Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          tGOQDYuScWN9wD1T/8Tdekn0jzXwiIi+fLzo6hd8M+Q=
Subject key identifier:   5A:6C:8B:94:8B:BA:A1:8D:47:7F:DD:D6:6A:22:BE:A1:D2:CD:A6:48
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       6CE0CC3837F4708E39B17D7D43B4784BEFE7774B
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Mon 04 Nov 2024 20:23:43 +0000
ROA not before:           Mon 04 Nov 2024 20:18:43 +0000
ROA not after:            Mon 03 Nov 2025 20:23:43 +0000
asID:                     10103
IP address blocks:        2607:74c0:140::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl
                          rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e0:cc:38:37:f4:70:8e:39:b1:7d:7d:43:b4:78:4b:ef:e7:77:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Nov  4 20:18:43 2024 GMT
            Not After : Nov  3 20:23:43 2025 GMT
        Subject: CN=5A6C8B948BBAA18D477FDDD66A22BEA1D2CDA648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:9c:63:2f:b9:fc:89:a6:64:cd:3c:28:7b:
                    96:39:c6:57:0d:d1:9b:8c:c0:95:e7:26:bf:0f:d1:
                    f8:e2:00:f1:b9:87:5c:1a:8d:b9:d2:1c:85:89:94:
                    06:61:9c:57:c9:20:e9:0d:bc:93:f3:e1:cb:86:c1:
                    75:fd:32:f9:80:e6:44:80:80:9d:cd:f3:70:8a:7e:
                    03:8d:d5:af:e1:97:5f:c9:80:f7:db:59:b3:2f:46:
                    ae:60:20:c8:27:5a:24:7a:cc:26:42:92:0c:c8:8f:
                    0d:e8:d4:34:76:76:27:47:fb:dd:f4:ed:1d:7d:73:
                    6b:a8:6c:81:a1:04:3a:3a:ca:26:1b:91:70:ce:14:
                    b2:99:97:18:74:a5:f2:ad:5a:c0:7e:9a:ea:50:67:
                    22:d6:8c:3c:36:05:dc:1c:11:e0:39:5c:8f:9f:0c:
                    86:ce:73:60:ff:ce:db:4c:e5:ee:7a:4e:fc:4b:dc:
                    c8:65:03:fd:84:71:e4:95:f3:cf:ad:36:27:f7:59:
                    0f:12:04:4c:8a:4c:93:62:a1:31:30:65:46:1b:6d:
                    2b:36:13:27:ee:b0:ba:7a:a2:a9:18:12:46:c7:d7:
                    b5:a9:e3:6e:ec:9b:ba:6a:de:25:1a:3a:a3:5a:ac:
                    7d:46:5d:e6:18:b3:d1:f6:c4:4a:63:5f:8b:32:f8:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6C:8B:94:8B:BA:A1:8D:47:7F:DD:D6:6A:22:BE:A1:D2:CD:A6:48
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:140::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:f0:b7:0b:9e:9d:01:ec:68:09:86:c4:96:8f:bf:66:86:
         35:05:bb:be:d6:80:36:f0:98:fc:03:a9:56:11:73:f7:1e:c7:
         7c:8b:fc:42:a2:8a:b3:24:c4:34:51:c9:c5:74:2b:ae:9d:88:
         37:06:72:89:bd:3f:63:f8:72:04:dd:e2:2d:b5:6c:56:3f:05:
         e4:30:0f:6d:d3:34:5c:e4:5d:ce:0e:ba:34:ab:f3:b0:6f:8b:
         a3:eb:d6:02:0b:7b:46:df:8d:ba:86:6a:b4:e5:0c:4c:65:44:
         41:b4:f5:74:28:30:65:f3:f8:b5:73:8d:23:9e:90:91:4b:b1:
         c7:65:fb:2c:c7:24:4a:44:a8:45:b4:65:d9:90:16:cf:4b:d9:
         cb:a1:3f:7a:b4:dc:0b:52:7c:8b:2a:90:2a:f1:25:43:48:bf:
         25:ee:d2:45:46:d8:f8:d2:15:66:b1:6a:5c:4a:52:e3:f1:52:
         37:8c:7f:8b:b0:6d:55:0c:74:06:78:e8:91:e8:54:c0:6a:f6:
         08:a9:9a:57:2d:bb:9c:fe:bc:00:77:14:06:92:98:8c:fd:dc:
         43:ff:df:47:a6:9e:da:2b:af:da:b4:91:e6:d4:e3:9d:17:1b:
         27:69:7c:05:7d:78:75:5c:39:30:0e:c5:5f:2f:c0:19:06:f5:
         5c:ac:09:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:18 2024 by rpki-client on console-ams.rpki-client.org