Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a333030323a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a333030323a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          8i/QR15g+CpM5ireZ3oS1LfEdz4xaQWvj39SYteOgvY=
Subject key identifier:   D2:15:28:C7:DF:FE:8B:57:81:F5:7E:D0:37:6A:37:7A:BB:3C:63:CF
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       15812D1720D2E63E279B6699103DFFDF4D683EA3
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a333030323a3a2f34382d3438203d3e2034383030.roa
Signing time:             Fri 08 Sep 2023 09:00:00 +0000
ROA not before:           Fri 08 Sep 2023 08:55:00 +0000
ROA not after:            Fri 06 Sep 2024 09:00:00 +0000
asID:                     4800
IP address blocks:        2400:8000:3002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:81:2d:17:20:d2:e6:3e:27:9b:66:99:10:3d:ff:df:4d:68:3e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Sep  8 08:55:00 2023 GMT
            Not After : Sep  6 09:00:00 2024 GMT
        Subject: CN=D21528C7DFFE8B5781F57ED0376A377ABB3C63CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:6d:6b:aa:33:4a:dc:aa:8b:29:9e:fd:16:
                    e3:1d:27:33:23:d3:d3:92:40:85:3b:32:b5:4a:24:
                    b2:52:db:c2:b2:27:20:a3:77:06:5a:97:87:f2:23:
                    50:16:b2:18:02:cf:93:5d:c4:c4:fa:10:76:2f:f9:
                    be:44:c4:9c:b5:35:d3:2c:09:59:cd:25:1b:76:9b:
                    28:e1:79:18:56:9f:b1:b8:d4:57:ff:bd:c7:31:e8:
                    67:ff:30:5e:b1:2e:69:45:3b:3e:16:6d:f5:cb:ab:
                    93:8f:59:0a:12:27:67:51:dd:16:a0:fb:9b:b5:85:
                    85:98:9b:fb:3f:e9:d3:b9:ba:d4:73:9d:71:de:7c:
                    fc:2d:35:94:d3:c1:96:88:03:d3:2a:ca:d6:5e:9b:
                    7c:15:35:2c:52:20:d8:e1:1c:b6:f9:e9:07:23:36:
                    ea:03:92:6f:61:b5:38:9c:89:c6:69:e7:37:26:19:
                    6e:2b:c2:b0:8f:82:6a:d8:dc:aa:d1:c4:b5:1b:8f:
                    d6:8c:77:8d:95:69:d5:75:ff:ea:d3:c7:a9:45:f1:
                    4f:88:83:a3:5e:d7:a2:ff:5b:6d:8b:bc:50:02:81:
                    a0:20:1d:bf:63:a9:c1:c8:92:f6:22:ef:2f:f3:59:
                    64:d2:d7:9e:53:af:ed:7f:b2:1e:79:be:83:b9:0f:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:15:28:C7:DF:FE:8B:57:81:F5:7E:D0:37:6A:37:7A:BB:3C:63:CF
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a333030323a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:3002::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:d9:e0:4f:25:ee:94:17:eb:cd:10:f4:b0:eb:f5:a4:64:d7:
         21:07:ae:d8:57:9c:77:d8:41:5b:9e:5a:a4:69:ee:9a:c5:c5:
         e2:bb:89:9a:5c:bb:ce:70:3e:e1:09:85:83:68:e5:e3:54:8a:
         f7:f8:f7:6e:a3:8a:4d:0b:6b:f8:b6:ab:ea:23:02:8e:63:2b:
         04:61:21:0d:d3:fa:2e:67:04:eb:be:3c:51:f3:c4:cb:0d:60:
         46:35:9b:a2:d0:66:10:8a:4b:51:40:36:51:40:f8:d3:d9:f0:
         82:96:73:2b:a3:22:cb:fe:3a:f3:e8:4b:c6:03:7a:f7:eb:5d:
         cf:77:1a:4f:ea:f7:ce:5f:43:be:29:0d:75:d0:a3:a9:a2:af:
         a0:45:38:34:d2:bd:7b:30:c3:07:74:ed:61:ce:4d:c6:a5:06:
         25:f1:c5:6a:dd:2d:1b:dd:e9:7d:f7:21:3f:8e:4a:4f:3a:a4:
         51:e7:d2:7b:3f:4e:45:a3:0c:da:f5:93:48:07:a8:4f:2b:0e:
         6e:5e:29:ec:dd:e0:f3:88:47:a6:e0:e3:d9:63:9a:97:1b:58:
         93:9e:98:cb:86:f9:61:f8:e1:60:e3:ee:b3:6b:2d:5d:16:c6:
         08:7d:27:01:41:e2:eb:3c:46:ef:15:92:9d:7a:79:cc:c7:c2:
         36:bd:52:96
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUFYEtFyDS5j4nm2aZED3/301oPqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yMzA5MDgwODU1MDBaFw0yNDA5MDYwOTAwMDBaMDMxMTAvBgNV
BAMTKEQyMTUyOEM3REZGRThCNTc4MUY1N0VEMDM3NkEzNzdBQkIzQzYzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjG1rqjNK3KqLKZ79FuMdJzMj
09OSQIU7MrVKJLJS28KyJyCjdwZal4fyI1AWshgCz5NdxMT6EHYv+b5ExJy1NdMs
CVnNJRt2myjheRhWn7G41Ff/vccx6Gf/MF6xLmlFOz4WbfXLq5OPWQoSJ2dR3Rag
+5u1hYWYm/s/6dO5utRznXHefPwtNZTTwZaIA9MqytZem3wVNSxSINjhHLb56Qcj
NuoDkm9htTicicZp5zcmGW4rwrCPgmrY3KrRxLUbj9aMd42VadV1/+rTx6lF8U+I
g6Ne16L/W22LvFACgaAgHb9jqcHIkvYi7y/zWWTS155Tr+1/sh55voO5D6qTAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU0hUox9/+i1eB9X7QN2o3ers8Y88wHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMyMzQzMDMwM2EzODMwMzAzMDNhMzMzMDMwMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQAgAAw
AjANBgkqhkiG9w0BAQsFAAOCAQEAiNngTyXulBfrzRD0sOv1pGTXIQeu2Fecd9hB
W55apGnumsXF4ruJmly7znA+4QmFg2jl41SK9/j3bqOKTQtr+Lar6iMCjmMrBGEh
DdP6LmcE6748UfPEyw1gRjWbotBmEIpLUUA2UUD409nwgpZzK6Miy/468+hLxgN6
9+tdz3caT+r3zl9DvikNddCjqaKvoEU4NNK9ezDDB3TtYc5NxqUGJfHFat0tG93p
ffchP45KTzqkUefSez9ORaMM2vWTSAeoTysObl4p7N3g84hHpuDj2WOalxtYk56Y
y4b5YfjhYOPus2stXRbGCH0nAUHi6zxG7xWSnXp5zMfCNr1Slg==
-----END CERTIFICATE-----
Generated at Tue Apr 23 23:44:45 2024 by rpki-client on console-ams.rpki-client.org