Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623162313a3a2f34382d3438203d3e20323136303532.roa
File:                     326130363a313238333a623162313a3a2f34382d3438203d3e20323136303532.roa (raw, json)
Hash identifier:          +5rrcxggAayVgHZfgjGUTwb0hUJ/1/Im0DSBu6N+TuM=
Subject key identifier:   CD:47:86:D5:8B:45:25:C8:A5:F7:08:A2:F4:58:EF:14:AA:25:32:1E
Certificate issuer:       /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial:       0D1CD46A15764AD70C20AD6D39DB21A2A4530461
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623162313a3a2f34382d3438203d3e20323136303532.roa
Signing time:             Sun 28 Apr 2024 20:20:03 +0000
ROA not before:           Sun 28 Apr 2024 20:15:03 +0000
ROA not after:            Sun 27 Apr 2025 20:20:03 +0000
asID:                     216052
IP address blocks:        2a06:1283:b1b1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 03:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1c:d4:6a:15:76:4a:d7:0c:20:ad:6d:39:db:21:a2:a4:53:04:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
        Validity
            Not Before: Apr 28 20:15:03 2024 GMT
            Not After : Apr 27 20:20:03 2025 GMT
        Subject: CN=CD4786D58B4525C8A5F708A2F458EF14AA25321E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:87:af:51:2c:9b:6b:03:ca:5c:ef:7d:60:
                    ff:59:54:4e:0d:1a:51:06:10:9a:fb:f2:29:8b:66:
                    41:c3:d9:93:f7:d9:08:0b:31:a0:c5:6c:b2:1d:1f:
                    13:92:e7:ad:53:94:cb:8d:5d:6f:02:24:fc:b4:3a:
                    a6:50:93:ee:5c:d4:d8:c4:5c:93:d0:65:c1:d2:57:
                    70:cc:dd:ab:98:9a:73:bb:99:51:4b:c4:11:ba:0c:
                    eb:2a:92:9f:10:4e:d4:4b:42:d6:4b:ef:d0:20:5a:
                    02:61:95:cc:14:f3:67:37:f9:89:82:2d:24:87:36:
                    97:74:14:0f:5f:71:2b:ca:32:27:a5:f4:1b:78:da:
                    0e:2a:dd:6b:ec:cc:fe:fa:7a:4f:88:10:e7:a0:a3:
                    34:2c:37:7f:03:90:1d:a8:4c:11:f0:96:1f:f6:2c:
                    26:1f:03:7f:37:7b:05:53:1b:0a:30:be:9f:1f:ea:
                    61:01:4e:98:09:a0:e0:69:30:76:a3:50:97:8a:62:
                    3b:3a:7c:a3:95:81:e1:8d:ad:f1:0f:17:f3:66:29:
                    18:2a:93:a8:eb:46:0b:20:37:59:e0:73:6e:52:1a:
                    e0:22:3b:2a:26:20:84:49:f7:a5:88:79:b5:fe:83:
                    4a:f9:5e:e4:10:51:f1:2c:6a:2c:24:2b:04:84:df:
                    e9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:86:D5:8B:45:25:C8:A5:F7:08:A2:F4:58:EF:14:AA:25:32:1E
            X509v3 Authority Key Identifier:
                keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623162313a3a2f34382d3438203d3e20323136303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b1b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:21:a7:79:ad:a7:4c:36:43:0d:df:0a:4e:8f:e5:2f:47:7f:
         87:d1:93:0f:a9:9c:b4:0e:56:8e:36:4b:00:18:4c:bb:4e:0e:
         94:a8:9a:ff:3b:f4:5f:27:23:91:be:83:8e:f6:b7:64:42:e3:
         7b:78:73:dd:40:7a:0a:0e:b2:7d:dc:e5:b3:b3:f3:c9:ea:4a:
         51:35:18:e6:a0:bd:d2:60:12:e9:1a:05:36:3e:08:1c:a6:cd:
         64:e3:7b:92:32:cb:25:f0:d9:62:2e:9f:bb:bb:5a:32:19:d4:
         e6:f3:ff:66:d4:2d:f2:e9:d3:44:ca:64:e2:ac:64:2c:2c:c0:
         ab:7d:2c:13:a5:d3:50:6b:ba:53:67:70:bf:17:ba:84:27:db:
         53:61:c3:33:ee:fc:1c:ae:0b:05:c1:e3:a8:a2:ed:61:21:07:
         56:2c:29:11:ce:11:2c:d9:88:8c:65:f5:8a:38:e5:7d:31:4a:
         e6:87:74:8b:0d:ac:6c:c6:49:41:fb:c6:2f:0d:5b:bf:ab:4c:
         a5:98:41:28:15:59:96:ce:cb:51:21:2c:23:48:0d:81:37:1e:
         de:e9:a6:26:3b:ac:0e:80:0e:01:b9:17:36:b7:36:6b:7a:cf:
         ac:0a:7a:28:89:65:cd:e8:06:17:2d:04:e0:28:0a:f4:54:44:
         bf:5c:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 11:42:49 2024 by rpki-client on console-fra.rpki-client.org