Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa
File:                     326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa (raw, json)
Hash identifier:          FW30thSU/B4DifikxnnGU17OdvYzeKNmhH/gqj1T/5g=
Subject key identifier:   E6:DD:22:77:CB:9C:54:DC:14:39:A2:DC:3B:7E:D7:1A:46:13:24:7D
Certificate issuer:       /CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
Certificate serial:       38B0221D9555B082AC5605852D90D0F4305B3464
Authority key identifier: F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa
Signing time:             Wed 08 Jan 2025 11:07:43 +0000
ROA not before:           Wed 08 Jan 2025 11:02:43 +0000
ROA not after:            Wed 07 Jan 2026 11:07:43 +0000
asID:                     53343
IP address blocks:        2a0a:6044:a8f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 13:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b0:22:1d:95:55:b0:82:ac:56:05:85:2d:90:d0:f4:30:5b:34:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839
        Validity
            Not Before: Jan  8 11:02:43 2025 GMT
            Not After : Jan  7 11:07:43 2026 GMT
        Subject: CN=E6DD2277CB9C54DC1439A2DC3B7ED71A4613247D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:bc:21:a5:56:cd:8b:a4:f2:f1:37:b9:e7:
                    ca:2c:53:94:c7:78:83:a7:46:06:2d:0f:64:36:f9:
                    e3:ee:c7:05:e7:b5:d8:f8:03:29:eb:a6:5e:20:ae:
                    03:81:5e:42:6c:5b:34:6d:b8:04:cd:a7:53:9f:62:
                    13:70:c5:f8:6a:de:da:cf:b2:47:f8:7f:ef:0b:02:
                    27:8a:c2:cf:6a:f2:ad:d6:35:de:60:0f:70:a3:29:
                    0e:00:80:dc:50:4c:c8:85:2a:86:7b:0b:fa:29:4e:
                    39:e5:b6:a8:e8:20:76:7a:53:7b:42:e1:10:da:57:
                    cc:12:6d:ba:ae:21:12:42:bd:bf:47:ee:81:7f:ee:
                    13:81:a4:00:32:ce:b0:cc:dd:11:1c:55:b9:75:46:
                    52:4b:ae:31:39:ac:a5:98:25:0a:1d:44:33:47:92:
                    90:b1:24:f5:4c:39:51:5e:ca:96:cd:ef:7a:c6:62:
                    97:af:90:02:30:cb:92:c0:27:7d:a3:10:2f:16:ce:
                    a8:15:c6:e5:f4:5b:95:38:43:60:b8:8f:ca:cc:29:
                    15:6c:f5:44:70:cf:6c:51:8a:d1:dd:63:38:b6:9b:
                    10:89:64:4b:b6:d3:5a:6d:23:c1:77:bd:2b:b0:f3:
                    fe:32:c3:b8:64:21:91:cb:ab:2c:2b:06:22:f8:b4:
                    a0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DD:22:77:CB:9C:54:DC:14:39:A2:DC:3B:7E:D7:1A:46:13:24:7D
            X509v3 Authority Key Identifier:
                keyid:F2:B8:38:F0:CA:DE:FE:12:B3:CD:B3:F6:DF:4D:B3:6E:FD:FC:68:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F2B838F0CADEFE12B3CDB3F6DF4DB36EFDFC6839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/2/326130613a363034343a613866303a3a2f34342d3434203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a8f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:dc:10:72:55:6d:05:d8:6e:99:d4:9e:be:76:fe:76:16:ea:
         d9:cf:d3:8e:62:88:aa:05:3b:74:ea:ad:9d:40:27:76:2e:b9:
         e2:6b:1b:62:71:81:41:ce:9f:51:98:ad:08:0a:70:3c:d6:d7:
         9d:78:af:7b:45:96:85:55:84:5d:06:eb:ae:48:09:26:08:d9:
         7c:97:18:17:97:91:f7:61:63:da:6f:94:b1:5f:bb:3f:70:22:
         c0:b5:f9:5f:44:d4:3c:88:b3:b1:cc:b2:38:45:dd:40:9a:87:
         c8:c9:af:56:c4:8d:9b:26:a8:59:50:9a:e8:80:3d:88:7c:a4:
         c5:9b:2c:a5:c5:06:ea:7c:ea:ca:e0:2b:5d:eb:4b:98:24:50:
         a5:0e:45:6a:b6:ab:b2:e5:81:a4:91:59:6e:fb:28:e9:16:75:
         ed:d4:48:40:e3:9b:1f:24:e3:23:da:f7:b9:66:e1:a8:a6:cf:
         78:b8:ad:c9:61:b1:f3:40:f4:6c:c0:31:75:e2:77:84:ed:65:
         8e:8f:b2:a1:1d:89:0f:75:03:5d:14:0c:14:c7:b4:37:b9:c3:
         d4:9d:ec:88:de:4d:de:57:09:60:d9:0b:c2:e7:96:26:24:5e:
         a8:cc:07:c6:af:76:78:48:b6:a3:c7:1e:b2:50:d7:2c:90:2b:
         5e:3b:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:48:47 2025 by rpki-client