Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3330303a3a2f34302d3438203d3e2037303138.roa
File:                     323630373a373463303a3330303a3a2f34302d3438203d3e2037303138.roa (raw, json)
Hash identifier:          +pBTsqq7IvTRSarpXoeM2sRWxfnNzLFcbaXwP0S5iRY=
Subject key identifier:   27:10:15:98:FC:D9:8B:DE:70:D2:18:27:81:93:3A:1D:A4:7E:44:DD
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       36B94335E06CE330875C0794E0120805B89A9BD7
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3330303a3a2f34302d3438203d3e2037303138.roa
Signing time:             Sat 20 Apr 2024 17:05:12 +0000
ROA not before:           Sat 20 Apr 2024 17:00:12 +0000
ROA not after:            Sat 19 Apr 2025 17:05:12 +0000
asID:                     7018
IP address blocks:        2607:74c0:300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl
                          rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b9:43:35:e0:6c:e3:30:87:5c:07:94:e0:12:08:05:b8:9a:9b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Apr 20 17:00:12 2024 GMT
            Not After : Apr 19 17:05:12 2025 GMT
        Subject: CN=27101598FCD98BDE70D2182781933A1DA47E44DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:f8:88:d4:ab:e8:6a:35:df:7b:13:a6:dd:
                    c3:29:20:d3:42:85:1e:e3:50:e8:2e:41:5c:d1:7d:
                    e5:e9:ef:59:75:66:e6:f2:42:74:df:00:c3:e9:f8:
                    b5:37:d0:4f:48:01:79:41:b6:a3:c2:00:bc:13:10:
                    e5:eb:9c:0a:56:7c:92:53:70:7d:09:9c:18:db:92:
                    19:47:69:af:a2:4a:c0:07:0b:88:7d:92:6c:b6:51:
                    59:14:06:14:ba:10:55:9e:8c:f3:60:c7:15:1e:c5:
                    d8:69:3b:63:53:4d:aa:a2:38:16:71:e0:54:a6:4e:
                    46:31:71:8f:41:e5:0c:da:60:ae:21:6a:1f:64:7a:
                    15:69:38:79:97:4a:c0:49:45:eb:0d:0b:a9:00:51:
                    de:be:74:a1:07:c2:54:b7:a4:ac:83:18:2d:a9:38:
                    ab:c1:88:46:5a:47:f5:e9:1b:68:21:d5:e0:ab:8d:
                    a4:4b:6c:86:1b:b6:20:51:ef:02:7d:7c:88:03:cd:
                    2a:79:2d:28:2d:78:42:71:a3:6b:0b:ce:df:c1:5d:
                    b0:59:18:e0:6e:da:1d:98:a8:42:72:2c:cf:63:42:
                    ae:80:df:bf:7f:46:42:02:f0:e9:84:3f:2a:1b:bf:
                    22:ef:06:47:33:71:00:e7:3c:7f:b0:44:a7:14:25:
                    72:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:15:98:FC:D9:8B:DE:70:D2:18:27:81:93:3A:1D:A4:7E:44:DD
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3330303a3a2f34302d3438203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:47:51:02:a2:72:55:1d:ba:07:93:0c:9b:49:99:cf:96:1d:
         aa:08:7c:65:cb:de:b8:35:1c:5b:f6:07:98:72:94:34:88:93:
         07:5a:9c:e3:b6:0f:c4:be:49:24:db:6f:52:75:8f:03:91:b1:
         9e:4f:c9:9f:11:40:b9:0b:3b:02:21:2f:1f:d0:3e:e7:6d:c9:
         e9:c2:41:19:c3:88:6f:03:93:b8:06:90:69:eb:67:12:f8:42:
         24:77:2b:95:18:e1:6c:87:4c:3a:3d:98:c1:89:29:68:96:38:
         a0:95:e9:91:22:d1:bf:df:30:a4:66:20:a3:a3:d9:fa:d4:38:
         f7:9c:0d:b0:f8:07:12:49:5e:f3:6a:17:0a:11:51:06:75:45:
         ba:9f:0b:d3:53:78:cd:98:13:d7:a2:6c:f6:70:34:2a:33:1f:
         2b:b5:a8:6b:c5:b3:63:c8:5a:b2:3c:04:5d:e4:73:bc:06:c1:
         9d:14:c8:c0:59:49:87:b1:f3:50:e0:ff:22:b8:bf:22:a9:cb:
         9e:5f:45:e2:07:fd:f2:2d:82:25:cf:35:44:b4:55:06:29:5c:
         75:7c:b4:54:18:97:96:c0:e9:4e:f2:9e:00:f9:8b:ce:ed:48:
         6e:1a:9c:79:a3:62:a6:92:c4:4d:13:df:c0:55:39:d5:f6:8f:
         df:03:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:03:20 2024 by rpki-client on console-fra.rpki-client.org