Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          658JQWol8LqzAABSBWGvmZJ1ez22+h6TZ0CclUChVIQ=
Subject key identifier:   19:84:DD:68:CB:C5:5F:FA:CF:DB:3C:CD:B8:CE:B2:F4:F3:E8:3C:A3
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       6F36DB31AD4200F151ACF925FD1E723558D2D56F
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Wed 31 Jan 2024 15:09:50 +0000
ROA not before:           Wed 31 Jan 2024 15:04:50 +0000
ROA not after:            Wed 29 Jan 2025 15:09:50 +0000
asID:                     199518
IP address blocks:        2602:faa5:f04::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:36:db:31:ad:42:00:f1:51:ac:f9:25:fd:1e:72:35:58:d2:d5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan 31 15:04:50 2024 GMT
            Not After : Jan 29 15:09:50 2025 GMT
        Subject: CN=1984DD68CBC55FFACFDB3CCDB8CEB2F4F3E83CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:59:d9:aa:da:d8:39:f0:0e:0f:f5:91:25:
                    36:0a:3b:49:53:c0:fb:89:b0:cf:1d:d0:28:48:db:
                    bd:b6:fe:27:d2:5b:3b:82:28:d6:6f:05:c2:65:84:
                    2a:07:b9:f8:eb:a2:51:bc:6a:44:64:51:63:2e:d1:
                    6a:f6:95:82:21:a5:53:79:ba:b2:24:90:a7:bd:14:
                    2a:d3:8f:5b:d6:34:14:3b:9e:d6:3e:57:a4:91:fb:
                    31:f0:57:d2:bd:51:2d:64:54:29:61:26:d1:19:c9:
                    4f:5c:23:f3:30:c0:7a:d2:3b:d5:8c:9f:55:a4:0c:
                    8e:3d:74:16:98:14:2d:c8:ad:59:70:6d:e7:d5:d7:
                    db:d4:13:6a:6d:61:3b:c9:f1:20:f8:93:5c:cb:69:
                    57:f9:68:7e:d7:6a:07:7b:fd:4d:1d:36:e4:5e:d6:
                    0e:0e:db:a0:e5:0f:f8:2c:4c:5f:a7:8c:ed:0a:37:
                    07:7a:b1:72:6f:52:57:e1:65:7d:b7:94:79:38:35:
                    1e:7f:4f:e2:4c:7e:cf:35:f5:e2:4e:79:da:5c:fa:
                    db:24:3f:44:cb:d2:33:de:e9:f3:c0:14:9e:f1:5d:
                    d2:27:0c:e7:6a:6d:bf:36:85:7e:fc:b9:2c:17:62:
                    57:98:83:16:64:fb:97:a1:13:ea:2c:2b:86:c7:ac:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:84:DD:68:CB:C5:5F:FA:CF:DB:3C:CD:B8:CE:B2:F4:F3:E8:3C:A3
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f04::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:77:a1:40:44:a7:a3:43:d7:08:2e:fa:f0:44:b9:5b:75:
         fc:0a:ad:fe:85:df:b3:7e:49:74:7f:2c:d1:94:51:1f:0e:ae:
         16:07:bc:f7:44:9b:55:4e:0c:b1:34:79:6e:91:06:9a:16:88:
         04:e9:31:31:8b:fc:4b:ff:3e:55:e0:dc:0d:af:5a:8a:48:f7:
         52:a1:db:a4:f1:45:1e:cc:db:92:ce:46:3e:2e:ca:67:e1:6c:
         bd:52:66:e3:6e:86:f9:cf:a7:13:53:03:fa:f7:65:78:af:60:
         aa:26:87:1a:9e:f9:05:7b:91:b2:c2:7a:ac:69:1e:6b:04:6c:
         af:fe:f0:80:5c:5c:07:9a:e0:b3:db:c8:47:a8:77:7c:a2:ff:
         36:e9:99:ae:a1:c0:4f:5a:e2:2b:6b:1d:a3:2f:56:59:3c:71:
         b1:85:37:3b:37:c9:39:4b:dc:89:d3:71:3a:24:b7:0a:64:0b:
         bc:82:d8:30:c2:cc:d0:24:54:d8:a7:f9:b3:f0:77:b5:07:f1:
         38:29:21:b4:ae:03:73:92:d8:ea:d2:30:2a:28:d5:e0:0c:90:
         61:12:5c:a5:ca:5d:be:ef:a8:53:b6:0c:95:0a:e4:b5:b1:38:
         86:05:c3:1e:90:00:35:04:83:76:43:de:a5:9b:5a:33:2d:ec:
         53:71:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:10:59 2024 by rpki-client on console-ams.rpki-client.org