Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613865303a3a2f34342d3434203d3e203533333433.roa
File:                     326130613a363034343a613865303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier:          Nfg5ICrHLSu320VMBbCQ6TD7F+sbO30IAZl9Y/JlTG4=
Subject key identifier:   71:DE:46:1A:AD:BB:D8:15:CB:EF:A0:E1:83:46:81:9F:5B:4E:9F:D5
Certificate issuer:       /CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
Certificate serial:       4CC18F7AB8B168C53BB454C00C4A0B9596ADF15D
Authority key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613865303a3a2f34342d3434203d3e203533333433.roa
Signing time:             Mon 03 Feb 2025 03:18:28 +0000
ROA not before:           Mon 03 Feb 2025 03:13:28 +0000
ROA not after:            Mon 02 Feb 2026 03:18:28 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a8e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 13:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c1:8f:7a:b8:b1:68:c5:3b:b4:54:c0:0c:4a:0b:95:96:ad:f1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
        Validity
            Not Before: Feb  3 03:13:28 2025 GMT
            Not After : Feb  2 03:18:28 2026 GMT
        Subject: CN=71DE461AADBBD815CBEFA0E18346819F5B4E9FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:ec:f7:e4:3a:07:24:00:b0:ff:4d:7c:4e:
                    5d:05:ba:4b:2e:46:10:4b:93:0d:4e:e8:3e:c6:0f:
                    e9:66:07:67:41:98:8a:e4:22:9d:b7:1f:54:fb:62:
                    31:ef:5f:0f:b2:59:c1:5a:13:47:5b:a4:7d:ae:07:
                    c7:a4:a4:b7:7b:24:60:4e:b7:4d:90:9a:91:b6:cf:
                    33:d4:40:2d:57:11:53:d5:b9:1f:06:53:f4:45:8a:
                    1b:b8:8d:ae:d2:c0:ed:3e:c0:6a:8e:c7:db:13:a6:
                    77:49:75:36:ee:d4:46:3a:6c:bf:1a:60:99:80:28:
                    f9:18:1d:da:24:5e:9b:4a:32:df:1a:05:7c:c6:16:
                    c2:31:a8:9c:5b:67:5e:80:89:87:69:c0:d1:07:69:
                    00:53:3d:b9:cf:98:fd:e4:2d:c1:b0:af:12:b9:d2:
                    9d:f6:9d:31:9a:45:1d:45:9e:1f:84:c6:cc:de:98:
                    96:8e:9c:87:4b:f4:16:5b:f8:b6:6c:54:1b:16:ae:
                    c6:58:08:43:21:70:4e:d2:be:b3:b5:ab:3b:3d:4c:
                    8b:31:39:48:6e:47:af:54:44:bf:88:c2:d3:03:20:
                    5e:02:40:4b:cb:fd:2d:82:1e:53:f1:5f:41:8f:08:
                    26:5d:5f:16:86:2f:ed:57:45:f8:7f:09:95:2c:b6:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DE:46:1A:AD:BB:D8:15:CB:EF:A0:E1:83:46:81:9F:5B:4E:9F:D5
            X509v3 Authority Key Identifier:
                keyid:F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613865303a3a2f34342d3434203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a8e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:d2:62:b6:c4:9f:52:61:85:26:9b:73:e0:b1:9c:4e:8e:
         47:93:43:5b:c4:9f:86:29:7f:aa:01:cc:db:51:26:6f:05:ec:
         5a:33:92:1e:fc:92:24:84:5e:cd:55:f1:f7:d7:f8:03:b7:81:
         01:72:66:bb:47:d4:40:95:77:2c:3e:df:6c:53:56:c5:e1:f6:
         a7:67:90:a8:f2:29:3a:9f:32:da:b2:52:f0:00:6b:ff:dc:b1:
         59:fa:44:c7:89:c9:df:7d:0c:59:96:ea:f3:ce:9f:cd:36:5b:
         d2:e7:ba:9d:8b:3a:67:c8:1a:86:33:76:ab:68:9d:37:55:e7:
         0d:ab:b8:a7:6c:4e:d2:1c:a1:c8:e3:37:29:71:fb:b1:6f:af:
         45:18:25:af:1d:f4:e9:0b:4b:a4:bf:83:6d:7d:89:a5:63:40:
         b9:4e:31:07:56:4e:4c:5c:ff:8b:1c:8e:d8:f9:46:df:e5:e9:
         26:eb:d8:f7:35:4d:2b:6a:fa:27:0b:be:a1:e1:5a:3a:26:b1:
         68:37:f5:f4:7f:87:c9:21:67:36:5b:0a:82:56:56:14:2d:94:
         09:bb:53:3f:f1:c9:0a:63:73:e1:b1:97:37:a7:e1:f8:12:7a:
         4e:c3:e2:c5:6e:df:04:60:71:8b:ee:19:90:88:34:5d:b9:88:
         59:78:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:57 2025 by rpki-client