Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/AlbroHoldings/0/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa
File:                     326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (raw, json)
Hash identifier:          BBO/v0UM307Xid+XKxTAldLOqE+dX82sy7aZJ+0OZJE=
Subject key identifier:   9B:6C:71:B7:5A:03:4D:A1:0F:D7:F4:4F:F3:80:E2:F2:85:6C:6B:D4
Certificate issuer:       /CN=04FD5E4B6BE832540092C7FB3E83B144BC0238D2
Certificate serial:       36BE1BC16915489D3D8269ED0EA72D428D550C91
Authority key identifier: 04:FD:5E:4B:6B:E8:32:54:00:92:C7:FB:3E:83:B1:44:BC:02:38:D2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.cer
Subject info access:      rsync://rpki.cc/repo/AlbroHoldings/0/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa
Signing time:             Wed 19 Mar 2025 00:47:14 +0000
ROA not before:           Wed 19 Mar 2025 00:42:14 +0000
ROA not after:            Wed 18 Mar 2026 00:47:14 +0000
asID:                     214762
IP address blocks:        2a07:54c1:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.cc/repo/AlbroHoldings/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.crl
                          rsync://rpki.cc/repo/AlbroHoldings/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 17:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:be:1b:c1:69:15:48:9d:3d:82:69:ed:0e:a7:2d:42:8d:55:0c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04FD5E4B6BE832540092C7FB3E83B144BC0238D2
        Validity
            Not Before: Mar 19 00:42:14 2025 GMT
            Not After : Mar 18 00:47:14 2026 GMT
        Subject: CN=9B6C71B75A034DA10FD7F44FF380E2F2856C6BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:1a:3d:a3:63:70:cd:ed:d6:6b:71:1d:47:
                    24:39:a8:6e:be:69:02:d0:f2:37:ee:c1:25:57:29:
                    dd:a8:18:76:7c:a3:cc:dc:12:ec:3a:1f:e1:80:c7:
                    05:8b:5c:a9:ce:65:90:1e:9d:a7:e2:c0:81:74:bc:
                    33:5f:a2:83:30:e8:06:00:a0:7d:d0:17:f1:99:a4:
                    f9:60:bd:94:f5:24:a4:3f:9f:b6:b4:87:59:4a:1d:
                    1d:b8:0d:0e:26:a1:ae:60:1a:ed:b1:4e:8e:db:b9:
                    9d:20:e2:2f:e6:ee:1b:13:1e:ec:a0:7b:cb:38:a8:
                    02:22:1a:f4:87:2f:30:c7:43:4b:f9:26:0b:23:79:
                    f6:2c:48:e9:df:12:46:99:1d:55:f5:2f:35:1f:1c:
                    d7:5d:4a:41:db:b6:86:83:8a:cd:35:ca:88:96:0f:
                    c5:3a:ba:a7:7b:39:a2:b0:3a:24:98:41:e1:0b:bf:
                    02:c8:b0:68:90:b2:bb:db:97:93:e3:6c:b7:35:59:
                    2a:fe:f5:a8:42:e4:4b:94:c8:ce:04:fc:cc:fe:f3:
                    95:1d:cb:ab:7e:e9:01:ec:9c:f2:0c:b0:79:68:16:
                    55:3b:13:c9:3e:3a:26:96:21:0e:e8:45:3a:ec:30:
                    b5:24:e7:ea:cd:9f:49:4c:62:4b:39:a0:84:6a:3d:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:71:B7:5A:03:4D:A1:0F:D7:F4:4F:F3:80:E2:F2:85:6C:6B:D4
            X509v3 Authority Key Identifier:
                keyid:04:FD:5E:4B:6B:E8:32:54:00:92:C7:FB:3E:83:B1:44:BC:02:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/AlbroHoldings/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/04FD5E4B6BE832540092C7FB3E83B144BC0238D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/AlbroHoldings/0/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:41:50:60:6b:e1:4e:e5:0e:60:1f:78:b7:ac:64:86:d9:38:
         8a:13:f1:ae:49:00:0c:cd:49:33:8d:71:44:dc:a4:bf:08:93:
         e1:48:3c:74:15:38:62:77:4d:77:ea:7c:93:fa:cc:1e:09:17:
         e0:b4:22:c7:73:03:d2:05:46:86:fc:d6:36:ae:b6:b6:27:c0:
         86:c0:56:22:a6:21:42:d8:3b:d9:41:73:37:9e:7c:61:69:50:
         a0:40:23:61:dd:db:f8:fa:1d:ef:cf:e9:14:4d:1f:f5:aa:a6:
         90:10:67:b9:f5:57:2a:04:3d:db:3a:8c:bd:2f:46:6e:db:83:
         e7:3e:8f:30:fd:7c:b7:5f:78:95:c4:45:e5:96:be:6f:62:d4:
         80:b7:f7:e7:81:ab:22:bb:4d:c5:04:10:fc:05:6a:85:d1:42:
         c6:df:db:29:4d:74:66:8a:89:b6:76:bb:55:ae:b9:0a:0d:f8:
         ed:0f:0d:e6:be:1e:aa:8a:94:b6:b3:b9:0f:ad:bd:b7:69:6e:
         a0:95:87:d1:b6:98:1e:e9:ff:eb:17:4b:19:b8:bf:93:49:26:
         76:59:6f:8a:95:c0:93:3e:ff:ff:55:92:ea:e3:b9:38:ad:2b:
         b7:a7:fb:6f:ce:b9:69:74:ab:5a:2c:4a:9c:36:aa:bb:a0:00:
         c8:63:00:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:53:03 2025 by rpki-client