Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34342d3434203d3e20323030313630.roa
File:                     326131323a646434373a353230303a3a2f34342d3434203d3e20323030313630.roa (raw, json)
Hash identifier:          JR399foXD5p7ws1bF2sDJzqh/jZKac1xvoEGtjcKh4s=
Subject key identifier:   A3:80:32:AA:8F:9E:BD:AC:50:8C:AB:CD:36:50:1B:7C:5A:9C:DC:D1
Certificate issuer:       /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial:       2E2B7570FFE8F4138B565FB8A8B34D0447A686AF
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access:    rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access:      rsync://rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34342d3434203d3e20323030313630.roa
Signing time:             Thu 13 Apr 2023 09:52:17 +0000
ROA not before:           Thu 13 Apr 2023 09:47:17 +0000
ROA not after:            Thu 11 Apr 2024 09:52:17 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5200::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl
                          rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
                          rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.crl
                          rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyWduz5VEsCfLYZ6WTPqN3c0of8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Sep 2023 20:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2b:75:70:ff:e8:f4:13:8b:56:5f:b8:a8:b3:4d:04:47:a6:86:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Validity
            Not Before: Apr 13 09:47:17 2023 GMT
            Not After : Apr 11 09:52:17 2024 GMT
        Subject: CN=A38032AA8F9EBDAC508CABCD36501B7C5A9CDCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:49:c5:72:f8:02:94:6c:28:dd:77:f6:b6:
                    39:1f:b5:6c:10:07:46:78:82:78:48:97:d9:b3:c7:
                    8b:4b:57:90:ac:72:c6:8a:a5:ea:dd:4f:d5:24:31:
                    3e:11:ed:e5:fa:d6:97:55:ad:af:fb:ff:5d:2f:9f:
                    95:15:d9:6e:5a:fb:6d:bd:14:67:93:d7:97:4a:3d:
                    b2:b2:9d:2f:57:75:4f:84:31:6c:c4:82:79:53:b7:
                    13:c9:dc:25:83:22:b2:0a:69:bb:37:e5:d1:49:94:
                    9f:72:1e:6a:aa:49:38:03:4f:50:63:65:8c:a7:5d:
                    0a:7e:f8:f9:6e:a5:cf:18:5f:16:47:c9:aa:96:b7:
                    a9:a5:8a:e5:ce:92:a4:80:bd:c9:6a:47:f2:63:7b:
                    93:bc:e5:fb:68:66:48:a5:3f:47:21:df:b1:62:3f:
                    b7:22:73:8d:45:60:b1:0e:b4:25:c3:d5:41:21:ff:
                    ed:f9:c5:39:e3:9d:81:6f:98:af:79:6a:b6:bc:02:
                    f7:39:5d:81:2e:3e:80:b6:38:0f:f5:be:88:75:5c:
                    38:b6:29:02:77:47:a5:1a:b6:87:b6:23:26:11:5f:
                    a7:e8:ad:eb:4d:06:66:3c:63:78:72:cf:7c:9e:09:
                    b2:55:84:1f:31:36:f9:20:89:82:e7:cf:93:d3:35:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:80:32:AA:8F:9E:BD:AC:50:8C:AB:CD:36:50:1B:7C:5A:9C:DC:D1
            X509v3 Authority Key Identifier:
                keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34342d3434203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5200::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:64:4b:61:dc:53:e9:75:e7:72:f4:c4:cc:23:b9:7d:ec:34:
         16:f9:74:0d:90:51:c6:bc:4c:c7:65:52:4b:de:c1:99:50:b9:
         7d:61:c1:1c:2b:fc:de:24:86:2d:86:78:7a:37:3f:89:b5:0c:
         37:57:47:e0:67:de:a3:8d:d4:0a:a5:93:81:42:d6:7e:a1:56:
         2c:5e:cd:bf:7c:ad:23:04:14:89:d6:a9:66:4c:67:34:fc:54:
         12:d7:c8:c3:d5:c5:1a:80:9b:a3:1c:84:97:9c:7f:b2:ae:02:
         f5:4a:a9:68:43:95:6c:37:79:ca:45:80:ea:49:65:fd:ea:56:
         f5:fa:d2:3c:12:16:3f:e4:ef:95:a5:62:43:1b:b7:af:75:1d:
         14:3c:17:9c:d3:7c:5b:ae:aa:7a:fd:9c:e4:f0:64:3a:84:8e:
         aa:56:c9:9f:4e:f3:b6:7d:c6:8a:a5:4b:7e:34:5f:e7:2c:63:
         00:15:ad:c8:88:b8:7d:75:4e:6c:93:8a:df:c8:a1:bd:8d:e2:
         a7:83:c5:be:7c:1b:74:5f:ec:0d:f0:8a:a9:2f:aa:20:28:29:
         51:38:10:0d:cf:1b:d3:b4:9a:24:e1:d2:bf:2e:ae:20:55:4f:
         26:90:54:ac:56:41:d0:2e:62:cb:ce:89:8e:07:bc:53:7a:69:
         bb:6d:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 12:07:30 2023 by rpki-client on console-fra.rpki-client.org