Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          l21M2v9CW09OTsPsok2VDG8aNVY8DcR+Ph1B2PtT5GI=
Subject key identifier:   D1:47:83:BF:07:9D:BB:77:E8:D1:4F:49:E2:1D:E0:00:C0:54:74:75
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       31BFF3EECF01EC8E384EF703E6C852AD3FDC3532
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Mon 04 Nov 2024 20:23:42 +0000
ROA not before:           Mon 04 Nov 2024 20:18:42 +0000
ROA not after:            Mon 03 Nov 2025 20:23:42 +0000
asID:                     10103
IP address blocks:        2607:74c0:130::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl
                          rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bf:f3:ee:cf:01:ec:8e:38:4e:f7:03:e6:c8:52:ad:3f:dc:35:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Nov  4 20:18:42 2024 GMT
            Not After : Nov  3 20:23:42 2025 GMT
        Subject: CN=D14783BF079DBB77E8D14F49E21DE000C0547475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:fb:8d:26:42:5f:80:37:e0:f9:c5:f8:21:
                    ca:79:1b:e9:45:b2:9f:3f:43:68:5a:6b:4e:45:1d:
                    dd:90:25:9b:45:cc:95:b1:e0:25:bf:8b:53:b8:dc:
                    69:bf:df:1b:fc:6e:0e:00:a4:b3:39:24:24:dd:93:
                    e2:9f:cd:e3:41:5d:0a:21:99:30:ce:fa:d9:a3:e3:
                    2a:d9:ab:55:52:90:23:5c:48:d1:8b:2e:ad:35:b7:
                    c4:a1:d6:1b:1e:16:d7:1f:2c:ba:7e:90:9a:3f:b5:
                    08:71:40:18:25:db:3b:c4:24:52:5a:31:dc:6d:4b:
                    79:6e:e6:b9:01:98:98:81:af:2b:04:a1:11:44:a3:
                    b3:c3:ac:be:d0:f1:ee:ad:0d:21:8e:8c:89:f3:df:
                    4e:92:13:b0:15:e7:51:ab:aa:78:2f:8e:7e:96:e1:
                    c6:51:24:53:60:4c:ff:1f:04:ec:bf:2b:55:d0:d7:
                    6d:4c:fd:8e:fd:af:7c:82:02:65:69:91:35:74:bc:
                    6f:c8:14:30:93:c8:7b:74:41:46:d8:0e:d4:d8:93:
                    63:c7:b1:a1:e0:de:c7:c3:09:e1:79:0d:89:3d:7c:
                    f2:c6:d7:4e:47:31:ab:9a:3c:df:3b:ac:5e:9c:04:
                    af:d0:8f:8d:6c:32:e1:4a:9e:b0:45:ff:79:9f:cb:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:83:BF:07:9D:BB:77:E8:D1:4F:49:E2:1D:E0:00:C0:54:74:75
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3133303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:130::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:3a:30:53:08:07:2c:d7:dd:e3:a0:f4:38:70:9a:ee:6b:40:
         19:40:d0:26:b4:97:85:20:83:93:fa:8f:88:c3:5e:dd:60:52:
         55:e9:1e:db:f8:38:89:b4:d4:7e:8d:c3:71:00:88:b3:fd:9a:
         38:21:04:11:63:3b:36:7d:b5:a8:bf:bf:44:6f:1f:a5:a1:94:
         d6:88:6a:e9:9b:b1:86:f6:14:d6:13:a0:d7:c7:71:6b:5b:2e:
         94:94:cd:46:34:85:96:0d:6d:49:8c:f8:64:c6:4a:e3:bf:8f:
         05:38:a2:ab:b3:c2:f3:ff:c2:48:10:c8:17:97:10:d2:12:1f:
         a3:73:de:33:ff:43:f4:d7:64:0f:7e:6a:f7:47:05:c5:6f:23:
         e8:d4:bf:1f:45:e0:4b:38:b2:7d:10:69:7f:5f:00:4f:15:82:
         17:b9:4f:fe:8c:ff:cb:24:50:92:55:50:58:75:20:d3:29:fc:
         79:27:d4:dc:e6:b4:44:7d:af:f5:c8:4f:eb:f6:92:9e:e2:a4:
         55:77:2e:58:ec:ed:60:6a:57:46:e9:e7:ad:d0:5a:cf:02:83:
         36:d0:27:74:ce:41:f6:08:14:2a:c7:d7:69:e8:44:e4:59:2e:
         d4:a7:22:f6:92:d0:d0:91:2b:3a:7a:72:33:b4:0d:5d:42:0b:
         0b:78:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:48 2024 by rpki-client on console-fra.rpki-client.org