Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          1h0tKSo88zinpG/8VXUHt7GVtMXZTlnTbvT9I6uwQv0=
Subject key identifier:   5B:EA:80:EE:50:C4:EB:7B:9F:DD:C8:D2:E2:C7:1D:B8:E1:0C:69:D6
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       28FD893DF4B722794151E2A6242154445B1C20AF
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Wed 31 Jan 2024 15:09:47 +0000
ROA not before:           Wed 31 Jan 2024 15:04:47 +0000
ROA not after:            Wed 29 Jan 2025 15:09:47 +0000
asID:                     199518
IP address blocks:        2602:faa5:f01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Oct 2024 03:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fd:89:3d:f4:b7:22:79:41:51:e2:a6:24:21:54:44:5b:1c:20:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan 31 15:04:47 2024 GMT
            Not After : Jan 29 15:09:47 2025 GMT
        Subject: CN=5BEA80EE50C4EB7B9FDDC8D2E2C71DB8E10C69D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:d0:95:33:4d:1d:38:0f:c5:6a:77:1c:2f:
                    04:b5:09:f8:61:3e:f4:09:07:1d:06:e4:6c:54:42:
                    1a:59:65:d4:09:9c:2d:30:04:a7:19:7d:5a:9e:fb:
                    31:a8:0b:55:d4:d0:bc:d3:44:dd:e8:78:cc:95:93:
                    7c:40:2e:19:4d:88:b4:70:59:f3:82:9f:80:46:50:
                    ce:7b:f1:8d:0b:0f:5f:9f:ee:c3:e3:a9:e5:17:eb:
                    1b:f7:67:e1:fe:56:f0:21:c5:42:8c:c8:6a:d9:e1:
                    96:68:50:15:6a:fb:f2:f6:cb:5a:04:7e:8a:ae:e6:
                    23:af:3f:8c:89:0d:e0:e4:e9:0f:93:54:55:ab:2e:
                    b8:a3:61:f9:b5:0d:71:09:76:29:bc:ad:f3:0f:3c:
                    0c:81:53:b2:29:87:e6:4f:c6:fb:88:c4:67:da:9f:
                    c6:ee:45:a6:11:3b:75:43:e6:c5:30:dd:66:1d:8a:
                    80:42:5a:9c:2d:fc:61:1b:82:84:c4:8d:3b:79:16:
                    ee:76:ad:38:79:da:e9:df:64:ae:23:72:ca:68:50:
                    3f:71:5b:24:4b:d2:b1:17:b7:22:e6:7b:ec:f0:e4:
                    d6:b3:e1:6a:d2:70:84:64:3c:0b:4a:15:9f:93:be:
                    09:6a:a5:00:c0:b3:ad:3f:f8:70:55:b9:8b:8b:cb:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:80:EE:50:C4:EB:7B:9F:DD:C8:D2:E2:C7:1D:B8:E1:0C:69:D6
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f01::/48

    Signature Algorithm: sha256WithRSAEncryption
         dc:52:fe:1e:c1:39:4f:50:2c:77:b9:25:b7:af:98:b1:58:89:
         7d:0b:1d:2a:d3:0b:80:72:a8:f3:9e:fa:9b:f7:c8:f4:88:60:
         69:e7:c2:b8:37:ad:33:0f:81:34:28:9c:5a:fe:04:68:a5:44:
         f5:ac:01:42:51:3b:5c:86:ec:cf:af:da:83:5d:2b:d6:5b:d3:
         e7:9f:9a:66:8a:3e:6c:1b:28:0f:fe:b3:66:06:4f:41:18:e9:
