Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a353a3a2f34382d3438203d3e20323033363139.roa
File:                     323630323a666161353a353a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier:          5Y9xBydPxQh9j6srIY4kMOAOdBqXzpz5tPUGBLm9zUQ=
Subject key identifier:   16:02:8A:65:D8:68:A3:AF:2B:AB:D9:80:0C:21:42:05:29:9E:02:1C
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       09E7077380F5F9413BD05176A813EF25CB68F276
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a353a3a2f34382d3438203d3e20323033363139.roa
Signing time:             Wed 31 Jan 2024 15:10:08 +0000
ROA not before:           Wed 31 Jan 2024 15:05:08 +0000
ROA not after:            Wed 29 Jan 2025 15:10:08 +0000
asID:                     203619
IP address blocks:        2602:faa5:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e7:07:73:80:f5:f9:41:3b:d0:51:76:a8:13:ef:25:cb:68:f2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan 31 15:05:08 2024 GMT
            Not After : Jan 29 15:10:08 2025 GMT
        Subject: CN=16028A65D868A3AF2BABD9800C214205299E021C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:51:90:e8:13:34:f2:50:fc:14:2e:7c:f6:
                    5c:55:bd:c2:54:e1:ba:77:35:54:d4:1d:ad:00:dc:
                    72:7c:aa:9b:01:e2:7e:a7:a1:4b:ab:cd:0f:3e:5d:
                    1c:c7:b6:15:1f:54:79:79:7b:e1:18:4a:46:14:48:
                    dd:65:95:6f:f2:44:22:e3:0d:24:2b:d2:ce:91:12:
                    99:6e:66:bf:89:c2:98:a4:4d:fb:e8:8f:c8:ff:34:
                    6c:90:38:ef:6a:2e:7a:af:08:b2:2b:d2:45:72:7a:
                    63:50:f5:37:65:ea:2c:61:4c:75:a1:df:54:98:8c:
                    43:f0:8b:85:6d:d2:65:48:48:b6:9c:02:c7:64:57:
                    d6:19:d2:c7:11:89:71:b2:d8:b0:51:d2:4d:c2:90:
                    a5:d4:38:1e:d6:0a:da:6e:ee:96:2b:36:c7:85:80:
                    f2:ca:ec:f4:d5:3e:85:f4:f9:58:15:b1:61:85:f9:
                    31:df:5b:ad:bd:ec:d9:1d:0e:45:00:2e:95:b9:07:
                    27:2c:8b:86:3c:42:d0:98:75:7b:ea:6b:3b:0b:87:
                    eb:ec:68:1d:39:98:d5:3f:96:e6:88:12:31:6e:b3:
                    51:22:4f:5f:91:e3:b4:dd:1d:e3:ed:7a:37:ed:87:
                    14:96:94:40:e2:f3:c8:75:93:e3:e6:5e:c5:35:31:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:8A:65:D8:68:A3:AF:2B:AB:D9:80:0C:21:42:05:29:9E:02:1C
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a353a3a2f34382d3438203d3e20323033363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:75:ed:ce:ed:55:fe:17:93:e7:46:46:2d:f8:f1:7b:3c:2a:
         8e:90:d8:26:23:7f:a9:fc:8d:05:6d:6c:0a:6b:d1:e9:71:90:
         43:b4:65:66:c0:46:34:79:3e:96:70:8f:90:fc:59:43:93:f5:
         3d:de:0c:c4:fe:d6:0d:0a:db:9d:9d:60:83:a8:30:80:03:a6:
         6c:6b:66:92:98:2b:b2:98:6d:8c:a4:fd:55:f4:8a:77:6c:e9:
         90:f5:07:08:4f:04:10:e5:c9:da:18:e4:bd:e5:b9:6d:62:54:
         c7:0b:7d:fa:d7:24:b7:35:c5:ef:20:a0:d4:cb:cb:71:78:3c:
         9e:45:61:5f:33:a1:58:db:f9:05:97:f4:f7:4d:ec:3f:f4:fa:
         9b:8c:72:d1:9b:ec:32:ca:50:ce:de:9e:b6:cf:87:a1:6b:90:
         bc:74:81:76:44:81:61:ac:25:b2:2e:69:6b:d1:ab:a0:48:ea:
         cb:c8:e4:3f:0d:0c:7a:d8:0c:70:22:f5:4b:ba:58:32:5f:e9:
         36:9a:b8:7c:64:cc:6d:ad:9b:5e:86:54:6a:2d:d6:19:22:18:
         ec:b7:ea:9b:fe:26:95:fc:8f:15:8d:68:52:b6:ef:9c:fb:82:
         77:b8:99:ce:0b:82:e4:4f:24:84:98:f7:f4:c0:07:f0:56:60:
         9f:42:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:28 2024 by rpki-client on console-fra.rpki-client.org