Route Origin Authorization

$ rpki-client -vvf rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e203136353039.roa
File:                     323630323a666364333a3130363a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          lNHzozPITrfai0biME3QSV5yyEX2YiKSO5YmtFhyI78=
Subject key identifier:   B8:AB:9A:23:05:C0:EE:F2:43:A6:0E:00:E4:9A:98:24:E0:EE:6F:6E
Certificate issuer:       /CN=8A15107195E63966ABA1997AD31382979C75F736
Certificate serial:       04DA7C3761F9818672328A2BA3560A287C1D8150
Authority key identifier: 8A:15:10:71:95:E6:39:66:AB:A1:99:7A:D3:13:82:97:9C:75:F7:36
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer
Subject info access:      rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e203136353039.roa
Signing time:             Sat 29 Jun 2024 19:31:54 +0000
ROA not before:           Sat 29 Jun 2024 19:26:54 +0000
ROA not after:            Sat 28 Jun 2025 19:31:54 +0000
asID:                     16509
IP address blocks:        2602:fcd3:106::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/8A15107195E63966ABA1997AD31382979C75F736.crl
                          rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/8A15107195E63966ABA1997AD31382979C75F736.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Sep 2024 12:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:da:7c:37:61:f9:81:86:72:32:8a:2b:a3:56:0a:28:7c:1d:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A15107195E63966ABA1997AD31382979C75F736
        Validity
            Not Before: Jun 29 19:26:54 2024 GMT
            Not After : Jun 28 19:31:54 2025 GMT
        Subject: CN=B8AB9A2305C0EEF243A60E00E49A9824E0EE6F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:45:f8:2d:3a:91:a3:71:c5:93:69:15:19:
                    69:0b:ea:8f:a2:6b:3e:9d:a5:b9:a9:f6:85:93:53:
                    eb:e2:cb:84:f2:c5:9f:aa:da:de:41:12:d7:5d:68:
                    ed:6f:c8:11:83:0e:91:43:87:ee:e2:5a:73:db:c7:
                    b2:86:76:f2:62:28:33:63:ca:d5:a8:c3:ba:be:b1:
                    80:30:18:cb:3b:71:9f:c9:7d:80:0b:96:d5:bf:1a:
                    16:51:99:79:3f:68:f8:69:7f:05:ed:97:a1:7e:9a:
                    e4:45:56:64:a9:14:9f:03:58:63:fe:c2:4e:37:76:
                    4f:a2:bf:44:01:e8:65:72:1c:4c:51:ad:b4:fe:ff:
                    05:9f:4b:2f:56:82:97:87:51:df:9c:bf:b0:b2:f2:
                    c8:0d:57:70:f9:2f:e2:3e:e9:3e:68:a8:20:63:2b:
                    aa:63:88:89:ac:77:1f:c9:ec:78:40:e0:30:f4:cd:
                    b4:3d:12:62:10:ac:d6:46:7c:e3:83:d6:96:0d:db:
                    ec:3b:31:0d:4f:a2:e7:57:24:13:89:a9:d9:4f:ee:
                    77:4f:d0:3e:bf:25:39:13:49:90:6c:da:ca:d5:5e:
                    6a:2d:ff:fc:cd:9b:08:62:fa:a2:42:c5:a3:8c:d3:
                    29:14:c9:81:01:5f:2b:96:f6:09:d5:71:d7:93:07:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AB:9A:23:05:C0:EE:F2:43:A6:0E:00:E4:9A:98:24:E0:EE:6F:6E
            X509v3 Authority Key Identifier:
                keyid:8A:15:10:71:95:E6:39:66:AB:A1:99:7A:D3:13:82:97:9C:75:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/8A15107195E63966ABA1997AD31382979C75F736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:5e:18:e2:29:4c:1b:68:3b:64:c1:89:e7:52:d3:f0:a6:d6:
         e7:b0:62:8d:f4:e6:9c:9b:a2:7c:14:b3:75:0b:bc:17:70:db:
         2e:75:c0:5e:39:30:5a:e4:9c:e3:5b:02:c6:b5:0b:f3:dd:e7:
         be:8b:37:40:83:56:22:26:97:54:54:4d:6d:9a:53:80:5e:2c:
         8f:02:94:59:37:ef:e3:aa:b6:dc:3a:54:79:a1:b4:b4:bc:1c:
         60:93:2d:98:96:d2:9b:23:85:d6:07:fe:ee:51:8e:63:fc:a5:
         2e:d1:78:91:46:05:71:0c:bd:23:37:63:5c:3a:d5:83:ae:a0:
         91:2b:c2:8c:84:4d:ff:fe:db:59:ea:06:ef:e7:f6:d4:80:71:
         fe:b4:ef:85:ab:c1:42:ce:69:c2:9c:67:4c:cb:46:82:aa:4a:
         f9:fa:db:fa:d0:f8:07:e0:66:75:34:9f:c7:0c:c0:ed:02:7d:
         af:7c:ed:10:44:7e:dc:77:ed:7c:39:d1:cc:33:89:7c:c3:08:
         da:b8:7f:26:fa:63:7c:87:9c:c6:f2:ba:9f:29:cc:53:bc:0c:
         49:83:2a:bc:f5:69:9c:58:58:81:76:57:ff:13:b7:b2:e1:8c:
         3d:86:33:0d:4a:bc:16:7a:f0:4b:e9:77:18:be:d5:19:c9:e9:
         70:54:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:04:32 2024 by rpki-client on console-ams.rpki-client.org