Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa
File:                     326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier:          k4P0iwy0chjlseBxsYFafLrVL8FxCd23XD2Nx0SaPpI=
Subject key identifier:   15:CD:B7:00:81:73:B3:90:8C:71:C6:2A:E6:A9:42:E3:60:1D:37:38
Certificate issuer:       /CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
Certificate serial:       37C4A8F23C7E14A1B35D1E92E5111F8C31E84A31
Authority key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa
Signing time:             Wed 08 Jan 2025 11:07:43 +0000
ROA not before:           Wed 08 Jan 2025 11:02:43 +0000
ROA not after:            Wed 07 Jan 2026 11:07:43 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a840::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 13:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c4:a8:f2:3c:7e:14:a1:b3:5d:1e:92:e5:11:1f:8c:31:e8:4a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
        Validity
            Not Before: Jan  8 11:02:43 2025 GMT
            Not After : Jan  7 11:07:43 2026 GMT
        Subject: CN=15CDB7008173B3908C71C62AE6A942E3601D3738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:78:d9:19:7f:5b:4a:15:e7:74:6c:38:08:
                    c3:d8:71:24:04:f4:e7:61:4f:a2:6f:7e:55:5c:74:
                    5e:8a:79:49:ee:4a:b6:bd:60:88:08:98:f0:39:b1:
                    86:34:4a:d9:1a:cb:87:d4:ac:8a:34:2f:d2:8b:43:
                    4a:e3:30:12:72:92:15:12:21:4e:18:46:ca:08:6c:
                    7b:f3:49:14:82:2c:e0:ca:c3:0d:61:7e:3e:1f:bf:
                    6e:64:7a:19:4c:a0:83:4b:40:41:61:ca:27:66:eb:
                    56:7d:cc:d6:5b:c4:04:59:a5:a8:bb:57:b7:8e:55:
                    8e:b9:09:57:dc:40:2f:9b:83:27:a2:6d:2f:0f:33:
                    78:54:0e:9d:a7:9c:31:f6:c5:cd:73:7d:dd:6f:7c:
                    b9:f3:35:e2:cb:25:42:6d:ba:41:c0:72:19:81:e3:
                    ff:43:02:2d:42:44:f2:5e:c2:c7:73:29:bc:f3:35:
                    ef:4c:b5:0b:62:bc:47:61:0c:51:94:a1:2a:5c:82:
                    bf:6e:ff:e5:79:dd:61:12:33:f5:71:ee:01:f9:66:
                    3e:e2:24:0c:a0:24:7e:63:05:ac:e7:52:42:cc:d4:
                    3d:fe:87:a5:16:91:bb:ee:5a:24:e3:7d:8c:3f:b5:
                    1d:75:f2:6b:0e:d0:60:90:83:a5:6f:d8:4b:0f:ee:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:B7:00:81:73:B3:90:8C:71:C6:2A:E6:A9:42:E3:60:1D:37:38
            X509v3 Authority Key Identifier:
                keyid:F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613834303a3a2f34342d3434203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a840::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:da:c9:37:16:a8:d8:15:ea:7f:bc:0c:87:7c:f3:36:ec:38:
