Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3130303a3a2f34302d3430203d3e20323132303733.roa
File:                     323630323a666161353a3130303a3a2f34302d3430203d3e20323132303733.roa (raw, json)
Hash identifier:          tUmS/Ikz5SneXXY+3B1DuEUIfpNkPWiY0wqmU6H5NL4=
Subject key identifier:   E0:A0:1B:F2:3F:11:86:D2:DB:76:D7:5F:D0:76:47:C6:2A:FC:4E:43
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       1A9F6B5C92B1B748DE909615CD5DB3A417DEB87D
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3130303a3a2f34302d3430203d3e20323132303733.roa
Signing time:             Tue 02 Jul 2024 16:52:44 +0000
ROA not before:           Tue 02 Jul 2024 16:47:44 +0000
ROA not after:            Tue 01 Jul 2025 16:52:44 +0000
asID:                     212073
IP address blocks:        2602:faa5:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9f:6b:5c:92:b1:b7:48:de:90:96:15:cd:5d:b3:a4:17:de:b8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jul  2 16:47:44 2024 GMT
            Not After : Jul  1 16:52:44 2025 GMT
        Subject: CN=E0A01BF23F1186D2DB76D75FD07647C62AFC4E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:0e:d2:1d:ae:88:5e:8d:77:42:a5:47:79:
                    72:dc:14:cc:ac:52:b3:fe:7d:8f:11:d3:0e:b1:20:
                    3f:9a:cf:5d:29:bb:ce:50:e7:41:45:24:b5:45:03:
                    4f:d4:93:50:f7:fa:a2:49:78:8a:ee:14:2b:0e:8b:
                    8a:90:24:92:cb:02:a1:b2:51:38:1e:b0:71:d2:f7:
                    6e:88:b9:43:9d:7a:17:5b:8d:68:6e:10:90:63:8d:
                    0f:12:45:6b:55:f1:36:a6:d5:74:56:33:c7:44:c3:
                    67:2b:f7:63:fc:2b:03:ee:6f:f7:86:43:50:01:55:
                    e4:e9:ef:1a:2b:63:bc:f0:ed:ec:d9:a7:fc:68:8e:
                    66:2b:4e:b1:1c:70:fc:4b:45:36:81:90:95:60:a2:
                    f8:11:fe:2f:ce:53:56:87:88:68:d2:43:4c:a4:00:
                    cc:6b:3a:a6:00:a7:04:c5:94:e1:8b:55:8a:50:f1:
                    3e:27:8b:3b:63:69:65:62:51:c5:26:d2:ca:af:35:
                    f2:ef:7d:a6:a7:52:72:16:4c:e7:0b:49:39:3a:c6:
                    69:6a:f0:d3:49:7f:7f:05:cb:26:6f:88:a8:91:35:
                    ba:cd:4d:d3:07:2e:cd:5c:c0:db:85:7c:79:a4:79:
                    67:e3:4f:86:29:23:1d:74:5d:b7:87:63:63:d6:23:
                    00:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A0:1B:F2:3F:11:86:D2:DB:76:D7:5F:D0:76:47:C6:2A:FC:4E:43
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a3130303a3a2f34302d3430203d3e20323132303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:d8:58:6c:ca:d9:76:00:8e:d4:5b:da:96:56:48:eb:dc:37:
         28:b7:53:81:e8:1d:e9:5b:0a:82:02:07:a2:f5:b0:da:e2:a8:
         f8:7b:c0:e7:53:a4:7c:91:5b:23:95:b3:73:a1:45:69:55:b0:
         69:4b:55:d5:92:9e:f8:38:4b:af:25:3b:bf:07:e8:25:08:e4:
         4d:9a:08:53:b5:12:f0:af:6c:19:72:3b:67:21:71:ae:7e:c9:
         e7:1a:2c:85:8b:a4:44:f9:45:4e:30:a7:10:bb:7b:f3:f6:28:
         26:4a:98:aa:53:55:b8:a9:ff:1b:cd:12:79:03:39:2d:b6:bb:
         e3:a6:ad:f7:03:03:88:c9:eb:a4:89:da:f3:14:46:52:14:e9:
         51:e6:45:bd:7f:f2:b2:7b:84:2c:0b:7d:29:84:fd:92:95:69:
         a6:ee:2d:4c:d5:1e:ab:ae:6d:86:7e:44:af:b8:cb:76:65:86:
         2b:f3:2c:2e:68:47:6e:7d:0c:13:74:36:98:07:c5:c8:a0:e7:
         19:38:db:f3:84:15:00:ee:3d:c0:fa:0a:16:3c:f9:7f:7b:91:
         c0:bc:09:72:58:cf:ca:fa:92:18:c3:53:dc:41:fa:56:75:9c:
         f3:65:19:09:96:22:68:21:12:87:d6:5d:e3:bc:10:6a:59:e9:
         b2:6a:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:15:04 2024 by rpki-client on console-fra.rpki-client.org