Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          RXB+NtOgEXsL/QrsomTImRF9ZuplO84EeFkToGX4G/k=
Subject key identifier:   A4:71:18:D2:5D:58:8A:91:6C:2D:23:2C:45:4B:13:46:35:C7:28:7D
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       134C657F6642F500CBB6AEA7CD6B68E8B337B61B
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Mon 04 Nov 2024 20:23:43 +0000
ROA not before:           Mon 04 Nov 2024 20:18:43 +0000
ROA not after:            Mon 03 Nov 2025 20:23:43 +0000
asID:                     10103
IP address blocks:        2607:74c0:120::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl
                          rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4c:65:7f:66:42:f5:00:cb:b6:ae:a7:cd:6b:68:e8:b3:37:b6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Nov  4 20:18:43 2024 GMT
            Not After : Nov  3 20:23:43 2025 GMT
        Subject: CN=A47118D25D588A916C2D232C454B134635C7287D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:4e:9e:74:b0:50:66:3b:d2:22:d7:99:49:
                    5a:34:8d:7e:1c:82:a0:69:24:cc:18:41:f9:c0:f9:
                    99:93:73:f2:4f:82:05:5b:91:8a:73:20:0c:f7:da:
                    48:34:48:fb:97:49:0a:9b:d8:67:52:34:bf:d0:9c:
                    2b:09:6e:a9:b1:05:92:9c:62:c8:6f:3e:1f:72:f1:
                    18:92:c6:53:9f:c9:e0:81:55:e1:db:a6:ff:f0:f1:
                    43:29:63:b4:2d:7a:19:3d:4e:78:11:c1:68:ae:37:
                    b5:09:97:e3:e2:91:b3:e7:1f:73:84:fa:b1:f6:2e:
                    88:f6:7e:b1:52:f9:2a:2e:f4:82:4c:3e:c3:7a:d8:
                    72:36:84:27:23:4e:3e:2d:aa:77:ea:d0:fd:95:19:
                    ff:98:d6:08:7f:3d:6a:c2:4b:3a:68:41:3f:c2:0a:
                    3b:f9:f3:3b:ee:47:01:85:ca:85:2f:72:80:36:0d:
                    2f:36:49:2d:0a:d0:ac:06:b7:b5:1e:cb:42:69:45:
                    85:19:ff:58:1d:b8:b8:20:65:06:2c:07:cd:d0:62:
                    95:86:04:be:40:27:21:e7:1e:eb:5d:fe:cf:5f:e8:
                    ce:b9:b9:fa:ff:bf:f1:99:18:d0:87:9e:d6:0b:5c:
                    ac:fb:d0:2f:da:37:0e:4c:52:c2:37:fb:f6:ca:6c:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:18:D2:5D:58:8A:91:6C:2D:23:2C:45:4B:13:46:35:C7:28:7D
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:bd:69:ea:91:cf:c5:7b:ad:7f:12:8a:88:f5:b5:ab:70:20:
         ba:ae:be:f0:1e:a3:90:f6:3e:89:c7:65:f6:9a:d4:d9:6c:50:
         a8:13:ad:4e:86:67:ab:bb:ba:95:3e:2c:52:f4:6a:00:1e:11:
         ed:b5:3b:29:a1:27:07:d2:01:f4:f2:88:58:97:12:a0:0a:81:
         a3:a7:38:e6:cf:be:00:2e:28:47:db:2c:c6:e0:11:ff:0a:3d:
         5f:a5:ab:d7:2e:84:c1:73:7f:fb:5f:2f:5f:ab:d7:ee:87:9d:
         55:03:ac:c3:59:e5:a0:74:71:d1:f7:d3:d7:dd:d8:85:7d:6d:
         dc:f0:2c:fa:92:ae:d4:85:a5:42:55:25:94:cb:e4:1f:c8:72:
         c8:62:29:b4:95:6f:a6:e5:e2:87:dc:e0:2e:c3:cd:30:95:06:
         b6:34:07:a2:99:7f:fa:5e:e8:ce:b8:cd:79:0b:0e:d5:b0:bc:
         fd:bf:8d:c0:8c:ff:93:83:c9:63:a8:d0:5e:f4:5a:79:e7:7f:
         fb:76:5f:64:6c:44:d0:79:75:8d:57:f4:f8:b6:19:34:d3:0c:
         0e:11:ae:45:2f:cf:ce:80:30:ab:28:f8:58:31:f2:9b:01:56:
         32:ca:94:45:8a:8e:3a:5f:a0:29:a4:b3:cb:1b:c6:25:23:41:
         33:f4:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:48 2024 by rpki-client on console-fra.rpki-client.org