Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          auzGjnORphI/MxMQTPVt+ukKZTLP+x1aooXi+yv8Mck=
Subject key identifier:   C7:47:74:77:F3:3D:37:FD:BE:3F:84:C2:72:A4:96:CD:FC:78:42:B5
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       6E2F6384B9B0A980ACC027E710C25EBD066255E1
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Mon 04 Dec 2023 19:54:37 +0000
ROA not before:           Mon 04 Dec 2023 19:49:37 +0000
ROA not after:            Mon 02 Dec 2024 19:54:37 +0000
asID:                     10103
IP address blocks:        2607:74c0:110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl
                          rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 23:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2f:63:84:b9:b0:a9:80:ac:c0:27:e7:10:c2:5e:bd:06:62:55:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Dec  4 19:49:37 2023 GMT
            Not After : Dec  2 19:54:37 2024 GMT
        Subject: CN=C7477477F33D37FDBE3F84C272A496CDFC7842B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:20:8f:eb:6f:ce:64:b6:e9:dd:47:fd:73:
                    73:1b:eb:f8:a2:48:20:72:38:93:00:83:ad:af:ec:
                    ed:36:7e:60:62:40:4f:59:2e:99:44:4f:7c:cb:90:
                    32:0a:d2:33:72:25:a1:ba:db:f8:9e:26:21:3d:8e:
                    08:a5:0b:36:fb:53:38:5f:fb:77:01:de:ee:b1:64:
                    67:51:11:b4:49:fb:92:3f:cc:a5:7d:ac:4f:ce:08:
                    fd:07:2b:be:bb:96:08:ca:57:d4:e1:c2:80:2d:82:
                    15:05:d7:d7:d5:e4:55:cc:9f:d2:cc:55:dd:9f:36:
                    cd:32:b3:2f:cb:39:2d:ba:2a:53:b8:72:f1:09:e6:
                    b7:5f:aa:b2:c8:3d:cd:e0:b3:f3:36:4b:27:32:11:
                    b1:8e:49:f1:3b:c8:ab:c7:62:14:59:08:e2:6f:4c:
                    a5:b1:01:0e:10:0b:97:d4:63:9d:39:1a:f6:57:03:
                    36:92:ce:75:4a:c6:88:f0:dd:77:ab:49:e3:7e:ab:
                    12:cc:94:ab:97:4b:86:b4:7b:6e:92:43:30:76:0e:
                    e1:04:49:e8:07:4a:95:94:6b:60:f2:39:86:d3:68:
                    e4:19:ad:79:ad:3b:db:d3:be:89:38:16:08:88:d6:
                    3f:b2:dc:41:c3:67:2a:79:e9:ed:43:ae:e8:64:ac:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:47:74:77:F3:3D:37:FD:BE:3F:84:C2:72:A4:96:CD:FC:78:42:B5
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:f3:7b:40:84:a6:36:3a:29:00:e2:f4:8a:54:87:31:14:54:
         a3:d9:a7:d8:5f:46:f4:b6:95:22:53:d5:72:4c:eb:bb:21:d2:
         a9:89:f5:e2:e3:63:6b:8d:1e:b8:2c:6b:4b:54:cc:27:ad:74:
         ef:30:e8:37:1d:78:2c:56:13:3b:7a:8d:e2:d3:28:4e:40:da:
         83:49:c0:55:4c:1f:97:d8:ef:b7:e1:65:0d:7d:68:cf:79:f8:
         52:bc:3f:d9:ed:1f:97:42:13:ce:c4:a9:8d:9b:31:89:88:23:
         d5:c6:25:a4:b8:32:17:ac:fc:b6:f7:39:bc:33:c5:44:5f:85:
         71:89:6d:db:55:c5:f3:f3:bd:e0:85:06:77:cb:ac:e9:6d:2f:
         74:d5:26:e7:9b:1b:b6:e2:f2:14:53:4d:ec:da:b5:60:a7:0d:
         1d:1a:11:30:b3:85:4f:e3:fc:00:4d:80:7d:a5:7d:e2:0c:07:
         4e:a7:6d:12:e6:24:6a:4a:08:77:57:b1:24:78:15:c5:67:60:
         26:81:df:1e:d1:fb:9a:e2:15:dd:1f:9b:73:18:51:fe:ed:a1:
         f9:bf:08:a2:6d:fa:4c:95:ca:8b:29:80:b8:94:40:ea:4e:5d:
         5b:ff:30:ea:2a:94:ba:b5:70:a8:67:34:7d:c9:63:db:2c:21:
         44:87:8f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:03:47 2024 by rpki-client on console-fra.rpki-client.org