Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          E+wAG+tbfGTByugDT0Zho2AFTTTADzb6mlDpfojQfWI=
Subject key identifier:   BC:C0:FF:FA:93:78:37:E1:FE:32:65:19:77:E7:A6:15:B9:FA:D1:DE
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       514F2A7FA5C4B7535E9102352E68D27807C8E2B9
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Mon 04 Nov 2024 20:23:43 +0000
ROA not before:           Mon 04 Nov 2024 20:18:43 +0000
ROA not after:            Mon 03 Nov 2025 20:23:43 +0000
asID:                     10103
IP address blocks:        2607:74c0:110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl
                          rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4f:2a:7f:a5:c4:b7:53:5e:91:02:35:2e:68:d2:78:07:c8:e2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Nov  4 20:18:43 2024 GMT
            Not After : Nov  3 20:23:43 2025 GMT
        Subject: CN=BCC0FFFA937837E1FE32651977E7A615B9FAD1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:23:c8:24:ba:0a:0f:f8:a3:c4:3c:a8:e1:
                    0e:91:79:38:2d:0a:81:0e:d8:76:6a:28:f2:97:d3:
                    a6:59:1b:10:8a:cc:5d:1f:6c:a6:34:f7:3a:e9:cb:
                    ee:ea:f1:92:81:ee:8f:16:22:c1:c0:b6:0b:18:43:
                    07:a2:ed:49:de:9d:5e:ba:e9:c4:c8:94:72:a2:32:
                    24:ba:31:76:e0:ec:8b:c7:fc:78:f9:67:2a:d1:dc:
                    0f:de:10:8a:0f:eb:2d:d3:19:4c:82:18:67:45:48:
                    82:c1:8d:1e:4b:7b:ec:6b:ac:9f:ec:f5:6d:ed:18:
                    6e:6f:04:4c:9a:82:ef:7e:98:ce:b4:91:cd:32:0c:
                    4a:25:88:65:ae:5e:5f:fc:11:fe:43:cf:92:8d:96:
                    7f:8c:d0:c9:6e:ba:4d:e5:15:43:b9:90:00:56:a4:
                    83:10:ff:e0:63:da:3c:d0:43:ba:65:7b:ad:b4:23:
                    1f:ff:74:d8:05:c5:c3:64:fd:6f:26:73:a6:84:21:
                    67:0c:6d:67:61:4a:9c:9d:73:1b:6b:af:1c:e3:70:
                    ca:22:94:2a:cc:79:89:01:f3:a9:25:99:a2:1e:65:
                    3f:06:7f:6c:f6:fe:f6:fe:ff:e9:81:09:60:f6:46:
                    5d:88:af:10:b7:16:af:1d:ca:61:4d:7d:06:99:27:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:FF:FA:93:78:37:E1:FE:32:65:19:77:E7:A6:15:B9:FA:D1:DE
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:02:84:09:ee:41:3b:f3:10:ad:88:7f:3a:08:41:8c:23:a9:
         fe:c3:ce:72:28:28:6f:99:07:11:59:9e:8d:1f:24:30:5e:89:
         0d:10:16:a4:73:ab:c4:a5:75:3b:c2:ee:02:45:ba:dd:c9:2a:
         23:fc:06:62:7a:ab:75:96:eb:75:9e:9d:9a:78:3e:c0:60:2b:
         f0:5b:7d:0b:e6:60:87:75:03:3b:f4:ec:20:94:ef:8e:51:0b:
         10:cd:ac:b0:b7:13:67:93:cf:79:79:36:ef:48:32:ba:f8:f3:
         15:fc:89:00:00:f9:58:00:f5:82:a0:1c:4f:64:2e:5a:3f:26:
         4d:e5:3d:7a:7f:0b:20:df:d5:b6:62:c2:b0:30:19:83:e2:37:
         d8:10:16:70:6f:ee:61:ab:46:fc:0d:e8:4c:86:5a:e4:64:66:
         96:7e:8a:c5:b2:d6:9c:15:95:64:68:93:e2:ee:01:4e:5b:d6:
         21:dc:f8:a6:dc:8c:6f:69:56:17:da:83:59:b8:01:db:ee:0b:
         18:48:6e:03:77:8e:1c:94:8d:99:b3:ca:9d:32:4d:83:67:38:
         e5:ac:27:b4:f5:25:ed:ac:29:e0:36:0b:61:31:e3:c7:99:56:
         a0:44:06:d6:8b:45:73:fe:6f:43:1c:42:7c:09:4a:05:bd:ef:
         00:b7:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:48 2024 by rpki-client on console-fra.rpki-client.org