Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa
File:                     326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier:          fCZY5bHgmlHT0hgESRZYdq9+cB45WYSuCO2YIDu74c0=
Subject key identifier:   6B:1B:3D:28:C7:A1:8C:F4:8A:4F:00:81:58:E9:A1:41:CA:97:C5:4B
Certificate issuer:       /CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
Certificate serial:       37CE7159AE92EF0FA2FFC6E44F9912E9D0FFF21A
Authority key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa
Signing time:             Wed 08 Jan 2025 11:07:43 +0000
ROA not before:           Wed 08 Jan 2025 11:02:43 +0000
ROA not after:            Wed 07 Jan 2026 11:07:43 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a830::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 13:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ce:71:59:ae:92:ef:0f:a2:ff:c6:e4:4f:99:12:e9:d0:ff:f2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
        Validity
            Not Before: Jan  8 11:02:43 2025 GMT
            Not After : Jan  7 11:07:43 2026 GMT
        Subject: CN=6B1B3D28C7A18CF48A4F008158E9A141CA97C54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:5c:bf:43:8d:13:c5:25:ce:7c:a0:c2:8e:
                    bc:14:18:ef:6b:cb:97:a1:7d:56:45:18:f8:3f:83:
                    64:54:85:c9:d7:1c:c0:6f:24:48:4b:29:d2:2f:72:
                    7f:68:2a:61:d8:a7:14:14:3c:92:ea:74:85:c8:40:
                    6e:a6:f4:38:bd:34:ba:ca:b7:77:81:2d:46:9e:a4:
                    63:a8:12:ce:94:27:7d:fa:e2:03:ed:d6:7d:69:39:
                    21:90:ba:cd:65:f2:63:3e:bf:fc:df:d7:aa:b2:2a:
                    32:88:cd:f8:be:95:2b:60:32:e6:8b:03:db:29:60:
                    9b:93:6b:d5:79:89:6e:a0:7c:34:f4:5f:22:0e:6e:
                    ac:7c:d2:f4:87:6e:a0:27:59:ba:58:9e:67:01:59:
                    5b:3b:9d:11:8d:73:16:e9:38:c9:42:c7:35:c2:1f:
                    1f:69:3e:73:25:55:9e:c5:ac:5b:1b:e9:00:4c:3b:
                    b9:89:93:48:29:9f:29:3e:89:ad:93:91:73:5a:b8:
                    72:01:4c:1a:d9:f9:61:ff:c8:12:2b:d7:85:e0:a3:
                    29:e9:d8:9e:95:ec:86:4a:46:3b:18:30:01:35:a8:
                    3e:d9:17:4c:6d:6b:c2:37:cf:d9:de:15:e5:56:ba:
                    0b:93:2b:ad:68:1d:ec:f1:90:54:8c:e5:7b:46:6d:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1B:3D:28:C7:A1:8C:F4:8A:4F:00:81:58:E9:A1:41:CA:97:C5:4B
            X509v3 Authority Key Identifier:
                keyid:F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613833303a3a2f34342d3434203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a830::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:ec:c7:4a:eb:f6:5a:b5:60:bf:ac:6e:4c:7b:a5:a8:93:
