Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623161303a3a2f34342d3434203d3e20323136303532.roa
File:                     326130363a313238333a623161303a3a2f34342d3434203d3e20323136303532.roa (raw, json)
Hash identifier:          9emfapEwkoWRCI71XjHMT5+1+rJRPHdAKODZK+ZoYww=
Subject key identifier:   1D:54:25:CE:E6:EB:5F:A4:1E:DA:6E:66:42:C4:E1:BF:44:47:A9:83
Certificate issuer:       /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial:       40CF085ECBDCC5090B1F241ECCEF865BB01F0083
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623161303a3a2f34342d3434203d3e20323136303532.roa
Signing time:             Sun 28 Apr 2024 20:20:18 +0000
ROA not before:           Sun 28 Apr 2024 20:15:18 +0000
ROA not after:            Sun 27 Apr 2025 20:20:18 +0000
asID:                     216052
IP address blocks:        2a06:1283:b1a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 03:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cf:08:5e:cb:dc:c5:09:0b:1f:24:1e:cc:ef:86:5b:b0:1f:00:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
        Validity
            Not Before: Apr 28 20:15:18 2024 GMT
            Not After : Apr 27 20:20:18 2025 GMT
        Subject: CN=1D5425CEE6EB5FA41EDA6E6642C4E1BF4447A983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:1a:cb:78:67:68:36:eb:9a:52:60:13:23:
                    0c:c1:8c:c7:92:36:bc:51:cc:b2:4a:dd:e5:9f:98:
                    52:16:99:46:78:98:ce:47:4b:70:20:b3:3f:3d:58:
                    be:5d:0d:84:0b:22:3e:56:d2:db:18:9f:1b:6f:fa:
                    f6:9e:71:cb:18:c6:c5:e9:a0:34:b1:11:b3:5a:32:
                    df:44:1b:e8:86:25:1a:c0:26:43:24:93:b1:5b:b4:
                    ec:e1:a2:73:d4:0e:f4:54:39:2b:7b:e8:6b:d3:ef:
                    8a:05:7a:c0:f3:c6:39:bc:c0:a7:db:59:1f:c4:07:
                    70:75:be:9c:5b:5d:08:fd:14:b1:f0:6d:57:c2:57:
                    99:62:fd:12:34:35:2c:b9:c5:4f:b0:bf:04:ba:c3:
                    08:ea:ce:cb:67:74:e0:aa:d0:54:33:99:d9:d2:af:
                    8e:6c:17:aa:81:85:8d:22:2a:10:38:86:34:8f:50:
                    7e:9b:5d:e0:59:6b:89:37:db:fc:e8:e5:de:c3:0d:
                    22:af:4e:1b:7f:2c:78:bf:11:30:38:bd:3b:a0:10:
                    b7:13:35:32:25:a9:40:79:9b:9f:25:f2:c5:cb:84:
                    7a:03:4a:e6:92:03:71:b0:c3:c0:ee:f2:7d:80:23:
                    25:d9:a2:0a:fa:36:b4:43:b6:60:51:71:2a:cb:ae:
                    04:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:25:CE:E6:EB:5F:A4:1E:DA:6E:66:42:C4:E1:BF:44:47:A9:83
            X509v3 Authority Key Identifier:
                keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623161303a3a2f34342d3434203d3e20323136303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b1a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:26:69:30:21:6b:7d:ef:90:9f:20:3f:17:b6:13:ba:86:d5:
         0d:93:c9:84:14:ec:2d:e3:f5:46:4b:ae:99:53:87:5e:18:5e:
         89:79:58:45:c8:fe:b1:ce:de:01:a6:6d:3d:b4:1f:6a:87:e7:
         92:c6:21:b3:27:4b:5e:46:51:9c:f7:8d:8d:63:b7:35:b5:19:
         52:f8:4f:b1:d6:3a:61:ca:19:d0:7d:0d:79:89:b0:e8:ad:82:
         5d:3a:ef:ed:9f:94:01:ba:b1:b0:5e:2b:1e:f2:89:06:9c:fb:
         a3:f1:9e:fe:0a:30:80:d7:04:b1:2c:dc:7f:ea:b8:8f:28:6a:
         36:6f:2d:4e:40:79:f3:61:9f:73:cc:bb:c1:22:5f:b8:03:43:
         16:93:ca:64:1b:c6:78:47:1a:21:a3:24:5c:42:6a:7d:6c:85:
         13:ca:dd:df:13:3f:51:6a:78:55:e0:65:58:3a:f6:9f:5f:28:
         3c:9b:26:83:74:66:12:e7:b5:5b:3f:e3:40:4f:ae:85:88:60:
         a3:b9:43:4e:dc:72:66:64:7f:13:82:36:a9:e6:58:59:6a:cc:
         a9:11:7c:e2:9f:71:54:b6:59:4a:30:ff:e9:13:7a:72:60:4f:
         bd:ac:ee:48:76:d7:57:f1:0e:6d:b0:24:9f:38:6f:19:8c:aa:
         96:2c:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 11:42:49 2024 by rpki-client on console-fra.rpki-client.org