Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623333303a3a2f34382d3438203d3e20323132303439.roa
File:                     326130363a313238333a623333303a3a2f34382d3438203d3e20323132303439.roa (raw, json)
Hash identifier:          JWQxvKy68vtg3l2cNy2bC6qNn6zdUNgPb77xRdnYr6Y=
Subject key identifier:   E5:A5:C0:8D:29:F7:7D:AA:23:11:78:4E:3C:31:94:45:96:67:85:88
Certificate issuer:       /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial:       30E9AF74EEA36D8377A95B18CC1051CFC2AE3F43
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623333303a3a2f34382d3438203d3e20323132303439.roa
Signing time:             Sun 28 Apr 2024 20:16:28 +0000
ROA not before:           Sun 28 Apr 2024 20:11:28 +0000
ROA not after:            Sun 27 Apr 2025 20:16:28 +0000
asID:                     212049
IP address blocks:        2a06:1283:b330::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 03:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e9:af:74:ee:a3:6d:83:77:a9:5b:18:cc:10:51:cf:c2:ae:3f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
        Validity
            Not Before: Apr 28 20:11:28 2024 GMT
            Not After : Apr 27 20:16:28 2025 GMT
        Subject: CN=E5A5C08D29F77DAA2311784E3C31944596678588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:96:57:33:bf:a3:68:5f:82:ec:57:74:73:
                    52:ba:8d:7f:6e:d3:7a:f3:b0:46:0a:93:f2:14:e6:
                    60:ab:90:da:56:cc:6d:72:1d:5d:cd:8a:67:8e:12:
                    8f:e7:8e:26:de:f1:ec:50:e5:3a:a3:54:a7:d8:b8:
                    74:d2:2d:8a:50:62:83:fc:c5:76:90:50:26:e7:4c:
                    5f:63:bd:8c:bc:38:cc:5f:ca:08:1f:1b:1c:f1:1c:
                    6c:92:96:d4:4c:3e:84:da:09:7f:16:19:ee:ba:cc:
                    0a:07:f5:06:67:6f:5d:75:8c:4b:7d:d3:7e:4a:19:
                    87:04:d2:bf:63:14:2f:c7:8a:6b:ad:41:91:23:a4:
                    b5:77:29:c5:9e:df:3c:eb:19:82:c4:e8:0d:31:7a:
                    31:e1:db:51:52:2a:16:c1:8c:1b:98:3e:6a:91:69:
                    48:16:df:e4:5f:86:16:47:4c:b3:d0:4f:0d:0a:58:
                    0d:13:be:40:24:ed:23:fa:34:21:8f:42:2c:62:29:
                    cc:ad:b9:e0:f8:68:40:13:2c:65:f3:bd:a4:09:36:
                    c2:0b:58:61:8f:17:69:3c:e0:ba:9d:80:3f:86:52:
                    69:94:fe:e6:90:5b:08:d2:3f:48:bf:60:88:b7:20:
                    e3:fb:3f:e9:55:e2:98:b7:7a:db:18:5f:c8:3e:63:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A5:C0:8D:29:F7:7D:AA:23:11:78:4E:3C:31:94:45:96:67:85:88
            X509v3 Authority Key Identifier:
                keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623333303a3a2f34382d3438203d3e20323132303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b330::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:3a:17:9f:ee:ff:31:a1:84:c7:f4:9d:e3:ec:13:7e:ac:2c:
         d8:9c:07:85:3d:fa:45:df:50:bb:1e:1b:d2:d7:3a:02:45:b7:
         a8:83:16:bf:a5:a2:a5:9e:6b:2e:8f:1c:5d:eb:fa:c1:07:c2:
         4c:74:bc:4e:d9:45:0d:bb:27:98:eb:99:be:87:c1:5f:8a:20:
         a5:cc:9b:62:c2:17:81:2d:09:e8:54:57:ea:51:dd:85:5b:3a:
         35:66:eb:2b:22:dd:17:80:51:2a:52:d1:dd:d7:f9:9c:2d:19:
         48:05:9e:28:27:33:ae:5c:3b:02:fa:95:8e:df:36:51:2d:59:
         1c:46:12:83:0c:7a:be:4f:a7:ab:52:2d:5b:a0:6f:f8:47:aa:
         93:59:5c:a1:7e:4d:34:2c:a0:af:4c:f7:5c:b1:57:8a:a1:4a:
         84:cc:0f:37:23:d5:b1:f2:8b:d0:15:27:d4:aa:9a:66:3d:8d:
         98:58:80:94:b0:30:d1:36:31:17:cd:75:a1:63:7a:6e:27:ed:
         ce:65:72:49:cd:0e:a5:e5:13:69:c6:cc:0a:78:74:ca:d0:7e:
         1d:7c:37:23:ae:28:22:62:ac:78:a0:c5:f4:c1:be:cd:9e:b6:
         49:89:c6:e8:e1:42:ec:b1:f4:15:00:74:87:fb:b2:dd:6f:bf:
         62:3f:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:55:37 2024 by rpki-client on console-ams.rpki-client.org