         7c:b1:51:ed:34:82:45:4b:bf:f9:14:35:13:45:f4:5c:a6:59:
         70:b6:f1:cf:67:b9:42:77:01:dc:75:4f:d8:1c:fb:42:d6:52:
         a0:fd:5d:ba:dc:a4:c7:a9:87:13:57:da:a4:48:90:e0:9e:b1:
         8a:21:a8:26:fa:1a:42:1d:20:54:e7:0a:9d:1a:e3:43:a3:66:
         c5:47:92:66:48:5e:a1:82:7a:25:9b:0f:0c:57:4b:97:05:48:
         1a:37:01:68:82:2d:a3:1b:fb:9a:b6:7a:0f:3d:59:20:e9:d0:
         65:0d:8c:5d:1d:84:14:24:93:73:38:e1:80:c3:9a:ec:65:18:
         5c:72:7a:a2:11:d1:26:2b:ef:ae:6e:ab:75:dd:66:36:16:27:
         38:09:60:46:e3:3e:27:c1:83:86:fc:12:ef:cb:df:db:fe:b6:
         aa:10:63:fb:f1:f7:d8:c4:6f:70:fc:8f:3a:4e:23:37:cc:6d:
         24:a9:a8:cd:49:fd:3e:fe:60:e5:18:cb:d5:9a:d3:cd:64:12:
         a5:79:06:92:15:ea:1f:93:c7:90:3e:4d:e1:4d:a7:a2:5e:ee:
         06:ed:c8:0f:bf:54:7d:41:ab:3f:05:87:90:29:62:18:06:15:
         d8:16:d6:4c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUN8So8jx+FKGzXR6S5REfjDHoSjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJCODM4RjBDQURFRkUxMkIzQ0RCM0Y2REY0REIzNkVG
REZDNjgzOTAeFw0yNTAxMDgxMTAyNDNaFw0yNjAxMDcxMTA3NDNaMDMxMTAvBgNV
BAMTKDE1Q0RCNzAwODE3M0IzOTA4QzcxQzYyQUU2QTk0MkUzNjAxRDM3MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvXjZGX9bShXndGw4CMPYcSQE
9OdhT6JvflVcdF6KeUnuSra9YIgImPA5sYY0Stkay4fUrIo0L9KLQ0rjMBJykhUS
IU4YRsoIbHvzSRSCLODKww1hfj4fv25kehlMoINLQEFhyidm61Z9zNZbxARZpai7
V7eOVY65CVfcQC+bgyeibS8PM3hUDp2nnDH2xc1zfd1vfLnzNeLLJUJtukHAchmB
4/9DAi1CRPJewsdzKbzzNe9MtQtivEdhDFGUoSpcgr9u/+V53WESM/Vx7gH5Zj7i
JAygJH5jBaznUkLM1D3+h6UWkbvuWiTjfYw/tR118msO0GCQg6Vv2EsP7j4tAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUFc23AIFzs5CMccYq5qlC42AdNzgwHwYDVR0j
BBgwFoAU8rg48Mre/hKzzbP2302zbv38aDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvMi9GMkI4MzhGMENB
REVGRTEyQjNDREIzRjZERjREQjM2RUZERkM2ODM5LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2Ey
NWM3ZC8wL0YyQjgzOEYwQ0FERUZFMTJCM0NEQjNGNkRGNERCMzZFRkRGQzY4Mzku
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQz
ZDU4MzZmZjFiMjkvMi8zMjYxMzA2MTNhMzYzMDM0MzQzYTYxMzgzNDMwM2EzYTJm
MzQzNDJkMzQzNDIwM2QzZTIwMzUzMzMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoKYESoQDAN
BgkqhkiG9w0BAQsFAAOCAQEARtrJNxao2BXqf7wMh3zzNuw4fLFR7TSCRUu/+RQ1
E0X0XKZZcLbxz2e5QncB3HVP2Bz7QtZSoP1dutykx6mHE1fapEiQ4J6xiiGoJvoa
Qh0gVOcKnRrjQ6NmxUeSZkheoYJ6JZsPDFdLlwVIGjcBaIItoxv7mrZ6Dz1ZIOnQ
ZQ2MXR2EFCSTczjhgMOa7GUYXHJ6ohHRJivvrm6rdd1mNhYnOAlgRuM+J8GDhvwS
78vf2/62qhBj+/H32MRvcPyPOk4jN8xtJKmozUn9Pv5g5RjL1ZrTzWQSpXkGkhXq
H5PHkD5N4U2nol7uBu3ID79UfUGrPwWHkCliGAYV2BbWTA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:44:46 2025 by rpki-client