Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          m9aNBmG2yhIu/gPnHZ595TPY590aZjJ0XlB8xGwcPMA=
Subject key identifier:   59:DE:4A:34:BC:F8:C7:EE:01:30:FF:82:1E:AB:CF:09:5F:AD:D4:47
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       0474B224EDA837C2DC42F80B46F9B91E640EEEC4
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa
Signing time:             Thu 01 May 2025 12:14:24 +0000
ROA not before:           Thu 01 May 2025 12:09:24 +0000
ROA not after:            Thu 30 Apr 2026 12:14:24 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:74:b2:24:ed:a8:37:c2:dc:42:f8:0b:46:f9:b9:1e:64:0e:ee:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: May  1 12:09:24 2025 GMT
            Not After : Apr 30 12:14:24 2026 GMT
        Subject: CN=59DE4A34BCF8C7EE0130FF821EABCF095FADD447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:57:a3:54:94:f9:fb:ac:3a:87:f4:e9:14:
                    b0:9d:c4:41:ca:f5:68:82:88:f2:bc:f2:9c:4d:80:
                    82:78:9e:4e:89:cd:33:49:ec:54:e1:3e:f1:67:21:
                    c4:c3:fd:af:bd:a0:46:d3:96:33:f7:cf:c7:b4:ef:
                    60:a1:a4:f4:b0:d4:fc:e2:e6:81:56:29:2b:25:d6:
                    76:d1:12:23:8c:99:dc:cc:09:e1:b5:92:24:6a:3f:
                    eb:d3:3f:4a:8f:88:96:41:ae:dd:26:78:88:13:5e:
                    07:ff:33:dd:f8:99:d8:68:e4:86:3b:9c:de:2f:a7:
                    e5:1d:df:27:af:d4:90:4b:3b:cf:98:18:97:06:d6:
                    ff:75:76:07:da:4f:a7:43:fb:81:b2:db:6c:6e:8c:
                    54:bc:6a:97:86:c0:2d:54:3a:ba:c4:12:d8:72:34:
                    92:0b:71:c4:9e:1b:42:a3:e9:f2:a7:5d:04:37:5d:
                    f0:a7:48:23:96:4f:48:ec:6a:64:e2:05:61:11:03:
                    65:29:8a:d7:13:f6:f2:60:79:02:7b:85:5a:20:38:
                    71:8b:f6:ac:1e:7d:98:1d:a9:ee:db:e0:e1:05:fb:
                    76:3d:b6:75:6a:8f:79:55:e8:64:eb:07:1e:04:b7:
                    fd:10:45:d3:6b:de:fa:87:39:4c:0a:65:36:a1:ff:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DE:4A:34:BC:F8:C7:EE:01:30:FF:82:1E:AB:CF:09:5F:AD:D4:47
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:ae:e2:1d:92:64:f4:bb:67:ef:58:58:24:47:19:68:88:df:
         a5:d6:46:4c:fa:f3:56:6d:04:aa:b0:a6:0c:ee:e8:e3:7a:c4:
         df:ab:15:ac:9c:d8:da:04:fc:a7:8b:b7:24:3e:c4:e0:8f:d3:
         1c:cd:54:62:0f:31:48:24:c3:9a:60:e1:6e:8e:45:08:3e:36:
         d9:a3:6a:da:b3:ec:a8:27:67:fb:79:97:25:e1:f1:b4:6f:29:
         f0:44:4d:bb:3a:66:16:76:aa:2d:f5:28:e0:5a:8b:08:e0:d1:
         7d:a2:35:d6:17:56:b5:5d:6d:a3:86:55:1d:e7:e4:5d:5d:18:
         2a:a3:1e:4f:f8:bd:65:f7:73:c3:92:13:73:5a:75:81:8c:75:
         ea:8e:6e:06:85:8c:87:f6:b1:f5:35:b0:6b:e7:17:5f:a0:c6:
         8a:b3:87:d5:84:5a:e9:f5:f4:00:31:ab:35:39:cd:e0:fb:79:
         cf:08:4e:0c:a9:6f:bc:39:3e:8d:79:c3:e2:65:d8:4d:f7:a5:
         e2:c1:57:46:15:2b:52:f4:fa:88:56:08:5e:53:4a:31:5a:48:
         7a:2f:8a:b5:2e:b0:68:46:70:05:42:49:64:33:0b:c1:23:07:
         eb:0c:4c:8c:14:29:f2:62:d2:c5:79:75:98:71:7b:02:97:3d:
         f7:05:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:06:41 2025 by rpki-client