Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa
File:                     326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (raw, json)
Hash identifier:          fpULdXXomBi49YY6WqsyqWL1nOL+0TN0NiWW3AYGJho=
Subject key identifier:   6A:CF:1F:3D:F5:C8:91:91:61:82:4C:E9:5F:09:A3:0A:2B:7C:E6:02
Certificate issuer:       /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
Certificate serial:       6961DF7359A717A3A0A170DC638834C73C453FFB
Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa
Signing time:             Thu 21 Mar 2024 20:58:24 +0000
ROA not before:           Thu 21 Mar 2024 20:53:24 +0000
ROA not after:            Thu 20 Mar 2025 20:58:24 +0000
asID:                     216455
IP address blocks:        2a07:54c7:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 14:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:61:df:73:59:a7:17:a3:a0:a1:70:dc:63:88:34:c7:3c:45:3f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
        Validity
            Not Before: Mar 21 20:53:24 2024 GMT
            Not After : Mar 20 20:58:24 2025 GMT
        Subject: CN=6ACF1F3DF5C8919161824CE95F09A30A2B7CE602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:da:8e:8e:11:68:ea:b8:96:63:e0:e4:51:
                    bb:30:4e:94:6f:ef:fd:90:8a:8c:80:bc:78:79:df:
                    51:c8:ab:17:19:0a:1c:8f:6e:7d:43:8e:87:e0:a9:
                    91:d4:e2:9c:5d:4d:d4:ad:29:2f:f1:68:f5:1f:a4:
                    d7:73:86:66:45:46:db:7e:9b:16:1b:1e:72:52:e5:
                    91:12:83:5e:7f:46:a7:39:b9:fc:50:2a:83:88:e2:
                    ab:7e:86:e3:19:fa:a9:d2:1c:10:13:60:9f:99:24:
                    56:3a:c9:6a:d9:17:f6:c0:fd:f4:96:9c:ac:37:ff:
                    d4:b3:5a:26:8a:d9:b6:c9:90:35:a9:dc:d8:b2:e2:
                    6b:bb:b6:cd:f3:ef:3f:0c:25:77:cf:69:e0:6f:56:
                    db:91:20:5c:3a:0c:ac:fb:5a:35:3e:b2:6e:bc:24:
                    4c:95:b3:36:4c:67:20:d0:d3:dd:f3:bf:8c:53:3f:
                    c0:8f:fe:95:cc:b3:8d:7a:a5:bb:6b:3f:40:27:96:
                    ab:cb:f8:f4:a5:87:9f:95:6e:c9:ea:a0:fa:ab:45:
                    c0:24:ef:8d:79:47:80:7c:20:18:ab:9e:2b:e8:09:
                    3d:bf:91:dd:4e:e3:80:fc:a6:7c:55:b9:73:3d:63:
                    f7:0a:3b:f8:06:a3:fb:38:15:3c:e1:72:7e:a2:32:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CF:1F:3D:F5:C8:91:91:61:82:4C:E9:5F:09:A3:0A:2B:7C:E6:02
            X509v3 Authority Key Identifier:
                keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:da:9f:74:da:ba:b2:d8:55:30:ed:90:00:b8:58:72:45:
         45:04:d8:78:58:15:88:ab:10:10:6d:c0:27:29:a5:71:f9:e5:
         3a:6a:a7:29:41:6c:bb:5c:82:1a:c8:6c:07:38:3a:1e:8d:06:
         94:4e:2a:53:a6:3e:cd:b1:3d:d1:e7:a0:b9:60:ba:ce:fa:fb:
         d7:46:90:c0:b2:58:ce:11:e6:fd:8e:0f:fa:e3:84:f2:f7:36:
         ef:4f:8f:62:ad:f9:c5:c3:ed:46:06:c2:c2:b3:9c:4d:3b:9e:
         bd:b0:86:3d:53:23:b8:90:60:a4:00:03:a6:5e:93:9d:8c:48:
         fa:5b:02:0a:b8:5e:5e:41:33:ad:f4:6a:4a:d2:f2:fc:67:6e:
         df:b8:d8:66:d6:eb:d6:07:54:5e:ca:a8:8a:b3:3f:d3:be:ab:
         de:ca:48:32:f9:63:33:db:d1:b3:78:23:dc:c1:48:f4:91:bd:
         35:77:2b:a4:d4:36:8c:cc:e9:6f:a2:40:75:dc:dc:c0:de:06:
         93:24:8f:1a:75:52:84:c8:40:d0:b4:64:0d:97:6a:33:58:c2:
         07:6e:a9:f4:bb:27:bf:6d:84:95:42:bd:bb:14:9c:bd:e9:46:
         a2:b4:87:5f:24:1d:a6:ec:dd:d8:41:1b:fc:2d:a3:64:9a:f6:
         f5:31:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:56:37 2024 by rpki-client on console-fra.rpki-client.org