:30:0a:72:31:02:f0:ef:bd:c7:d9:4d:c4:
                    18:a5:45:b2:2a:18:0a:29:6c:3f:44:bc:53:4c:c2:
                    82:d9:77:b4:69:0f:d3:72:92:f6:e9:a6:c4:f9:53:
                    f0:b4:e2:9f:15:a5:e6:95:f7:5e:d8:a5:16:37:e4:
                    94:3b:ab:20:a1:46:83:5b:e0:0c:f4:53:d5:3b:2a:
                    ca:64:c5:62:51:71:0e:f9:0d:7b:a2:0f:90:e2:eb:
                    6b:89:75:46:46:a4:4d:14:f0:d3:fb:af:ba:e3:cf:
                    65:27:bc:16:25:ef:ed:50:ee:36:0f:10:f7:d9:c0:
                    25:4e:87:31:e0:0e:ad:a9:0c:db:fd:2c:9a:12:39:
                    99:f5:46:59:ff:e7:5a:ac:ec:50:41:50:ac:4d:10:
                    86:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2B:D5:B8:72:49:EE:FB:29:D6:98:39:39:87:E4:F3:77:7B:13:D9
            X509v3 Authority Key Identifier:
                keyid:8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:91b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:25:9a:99:06:30:e0:b7:f2:ac:77:e0:cf:97:96:07:4c:fc:
         1e:6b:bd:0f:a4:83:bf:10:0c:8e:a8:fb:0e:6b:d6:5b:a1:46:
         b5:db:67:08:a4:80:48:f6:8e:2c:03:b3:2d:1c:3b:fa:68:bb:
         ce:4e:49:62:cf:7d:b2:ef:16:84:b3:cd:65:47:2b:f6:23:c5:
         4a:27:59:a9:c7:d0:59:bd:b5:38:0f:ea:ec:49:45:b0:9f:9d:
         bc:a6:0d:ba:aa:de:40:1e:34:2f:de:a7:e6:da:e6:a5:8d:28:
         7d:e0:db:d3:95:30:3a:bf:52:e0:63:76:38:10:16:f6:03:bd:
         8d:00:73:62:7b:38:e0:1e:65:48:e4:23:89:8b:a1:db:6d:e9:
         7d:c2:a5:df:12:f4:3a:d1:53:d2:f3:55:4e:dc:74:99:e7:a4:
         20:ad:44:58:43:d5:c7:41:66:3a:b3:d5:94:68:a7:9d:67:f5:
         e4:47:14:4b:a0:eb:4c:ae:0c:43:cf:a0:23:d9:4a:b1:eb:96:
         b9:aa:0b:79:52:dd:08:72:b8:84:d4:fa:a8:f6:2d:a8:8d:ff:
         5b:b5:c0:e6:b5:28:e7:ba:62:44:4c:59:8b:25:58:87:99:fb:
         4e:7b:d6:43:cb:af:1c:31:26:1f:fb:b9:e2:05:e8:a4:62:7d:
         31:26:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org