Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3a2f33322d3438203d3e203535323031.roa
File:                     323630373a373463303a3a2f33322d3438203d3e203535323031.roa (raw, json)
Hash identifier:          drJcUWG30PO7Wi0QSKyrOm+EL437iLwp+nO8/umRA9k=
Subject key identifier:   85:F6:78:4F:21:02:B4:21:09:AC:54:56:3D:ED:2D:3C:73:F6:5D:72
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       68EB60A3D1DB6033982608143DA5BB55472BB7F0
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3a2f33322d3438203d3e203535323031.roa
Signing time:             Sat 02 Nov 2024 22:57:02 +0000
ROA not before:           Sat 02 Nov 2024 22:52:02 +0000
ROA not after:            Sat 01 Nov 2025 22:57:02 +0000
asID:                     55201
IP address blocks:        2607:74c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl
                          rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:eb:60:a3:d1:db:60:33:98:26:08:14:3d:a5:bb:55:47:2b:b7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Nov  2 22:52:02 2024 GMT
            Not After : Nov  1 22:57:02 2025 GMT
        Subject: CN=85F6784F2102B42109AC54563DED2D3C73F65D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:37:e9:77:07:b0:b5:60:74:c1:93:c1:ce:
                    ee:40:8e:af:6a:4e:7c:91:96:c1:71:d3:de:5c:d5:
                    26:41:97:3a:a1:e4:d8:89:64:02:a7:fa:0b:90:77:
                    89:9c:cd:5e:3a:cc:45:ab:7b:d5:84:cd:81:1c:14:
                    7b:b4:04:a1:ce:ca:20:c1:ff:b4:fd:1a:3f:92:d3:
                    13:1a:28:61:ed:30:1d:2a:c3:12:b7:86:a8:6d:88:
                    09:19:19:77:10:b7:64:d0:9b:62:60:39:d1:8f:9a:
                    a9:02:cc:b7:21:c1:7c:67:d2:46:eb:f6:05:c4:38:
                    54:67:de:20:ef:7a:a8:bf:f4:6e:60:e3:74:1c:33:
                    aa:f9:16:b8:86:b2:32:ec:8e:20:42:cc:0f:e1:70:
                    40:44:4f:3e:e3:e1:18:c5:59:e9:73:66:6a:89:12:
                    23:86:44:d8:25:04:33:fc:0d:bd:63:58:b0:ff:a8:
                    80:3c:d2:e2:d7:bf:69:af:2f:3e:04:d4:e1:e0:f3:
                    5f:56:5d:d6:0c:c0:7d:fb:06:98:90:d1:bb:b7:e0:
                    ee:f9:eb:2d:3f:12:59:16:d3:02:d2:04:09:7e:a9:
                    77:04:66:99:c0:00:77:ba:b3:a5:2c:b1:12:74:ce:
                    1e:7d:74:a2:4b:d1:df:5e:e9:aa:04:f5:f9:34:ba:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:78:4F:21:02:B4:21:09:AC:54:56:3D:ED:2D:3C:73:F6:5D:72
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3a2f33322d3438203d3e203535323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:b0:d7:78:e0:f1:51:9c:5f:ff:0f:5c:41:ff:40:ec:51:
         a2:ba:f7:75:82:1e:90:a2:f2:08:f2:95:18:1a:30:99:42:bb:
         ed:51:fc:63:7a:3a:a4:63:e2:88:80:d0:ec:18:65:08:32:ab:
         66:cc:a6:c0:bc:2d:c6:96:93:1f:8c:1a:2c:da:d4:15:33:c0:
         1e:cd:a8:7d:25:0c:7e:ca:cf:38:d1:7c:6e:9a:2f:89:da:60:
         8d:16:6e:c4:9b:e2:fd:d9:2d:01:68:02:4c:9e:c7:46:8a:91:
         c0:56:ab:cc:96:af:05:d4:d2:1f:74:65:0e:8a:9e:c7:24:6c:
         9b:b1:ce:b6:4c:49:7e:5f:b4:90:c6:b3:f1:c1:ae:95:42:0a:
         34:5a:26:ed:7d:40:df:7d:d6:8b:35:ac:17:9c:97:e6:c2:ac:
         19:19:92:8a:59:c2:03:6f:4c:c3:a3:ad:72:27:92:c4:0a:cc:
         16:c0:c9:61:8a:0f:9f:4e:64:3a:cd:c4:49:4a:75:94:0c:79:
         05:74:47:1e:0c:c7:43:29:98:11:5c:ad:08:4f:e7:a0:0c:fb:
         48:f4:f5:20:d1:a8:5d:1e:39:35:39:ac:2e:e5:b6:3b:d6:44:
         75:50:9e:7e:1b:d5:41:07:98:f0:5d:ec:76:33:a3:d6:89:69:
         85:e1:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:48 2024 by rpki-client on console-fra.rpki-client.org