Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633037303a3a2f34342d3434203d3e20323136303739.roa
File:                     326130363a313238333a633037303a3a2f34342d3434203d3e20323136303739.roa (raw, json)
Hash identifier:          MMGXe4H0nIBQibneZFPKso4nRpsHuSrqJXdmweft/ug=
Subject key identifier:   C1:F2:D1:B8:DF:DF:84:BC:13:15:60:09:93:A3:28:15:E9:06:D5:CD
Certificate issuer:       /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial:       7782324FE7F3017481E431B21C7C1765F5131436
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633037303a3a2f34342d3434203d3e20323136303739.roa
Signing time:             Sun 28 Apr 2024 20:18:15 +0000
ROA not before:           Sun 28 Apr 2024 20:13:15 +0000
ROA not after:            Sun 27 Apr 2025 20:18:15 +0000
asID:                     216079
IP address blocks:        2a06:1283:c070::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 03:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:32:4f:e7:f3:01:74:81:e4:31:b2:1c:7c:17:65:f5:13:14:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
        Validity
            Not Before: Apr 28 20:13:15 2024 GMT
            Not After : Apr 27 20:18:15 2025 GMT
        Subject: CN=C1F2D1B8DFDF84BC1315600993A32815E906D5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:d7:9d:c8:65:21:a8:5e:df:10:91:f6:ea:
                    69:6a:ef:a5:6c:17:ad:55:2e:a2:e4:9c:a7:e9:2c:
                    07:7c:4f:e4:1a:49:75:4c:db:25:3c:55:28:45:fb:
                    ff:d6:80:af:16:41:23:1e:12:10:54:4e:3a:f3:ea:
                    56:c9:3a:80:e5:6c:14:46:ad:b9:d4:b6:b7:b2:8f:
                    08:9a:a3:a2:40:38:0c:e2:44:37:34:05:3c:99:40:
                    b7:f7:1c:8a:07:9a:f1:e7:c7:07:8b:af:3a:da:d2:
                    cd:f5:de:5d:e8:41:36:eb:f5:de:e0:3e:50:61:b0:
                    63:0c:b7:fd:c0:d9:c5:53:d2:08:ad:bd:f4:92:17:
                    1f:74:c7:88:4c:8a:d1:59:42:1e:50:7f:bd:6d:5d:
                    b1:dd:13:80:12:0f:6e:38:19:59:3d:e4:b8:bd:9f:
                    88:b8:fc:9b:3e:a6:55:4c:43:a8:2e:5f:9c:73:4f:
                    af:60:dd:ae:c9:69:2d:6c:31:c7:47:4e:72:08:ce:
                    e2:33:9b:0d:06:3f:66:76:3a:10:28:cc:50:57:c4:
                    88:72:4e:ed:da:09:a6:c5:83:59:20:3c:2e:51:a3:
                    1c:34:11:51:03:1b:9a:93:ff:2c:74:70:28:65:25:
                    a4:d0:1b:16:f6:30:4b:6d:12:6e:bc:62:30:79:9e:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F2:D1:B8:DF:DF:84:BC:13:15:60:09:93:A3:28:15:E9:06:D5:CD
            X509v3 Authority Key Identifier:
                keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633037303a3a2f34342d3434203d3e20323136303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c070::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:9e:e2:73:be:73:40:87:6a:e7:3d:b2:42:4d:ff:68:33:
         ae:5f:e3:ff:df:b7:e1:8c:56:6a:b9:eb:ad:cb:84:2e:17:53:
         82:a8:35:c4:50:0d:67:73:bf:80:25:42:27:50:7a:7b:24:5f:
         a0:32:c5:4f:f0:5f:f5:c7:fc:91:c3:d4:c0:e4:8e:af:d8:d8:
         1a:f2:5c:b2:d1:bb:1c:34:a8:6c:8f:b5:78:73:00:d0:6c:bb:
         f5:f5:15:40:15:79:93:a2:50:3d:8d:36:bb:33:3c:3a:4e:82:
         ed:c5:1d:07:68:4b:4e:e2:43:e4:97:fd:75:f0:af:6e:1e:8c:
         b5:eb:b4:d2:bc:4a:20:bf:31:bd:29:53:5f:0e:06:70:0d:4e:
         20:34:40:60:37:78:39:25:3f:21:ec:e3:af:dd:d7:a3:fa:ae:
         35:17:55:d5:27:0d:34:54:93:7e:78:32:60:bd:f4:ca:27:94:
         3b:d8:ec:42:e3:65:ff:3a:0e:c9:3c:80:6e:e7:20:4b:74:7d:
         07:5b:5f:2f:0e:6f:d0:2d:4f:87:4c:d8:18:8c:ac:32:2c:6a:
         c7:9d:3f:24:38:22:5d:0d:8c:9a:49:3f:f1:49:f1:57:e4:db:
         93:c6:96:91:89:92:e4:89:10:82:46:2f:a8:fc:9e:4c:2c:72:
         40:e3:d7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 11:42:49 2024 by rpki-client on console-fra.rpki-client.org