         74:cb:6f:9a:3f:d8:c3:a6:fb:5d:6b:79:44:7d:66:5d:05:ea:
         9c:4d:22:a8:e5:aa:1b:37:ab:c8:1e:32:38:64:e0:98:d8:cc:
         79:04:86:0a:39:c3:2a:6d:3c:13:a7:41:bf:95:8f:d6:71:51:
         e3:cd:ba:8f:13:19:ec:56:32:34:36:d6:08:e7:7d:10:09:88:
         1b:f6:c3:80:73:cb:a0:cc:38:52:d7:ec:11:e2:ea:ec:37:53:
         70:b2:91:60:92:ee:72:41:72:e3:72:26:93:04:e8:03:fc:37:
         14:64:38:8d:19:56:ba:b0:3a:a3:86:1e:16:b5:d2:fd:87:89:
         28:b3:74:62:bb:be:a0:3b:7d:a2:5d:af:9b:d5:5f:c5:20:9f:
         10:92:ff:8b:a6:16:b4:38:45:0c:b5:f9:b0:5c:77:01:0a:8e:
         be:e9:19:46
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUKP2JPfS3InlBUeKmJCFURFscIK8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMTI2OGY1ZjU3ZTkzYzU0ZGY3ODk0Y2Nl
NzY4YmJiNzY3MzBhNjIxMTEwHhcNMjQwMTMxMTUwNDQ3WhcNMjUwMTI5MTUwOTQ3
WjAzMTEwLwYDVQQDEyg1QkVBODBFRTUwQzRFQjdCOUZEREM4RDJFMkM3MURCOEUx
MEM2OUQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fPQlTNNHTgP
xWp3HC8EtQn4YT70CQcdBuRsVEIaWWXUCZwtMASnGX1anvsxqAtV1NC800Td6HjM
lZN8QC4ZTYi0cFnzgp+ARlDOe/GNCw9fn+7D46nlF+sb92fh/lbwIcVCjMhq2eGW
aFAVavvy9staBH6KruYjrz+MiQ3g5OkPk1RVqy64o2H5tQ1xCXYpvK3zDzwMgVOy
KYfmT8b7iMRn2p/G7kWmETt1Q+bFMN1mHYqAQlqcLfxhG4KExI07eRbudq04edrp
32SuI3LKaFA/cVskS9KxF7ci5nvs8OTWs+Fq0nCEZDwLShWfk74JaqUAwLOtP/hw
VbmLi8vndwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFFvqgO5QxOt7n93I0uLHHbjh
DGnWMB8GA1UdIwQYMBaAFHSPAlxqJIcngFWZHMFpXiz+Rq5ZMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAyMjliYzExLWRjMGMtNGVlNS04Mzhk
LTA3NzY5NjIyM2U3NC8xLzc0OEYwMjVDNkEyNDg3Mjc4MDU1OTkxQ0MxNjk1RTJD
RkU0NkFFNTkuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNmNlNDA4ZC01NTgxLTQ4M2QtOTBiMy01
MTE5ZmM4MzAwNjQvMDEyODZkNTQxMTI2OGY1ZjU3ZTkzYzU0ZGY3ODk0Y2NlNzY4
YmJiNzY3MzBhNjIxMTEuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH
MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzAyMjliYzExLWRjMGMtNGVlNS04MzhkLTA3NzY5NjIyM2U3NC8xLzMyMzYzMDMy
M2E2NjYxNjEzNTNhNjYzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzOTM5
MzUzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAJgL6pQ8BMA0GCSqGSIb3DQEBCwUAA4IBAQDcUv4e
wTlPUCx3uSW3r5ixWIl9Cx0q0wuAcqjznvqb98j0iGBp58K4N60zD4E0KJxa/gRo
pUT1rAFCUTtchuzPr9qDXSvWW9Pnn5pmij5sGygP/rNmBk9BGOl0y2+aP9jDpvtd
a3lEfWZdBeqcTSKo5aobN6vIHjI4ZOCY2Mx5BIYKOcMqbTwTp0G/lY/WcVHjzbqP
ExnsVjI0NtYI530QCYgb9sOAc8ugzDhS1+wR4ursN1NwspFgku5yQXLjciaTBOgD
/DcUZDiNGVa6sDqjhh4WtdL9h4kos3Riu76gO32iXa+b1V/FIJ8Qkv+Lpha0OEUM
tfmwXHcBCo6+6RlG
-----END CERTIFICATE-----
Generated at Fri Oct 4 05:25:21 2024 by rpki-client on console-ams.rpki-client.org