Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa
File:                     326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          MjNTbRparl2xbYtlQPUGCHGMCRQr32WZapXYmhKYCIQ=
Subject key identifier:   3D:F7:31:C7:6D:11:97:64:14:B5:FC:80:47:8C:33:53:10:A6:12:AB
Certificate issuer:       /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
Certificate serial:       238B937EF2BA42EECD335AA184C181E38948E435
Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa
Signing time:             Thu 17 Apr 2025 23:14:23 +0000
ROA not before:           Thu 17 Apr 2025 23:09:23 +0000
ROA not after:            Thu 16 Apr 2026 23:14:23 +0000
asID:                     59678
IP address blocks:        2a05:dfc1:1014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8b:93:7e:f2:ba:42:ee:cd:33:5a:a1:84:c1:81:e3:89:48:e4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83
        Validity
            Not Before: Apr 17 23:09:23 2025 GMT
            Not After : Apr 16 23:14:23 2026 GMT
        Subject: CN=3DF731C76D11976414B5FC80478C335310A612AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:b0:92:02:16:24:af:70:cd:19:b8:6c:02:
                    67:26:aa:97:02:9d:e5:93:a1:90:70:42:f2:bc:9d:
                    ff:87:07:de:b6:95:e3:b7:57:cb:38:c1:9f:2d:e3:
                    56:19:20:47:61:b8:08:7a:2c:e8:45:f9:33:08:59:
                    09:de:c6:f3:4b:89:d2:65:75:7d:87:52:a3:7b:0d:
                    1d:b1:a0:6d:84:3f:e5:20:4d:0d:38:0c:e5:b7:07:
                    a6:5a:1c:00:39:97:6d:9d:66:79:ce:72:c5:30:e7:
                    b8:e8:45:fb:77:35:2e:d0:49:50:0d:35:58:9d:5f:
                    99:f0:33:92:55:29:03:72:cd:97:a7:43:70:b8:94:
                    9f:79:bf:f0:78:a3:fd:b6:f4:7f:96:af:3a:ff:24:
                    6b:f9:cc:50:41:94:30:2b:73:bd:a0:fe:a3:4a:ea:
                    54:cf:d9:a6:c2:63:d3:f6:7a:37:a8:f3:60:43:d1:
                    ee:a4:d2:a7:a7:77:aa:4e:8e:1a:26:6e:07:0d:4a:
                    d1:1d:36:c5:96:ba:2d:a7:19:05:34:25:b6:c4:82:
                    91:19:1b:ee:fa:d8:85:10:91:df:62:1a:6a:85:11:
                    fa:f1:64:b8:d2:25:ef:0c:9b:93:0d:ce:b5:31:7b:
                    15:91:e5:58:32:68:27:33:71:0a:84:ac:6a:0f:ba:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F7:31:C7:6D:11:97:64:14:B5:FC:80:47:8C:33:53:10:A6:12:AB
            X509v3 Authority Key Identifier:
                keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:74:36:d1:91:67:1e:a3:3b:9b:26:4f:8f:de:36:c2:89:
         b6:4e:f6:86:6b:89:91:9c:45:00:c2:b4:49:1b:be:d7:2a:4d:
         82:ec:aa:8a:e2:64:cf:ff:6d:1e:6b:c3:08:3e:b7:17:1d:b6:
         a5:8d:48:1d:60:37:ba:c9:58:0f:a8:6f:d5:8c:0b:5b:64:03:
         46:1f:12:c8:dc:cd:da:12:23:d0:1e:73:df:88:a2:19:dd:d1:
         69:1f:a5:bc:b4:22:94:0d:d8:2b:0b:06:22:bf:c1:2c:f3:84:
         2c:ad:e9:80:80:9c:f9:83:7e:1c:c8:89:f3:a7:52:9f:cd:8c:
         a5:39:b1:2d:da:c8:5f:fa:c1:5b:5f:ea:42:fb:a8:49:03:a1:
         94:99:df:03:28:44:4a:d0:4b:e0:2d:4a:0d:53:7d:d6:ce:b4:
         84:49:dd:a8:ba:ef:d3:4d:64:46:bf:dc:a1:86:d8:95:0e:56:
         94:77:05:d7:63:41:1c:69:82:b6:a5:c7:84:b1:b7:e1:22:ff:
         fc:bb:25:22:1a:92:9a:23:7c:34:62:ff:ac:9b:c1:ba:c3:58:
         30:79:b2:20:d0:56:d2:8b:85:85:59:43:b4:56:a6:47:3c:20:
         5d:16:12:57:2d:dc:0b:d3:41:62:ef:0c:db:1e:f2:b3:c0:60:
         aa:4a:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:41 2025 by rpki-client