Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa
File:                     326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa (raw, json)
Hash identifier:          rAZE9//yPoAByVDr5CEp/aVuGheUYLXQ1N1DkiP6pwk=
Subject key identifier:   02:41:99:97:D3:9B:C4:20:BC:6F:0A:35:A5:21:60:93:FD:3B:56:CA
Certificate issuer:       /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial:       714A07758C7C72E745BF5A39EBFA103FA16F0C2C
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa
Signing time:             Sun 28 Apr 2024 20:16:11 +0000
ROA not before:           Sun 28 Apr 2024 20:11:11 +0000
ROA not after:            Sun 27 Apr 2025 20:16:11 +0000
asID:                     207252
IP address blocks:        2a06:1283:c010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 03:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4a:07:75:8c:7c:72:e7:45:bf:5a:39:eb:fa:10:3f:a1:6f:0c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
        Validity
            Not Before: Apr 28 20:11:11 2024 GMT
            Not After : Apr 27 20:16:11 2025 GMT
        Subject: CN=02419997D39BC420BC6F0A35A5216093FD3B56CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9c:ed:d8:c7:d3:88:49:4e:98:8c:c3:bb:81:
                    09:12:53:3c:f2:24:b0:59:eb:5f:53:d6:76:bb:f0:
                    19:9d:e9:a6:7e:df:6e:92:bb:bc:09:d2:e9:55:83:
                    e3:0c:d7:73:2f:92:84:0a:6f:d3:68:bb:50:5c:82:
                    d5:3c:88:fc:ef:fb:b1:62:85:8c:65:19:3c:8e:6e:
                    71:77:40:8f:10:47:32:7b:b1:52:0f:71:9a:d6:ff:
                    48:81:7f:e2:b2:af:d5:85:a2:2d:66:a8:8b:f5:f0:
                    d9:93:91:ea:c2:88:28:07:b4:f2:4b:ae:b1:cd:84:
                    0e:5e:67:94:a0:0f:b4:07:a1:7a:ac:89:a2:97:95:
                    28:0e:ae:89:49:38:68:36:b1:62:de:64:62:50:de:
                    e9:e9:be:c2:29:f0:84:9b:07:4e:03:cc:fb:71:55:
                    10:c0:b5:17:3c:fd:9a:f7:d6:6e:9a:7a:93:49:0d:
                    7c:ee:9f:a5:a0:a9:c0:35:f5:ce:49:4f:3e:59:bf:
                    53:c2:a0:49:0e:5e:17:88:21:b4:c7:c7:12:a1:04:
                    9d:f2:9c:52:2c:2a:ba:e2:90:05:82:dc:35:0d:bc:
                    a9:ec:1e:eb:7b:49:98:90:38:ef:81:6d:ca:50:96:
                    57:33:02:7e:17:e6:42:77:59:4a:93:ff:15:89:54:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:99:97:D3:9B:C4:20:BC:6F:0A:35:A5:21:60:93:FD:3B:56:CA
            X509v3 Authority Key Identifier:
                keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:31:12:4f:33:ee:99:69:fa:79:83:43:48:77:ec:61:97:
         bf:b4:f1:ca:d3:fa:ff:9e:70:58:0e:ad:24:3c:b8:de:38:c3:
         48:8c:a5:11:ea:f6:06:65:9b:5a:18:8a:70:66:20:e3:02:8c:
         ec:82:a1:5e:a5:f0:3b:7c:8e:5d:a4:07:d0:b7:96:74:4a:ce:
         e1:cc:45:e9:e1:0a:f2:39:51:41:e8:aa:8b:22:7f:ab:19:db:
         d2:02:a8:23:80:6c:a9:41:38:75:6c:19:04:45:21:cc:46:9f:
         d0:3b:29:42:39:09:82:b9:ea:98:37:09:c7:97:8a:02:ae:b9:
         ca:48:f9:36:27:f8:b8:69:4e:19:6f:30:50:57:e9:80:0b:64:
         c3:2c:a9:66:53:a1:5d:a1:3c:c0:e3:82:45:1b:2f:17:a7:c6:
         09:dd:e7:6e:77:01:c7:22:e1:29:c5:62:9d:2c:98:fb:8b:6b:
         5e:5c:78:01:89:c5:68:83:6b:f3:74:60:c4:49:ee:c2:bd:4c:
         5b:d8:53:1b:10:ef:76:bd:16:08:57:c7:cc:d6:76:27:84:49:
         06:59:2d:8c:61:b1:24:aa:67:13:ac:5a:04:fe:36:11:ec:64:
         14:e1:aa:d3:ee:2d:b6:2a:df:59:9c:f5:53:72:b7:d5:b9:92:
         03:88:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:55:37 2024 by rpki-client on console-ams.rpki-client.org