Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3438203d3e2030.roa
File:                     326130363a613030353a323465303a3a2f34342d3438203d3e2030.roa (raw, json)
Hash identifier:          9vy/AWpUdVCP9sG90ZQCbQhiezT6NpevWbNX+3fO+Gs=
Subject key identifier:   72:FB:8F:B4:E5:B5:A9:3A:37:2E:69:59:33:FF:D1:DB:C7:80:23:FE
Certificate issuer:       /CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
Certificate serial:       0E7758DC056191039FAABE5A655F68C2895EBBBF
Authority key identifier: B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
Subject info access:      rsync://rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3438203d3e2030.roa
Signing time:             Thu 10 Aug 2023 19:26:47 +0000
ROA not before:           Thu 10 Aug 2023 19:21:47 +0000
ROA not after:            Thu 08 Aug 2024 19:26:47 +0000
asID:                     0
IP address blocks:        2a06:a005:24e0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl
                          rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 04:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:77:58:dc:05:61:91:03:9f:aa:be:5a:65:5f:68:c2:89:5e:bb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B73753BFBCF7FA7B4FF58FE0218CA5E585434399
        Validity
            Not Before: Aug 10 19:21:47 2023 GMT
            Not After : Aug  8 19:26:47 2024 GMT
        Subject: CN=72FB8FB4E5B5A93A372E695933FFD1DBC78023FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:bd:1c:3e:54:7b:6e:52:0b:ac:15:95:f9:
                    91:f4:5b:4b:fb:f1:fb:9a:da:8e:19:f0:18:ae:3a:
                    68:33:52:01:d9:e0:09:c5:ef:19:f7:2d:74:cc:98:
                    b7:fd:93:da:b0:4a:84:65:a2:4c:9d:92:73:41:59:
                    c9:4a:96:e9:28:69:39:4d:2f:92:7a:df:17:13:0c:
                    f0:59:55:2d:1a:37:3c:75:f7:05:1a:44:b6:af:42:
                    b5:34:fb:95:bc:f1:82:44:f0:d4:58:ef:e9:5d:98:
                    32:0b:42:24:41:95:68:04:85:76:59:06:ac:cc:89:
                    32:8f:ce:32:03:ef:ec:b9:f6:8d:b9:3e:68:77:d7:
                    74:c1:4b:b1:b1:92:14:ce:f8:3a:d0:de:a0:b6:59:
                    fe:b0:c1:83:32:bf:26:94:17:38:a7:a6:0c:6b:da:
                    c4:e9:31:c7:2f:55:c0:3f:5d:53:73:10:3d:1d:3c:
                    d7:2b:ce:76:75:6d:e8:83:21:e6:f0:6e:f9:24:b1:
                    f7:8f:5b:fc:f4:9d:1c:35:c7:f2:36:d8:af:dd:c7:
                    6f:6a:7d:e9:a4:e8:26:ab:1b:64:5a:b5:e6:b4:b3:
                    77:81:bf:c0:08:8b:69:1f:b0:7b:61:03:4a:51:c0:
                    8d:58:77:20:06:05:77:e9:cf:61:26:d6:e7:7a:9e:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FB:8F:B4:E5:B5:A9:3A:37:2E:69:59:33:FF:D1:DB:C7:80:23:FE
            X509v3 Authority Key Identifier:
                keyid:B7:37:53:BF:BC:F7:FA:7B:4F:F5:8F:E0:21:8C:A5:E5:85:43:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/3/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B73753BFBCF7FA7B4FF58FE0218CA5E585434399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/3/326130363a613030353a323465303a3a2f34342d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:24e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:16:ad:0b:69:0a:23:d0:b4:c4:f3:21:73:0d:a1:2b:46:3c:
         20:86:7a:e6:cb:5b:94:1d:6a:01:47:68:a9:34:70:a0:47:a3:
         19:60:c4:a1:45:0d:bb:07:52:77:82:2e:10:0d:94:4a:78:84:
         cb:75:5b:7d:30:a7:aa:09:6c:5f:01:1a:be:6c:5f:6a:ff:d0:
         2d:9a:81:7f:a4:70:75:19:d1:44:f8:a3:61:5a:ec:9f:95:d4:
         b5:ab:d6:da:2a:60:6b:9d:7c:9c:36:3d:18:9e:1f:17:53:98:
         dc:75:c6:15:74:7a:3c:be:08:ba:55:07:cc:d2:c4:d6:e5:23:
         73:c8:e1:be:b6:f4:3d:71:e4:19:66:33:43:53:84:36:96:26:
         79:85:6d:6a:aa:c4:d9:58:ce:74:df:6b:1c:05:a4:c4:5a:92:
         52:de:d0:08:b8:47:65:9a:4f:4e:bb:3f:50:7d:41:75:cc:b9:
         99:86:f5:24:66:9b:55:37:4f:73:d9:1a:4c:13:ce:44:4a:6c:
         3c:5e:b1:30:84:6c:27:f0:16:89:85:32:d9:a7:ef:15:4f:83:
         64:89:c1:a9:87:c5:88:dd:2a:64:33:9a:b2:af:f6:46:84:81:
         5e:4d:51:9f:a6:ce:e9:0b:dc:f3:34:b2:ac:92:21:16:df:3c:
         48:bd:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:47:31 2024 by rpki-client on console-ams.rpki-client.org