Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa
File:                     326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa (raw, json)
Hash identifier:          6Pt01QxKKDcX9hPmKKZgZ8vubiKWpaORSKSxKXJA7qU=
Subject key identifier:   0F:1B:40:1F:0E:B2:D0:21:98:03:10:C3:A6:AD:17:FC:C1:CC:4D:F4
Certificate issuer:       /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial:       3D0EC1EDCC0BAD3635B6534F90570C6B4B635AAE
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa
Signing time:             Sun 15 Sep 2024 14:36:43 +0000
ROA not before:           Sun 15 Sep 2024 14:31:43 +0000
ROA not after:            Sun 14 Sep 2025 14:36:43 +0000
asID:                     199689
IP address blocks:        2a06:1283:dead::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:c1:ed:cc:0b:ad:36:35:b6:53:4f:90:57:0c:6b:4b:63:5a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
        Validity
            Not Before: Sep 15 14:31:43 2024 GMT
            Not After : Sep 14 14:36:43 2025 GMT
        Subject: CN=0F1B401F0EB2D021980310C3A6AD17FCC1CC4DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:2b:94:62:c6:a9:78:14:a1:22:b0:fb:b0:
                    69:09:53:5e:02:1f:3c:13:58:03:5d:ef:74:89:a5:
                    25:1a:aa:07:c3:51:e7:1c:b0:a0:5d:1c:0e:d2:b0:
                    53:a2:c9:fb:12:e3:d2:69:45:65:85:32:bb:0e:85:
                    a6:a9:68:c5:ee:2f:3c:cc:ae:df:33:c9:0a:e4:9a:
                    e4:54:e1:cf:00:fc:8a:81:ee:25:64:9e:2c:4c:f3:
                    7d:b1:48:0f:57:2e:62:de:f9:bf:e6:bf:c5:72:e4:
                    0d:63:ed:3e:ea:60:96:81:57:aa:89:22:ce:df:3b:
                    ff:36:10:88:0e:43:77:15:54:63:aa:c3:8e:ad:b7:
                    c9:a4:75:4a:fc:df:94:61:35:05:80:f5:9d:a4:d5:
                    17:57:3c:46:3f:f9:0f:97:70:d5:50:8b:60:80:6a:
                    5d:76:30:e8:9a:2f:9c:16:e8:14:eb:4f:75:df:04:
                    ac:66:af:57:e7:24:75:fc:1f:d9:a1:6a:d7:0e:c3:
                    4c:0c:3b:f9:74:95:68:38:51:0c:0a:2e:7f:a2:2c:
                    7e:fd:56:42:49:41:a6:e4:57:35:41:41:03:fd:b0:
                    ad:a7:8c:3a:cc:ad:fa:f7:9d:6a:22:93:85:25:95:
                    52:c3:8c:d1:c4:7e:f7:f5:89:48:59:7b:20:11:f9:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1B:40:1F:0E:B2:D0:21:98:03:10:C3:A6:AD:17:FC:C1:CC:4D:F4
            X509v3 Authority Key Identifier:
                keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:cf:15:d6:7a:f1:d9:d1:9c:f4:ba:77:36:c7:be:d9:8c:88:
         43:b5:59:52:c6:3b:b8:86:1e:12:63:48:8e:b0:44:d6:4b:93:
         6f:da:3e:ec:70:41:e7:66:cc:fd:79:41:09:6c:42:7d:35:82:
         6c:66:a0:03:f4:07:f0:3c:17:6d:0b:23:85:e1:28:90:0c:c4:
         82:37:2e:05:c7:fa:3f:72:3f:e4:48:0c:32:ff:f5:c5:69:7b:
         01:d9:84:95:85:b5:81:13:fd:a2:98:30:bf:16:29:06:20:3c:
         2d:e3:1e:11:94:6f:76:12:ca:e0:99:30:43:71:01:83:80:f0:
         3b:4d:ef:10:5b:eb:41:3a:32:9b:fd:bc:9c:31:63:50:e9:a2:
         e7:a3:74:5d:85:28:5a:95:6d:b6:de:f1:b9:ca:a8:5a:db:19:
         85:df:86:7b:7c:b3:06:e4:81:c3:f3:f9:23:1e:b7:87:0e:f5:
         c6:f0:9c:5f:97:8d:73:b4:43:2a:9c:7e:21:d9:e4:de:b8:81:
         c8:7d:cc:87:85:f1:be:41:cd:ad:ed:f3:54:be:15:52:d8:8a:
         49:e0:82:1d:e1:c5:b0:41:2d:6e:21:2d:40:e1:b7:48:b9:8b:
         ee:63:d5:d7:db:f8:6c:a2:de:76:0c:d6:12:e2:cc:c4:73:d8:
         72:26:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:45:02 2024 by rpki-client on console-ams.rpki-client.org