Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa
File:                     323630323a663965383a3a2f34302d3438203d3e203539393933.roa (raw, json)
Hash identifier:          gsKhYO/cinbR/o1qeO1uQfGRtgmFZcgZYnhAkeVeYnM=
Subject key identifier:   B9:9D:92:7E:48:F3:CD:B8:35:07:E3:B8:34:8B:B3:70:A4:7B:D0:F5
Certificate issuer:       /CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992
Certificate serial:       1995D09DC1545174A6D05F096D601D909FE7A1A7
Authority key identifier: C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa
Signing time:             Wed 27 Dec 2023 13:44:52 +0000
ROA not before:           Wed 27 Dec 2023 13:39:52 +0000
ROA not after:            Wed 25 Dec 2024 13:44:52 +0000
asID:                     59993
IP address blocks:        2602:f9e8::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jul 2024 02:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:95:d0:9d:c1:54:51:74:a6:d0:5f:09:6d:60:1d:90:9f:e7:a1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992
        Validity
            Not Before: Dec 27 13:39:52 2023 GMT
            Not After : Dec 25 13:44:52 2024 GMT
        Subject: CN=B99D927E48F3CDB83507E3B8348BB370A47BD0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:b1:10:7b:e7:76:e4:5c:0c:a0:52:55:4a:
                    e6:7d:2d:21:75:78:6b:0f:d2:20:f3:64:81:50:5e:
                    d0:00:53:31:68:39:05:e3:40:cd:3f:bd:32:47:7b:
                    4d:11:9a:41:86:f7:82:c0:5a:d9:63:bc:25:a0:a4:
                    64:40:9e:6f:ae:ed:ef:be:8b:5d:e8:f3:cd:7c:2c:
                    d2:47:3b:b7:bb:7f:2b:7c:e9:28:a9:14:c7:30:32:
                    75:c3:5c:69:ee:08:c5:bf:4a:ac:5c:8e:b2:47:3f:
                    39:0a:7d:a2:bc:fd:31:be:eb:33:dc:f3:ad:2a:9b:
                    6e:0e:85:ce:5c:48:c7:2c:2e:c3:f6:9f:72:08:8c:
                    d6:71:6b:a7:f5:bc:77:94:7e:6a:4b:d7:16:f4:11:
                    e7:4e:0a:ff:ed:5b:34:90:33:5b:fe:52:d5:7a:62:
                    56:cf:0e:1b:54:0d:8d:21:18:41:32:c3:ef:22:4e:
                    15:f7:1f:52:cc:27:c7:8d:67:11:78:00:fb:0d:73:
                    52:89:01:2f:12:ce:5c:9a:20:f9:72:76:65:fd:6e:
                    eb:a8:5f:d7:f1:a7:46:61:74:87:ed:c3:72:97:ec:
                    0d:dd:8e:7d:81:4e:36:6a:09:d1:44:3f:94:6a:d9:
                    d8:23:69:76:15:44:5d:76:2a:90:67:fa:2a:82:2f:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:92:7E:48:F3:CD:B8:35:07:E3:B8:34:8B:B3:70:A4:7B:D0:F5
            X509v3 Authority Key Identifier:
                keyid:C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/323630323a663965383a3a2f34302d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e8::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:9e:5f:ad:60:7f:fb:31:24:1a:a5:5e:97:c5:77:e9:3c:67:
         72:8a:34:33:3c:99:29:d2:a6:83:2e:32:1d:3f:65:5d:ab:ad:
         5f:e6:87:fe:ab:2b:2b:4f:e3:58:ac:42:bb:02:c4:ba:fb:58:
         22:c8:f0:a5:6e:56:1c:ab:8e:f6:f3:a7:55:f5:01:5c:72:22:
         ef:a8:f7:a1:19:93:2b:5a:b0:1b:e7:aa:2c:5f:d5:b3:b1:1d:
         6d:db:fa:62:b6:f3:94:d9:ce:0f:61:0f:ce:fe:31:33:f3:f3:
         1f:19:de:be:69:81:c5:77:d8:6c:05:16:aa:44:2c:ce:77:fa:
         31:f7:39:92:12:2f:6c:12:d3:1b:97:12:c3:74:08:f0:77:d6:
         8f:c8:23:11:a6:ff:3d:24:b0:24:1a:25:4d:c1:d5:14:dc:65:
         fd:d6:9f:f8:71:78:5e:82:8d:9f:79:bd:7f:62:41:d1:7c:ce:
         9f:de:c8:d0:f4:76:c3:52:f2:76:1b:f0:04:1e:eb:5c:4f:03:
         d0:45:40:c2:50:3e:6f:b8:42:26:40:a1:0c:6a:50:5d:66:e2:
         af:c7:f9:d4:b3:2a:90:c5:46:b2:03:3f:98:48:88:35:f4:df:
         4b:9e:19:c6:e0:a7:3f:b9:4d:a2:c2:99:7d:65:3f:ca:c5:57:
         67:03:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 02:22:23 2024 by rpki-client on console-fra.rpki-client.org