         21:25:b1:6e:2c:e6:37:a9:0d:2a:33:fc:3e:4b:eb:18:4f:ae:
         4c:25:f5:4c:e9:fe:26:31:d0:ea:67:49:58:42:1d:48:c6:4b:
         de:00:ab:1f:f8:34:fb:53:bc:64:1c:2c:54:9d:72:2b:18:d3:
         be:ce:55:fa:40:36:00:a2:ab:5b:35:81:30:7b:79:b1:0e:14:
         a7:79:28:d3:d0:61:8f:00:39:68:91:59:d3:e3:cb:2a:af:58:
         21:bc:b7:a6:c6:23:6a:15:b0:6b:3e:65:8d:35:df:ab:07:fe:
         a0:d0:6d:b4:d1:bf:85:b9:60:00:9f:c6:dc:5b:6e:50:44:d6:
         54:b9:98:36:8e:e3:0a:28:d4:d9:43:7f:4f:e9:c5:8c:d3:07:
         29:d7:81:34:a4:23:04:2a:f1:11:8f:a7:64:c7:60:a2:37:92:
         0e:62:07:0c:ae:6b:3c:92:03:1b:81:09:ed:7b:75:e6:98:43:
         eb:23:6a:dc:aa:dd:c3:ed:e8:26:28:03:43:3a:c8:b9:d9:ad:
         7b:2b:ac:86:29:f8:0f:e2:3e:9d:d7:50:be:2b:ef:44:e4:15:
         2f:cb:b5:40:c6:0c:f1:2f:e9:cf:35:b1:df:1d:58:1d:a3:85:
         34:a0:05:b1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUN85xWa6S7w+i/8bkT5kS6dD/8howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJCODM4RjBDQURFRkUxMkIzQ0RCM0Y2REY0REIzNkVG
REZDNjgzOTAeFw0yNTAxMDgxMTAyNDNaFw0yNjAxMDcxMTA3NDNaMDMxMTAvBgNV
BAMTKDZCMUIzRDI4QzdBMThDRjQ4QTRGMDA4MTU4RTlBMTQxQ0E5N0M1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWH1y/Q40TxSXOfKDCjrwUGO9r
y5ehfVZFGPg/g2RUhcnXHMBvJEhLKdIvcn9oKmHYpxQUPJLqdIXIQG6m9Di9NLrK
t3eBLUaepGOoEs6UJ3364gPt1n1pOSGQus1l8mM+v/zf16qyKjKIzfi+lStgMuaL
A9spYJuTa9V5iW6gfDT0XyIObqx80vSHbqAnWbpYnmcBWVs7nRGNcxbpOMlCxzXC
Hx9pPnMlVZ7FrFsb6QBMO7mJk0gpnyk+ia2TkXNauHIBTBrZ+WH/yBIr14Xgoynp
2J6V7IZKRjsYMAE1qD7ZF0xta8I3z9neFeVWuguTK61oHezxkFSM5XtGbZ3/AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUaxs9KMehjPSKTwCBWOmhQcqXxUswHwYDVR0j
BBgwFoAU8rg48Mre/hKzzbP2302zbv38aDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvMi9GMkI4MzhGMENB
REVGRTEyQjNDREIzRjZERjREQjM2RUZERkM2ODM5LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2Ey
NWM3ZC8wL0YyQjgzOEYwQ0FERUZFMTJCM0NEQjNGNkRGNERCMzZFRkRGQzY4Mzku
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz
ZDU4MzZmZjFiMjkvMi8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzgzMzMwM2EzYTJm
MzQzNDJkMzQzNDIwM2QzZTIwMzUzMzMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoKYESoMDAN
BgkqhkiG9w0BAQsFAAOCAQEAEYvsx0rr9lq1YL+sbkx7paiTISWxbizmN6kNKjP8
PkvrGE+uTCX1TOn+JjHQ6mdJWEIdSMZL3gCrH/g0+1O8ZBwsVJ1yKxjTvs5V+kA2
AKKrWzWBMHt5sQ4Up3ko09BhjwA5aJFZ0+PLKq9YIby3psYjahWwaz5ljTXfqwf+
oNBttNG/hblgAJ/G3FtuUETWVLmYNo7jCijU2UN/T+nFjNMHKdeBNKQjBCrxEY+n
ZMdgojeSDmIHDK5rPJIDG4EJ7Xt15phD6yNq3Krdw+3oJigDQzrIudmteyushin4
D+I+nddQvivvROQVL8u1QMYM8S/pzzWx3x1YHaOFNKAFsQ==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:43 2025 by rpki-client