Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa
File:                     326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa (raw, json)
Hash identifier:          8+nSvSNu3nIrfuHkXzI6+AkzfmDyJaH1F7k28HuorTU=
Subject key identifier:   48:8C:4E:5B:E4:2F:0C:C2:96:77:80:86:07:56:72:41:D7:85:54:2F
Certificate issuer:       /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial:       40E73652E67CD674EA09533A2D2A3CFFDDE90CE3
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa
Signing time:             Sun 28 Apr 2024 20:15:58 +0000
ROA not before:           Sun 28 Apr 2024 20:10:58 +0000
ROA not after:            Sun 27 Apr 2025 20:15:58 +0000
asID:                     197634
IP address blocks:        2a06:1283:c050::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 03:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e7:36:52:e6:7c:d6:74:ea:09:53:3a:2d:2a:3c:ff:dd:e9:0c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
        Validity
            Not Before: Apr 28 20:10:58 2024 GMT
            Not After : Apr 27 20:15:58 2025 GMT
        Subject: CN=488C4E5BE42F0CC29677808607567241D785542F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:a4:dd:bd:18:e1:c4:e5:2f:b3:a7:c5:ed:
                    94:2f:bd:ef:c5:eb:55:33:20:67:a7:3d:3a:03:c0:
                    1a:fc:63:08:de:92:cc:b5:77:8e:10:80:df:bd:4a:
                    28:f6:20:40:82:e7:b9:7c:43:fa:0b:22:f5:7e:0e:
                    2f:fd:e5:d6:23:1a:72:2a:3e:5f:d3:6f:34:a6:8d:
                    0a:70:93:8b:8a:ae:80:42:29:29:5d:8a:f6:60:25:
                    d6:fb:d6:5f:46:8d:6c:8d:61:6e:dd:cb:b2:7a:77:
                    4a:8e:0b:39:c7:56:05:f5:ab:dd:35:96:f2:27:ec:
                    90:01:a7:55:4e:13:c6:49:0f:69:84:62:fc:66:f6:
                    66:68:ae:e4:f1:0a:d3:93:87:79:8a:e1:44:4c:65:
                    ac:ea:c7:cf:26:16:cb:a7:01:f3:90:ca:61:2b:3e:
                    8d:27:ed:15:4e:c5:7c:a5:a0:19:b1:51:6e:39:f3:
                    c2:e9:de:70:1a:03:df:44:1c:f7:74:89:16:e5:ba:
                    0f:fa:29:26:af:1f:85:3f:a7:98:79:0f:28:78:9b:
                    73:dc:2a:05:6a:9b:e7:5b:97:5d:aa:c4:7f:4c:31:
                    59:1a:72:f4:7d:66:b0:51:f5:c0:57:2a:b2:09:1d:
                    74:b3:73:9b:cf:d2:e4:f2:35:26:d2:9d:91:53:f7:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8C:4E:5B:E4:2F:0C:C2:96:77:80:86:07:56:72:41:D7:85:54:2F
            X509v3 Authority Key Identifier:
                keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c050::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:93:94:e6:0f:9b:c4:65:32:90:d8:fa:35:7f:58:91:99:e0:
         0c:82:42:ba:de:0b:a6:c1:0f:f5:01:d3:9d:ea:f8:f7:b9:64:
         44:f2:22:5b:2a:9c:3e:67:f7:b6:01:22:07:13:50:3f:39:0f:
         b2:97:02:f5:5a:4c:ec:0f:ac:0a:c0:5b:b8:9c:c3:76:fa:7f:
         fa:11:33:76:5e:74:aa:ef:ff:fc:46:3a:28:17:43:3a:7b:cb:
         4f:02:2b:9e:7a:ee:3b:b3:24:90:8e:78:70:16:ee:41:b3:a0:
         ad:83:19:80:8b:88:ce:24:bd:65:82:49:ee:c2:31:b5:ac:2e:
         11:fb:73:8e:ad:db:ed:bb:b3:92:8d:d5:65:8a:51:bd:a3:2e:
         df:4a:91:84:7f:8a:fc:9e:bd:18:09:04:e9:20:9c:7d:22:8e:
         55:e0:95:5b:c3:fe:c4:74:e7:3b:18:fb:40:b5:bf:9a:5c:1f:
         01:51:0b:df:9e:f0:6a:ee:23:c9:4f:e5:86:56:1d:4a:ac:e5:
         da:a6:09:07:d9:e5:46:90:d6:e9:36:f4:60:28:18:95:87:99:
         b7:e5:d0:23:ee:c7:f6:ec:f7:61:6b:19:c3:54:5c:99:e4:fe:
         cf:41:8c:2c:c3:eb:6c:ba:62:e2:c3:18:81:68:6b:5b:2e:8d:
         af:b0:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 11:42:49 2024 by rpki-client on console-fra.rpki-client.org