Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630373a3a2f34382d3438203d3e203630393030.roa
File:                     323630323a666161353a6630373a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          r9qzd3IzXy8UhGA7UeNLdG6s9JET6OdDYbWpfG6m5kg=
Subject key identifier:   6F:0A:5A:70:F1:A8:21:8E:2D:2B:5A:4B:E2:62:C2:0D:A2:12:A9:62
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       2CC03890C5820E7C5B1262353021AB552D0542A3
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630373a3a2f34382d3438203d3e203630393030.roa
Signing time:             Wed 31 Jan 2024 15:09:39 +0000
ROA not before:           Wed 31 Jan 2024 15:04:39 +0000
ROA not after:            Wed 29 Jan 2025 15:09:39 +0000
asID:                     60900
IP address blocks:        2602:faa5:f07::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Oct 2024 10:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c0:38:90:c5:82:0e:7c:5b:12:62:35:30:21:ab:55:2d:05:42:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan 31 15:04:39 2024 GMT
            Not After : Jan 29 15:09:39 2025 GMT
        Subject: CN=6F0A5A70F1A8218E2D2B5A4BE262C20DA212A962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:e6:4e:ff:5c:47:4e:28:49:9a:4e:64:f8:
                    ba:81:33:4a:3e:7c:ad:37:33:af:bd:39:4e:9b:75:
                    df:8f:aa:ea:07:92:6f:d3:bf:a2:eb:a0:dd:37:00:
                    07:8e:6f:eb:a5:9b:36:0a:f4:12:41:f8:8a:8e:08:
                    07:1a:3d:61:6c:33:13:5d:0d:a2:6e:c1:4e:b8:95:
                    f7:73:07:81:e0:8d:35:d5:72:32:b2:df:35:4c:3d:
                    8b:72:ac:51:2a:78:82:11:b6:6b:98:25:95:bd:80:
                    5b:77:ba:74:72:36:7c:86:13:86:06:2d:0c:77:aa:
                    7a:59:6d:f3:f3:d5:8b:71:39:84:55:24:5c:66:99:
                    44:d7:16:49:0b:6c:39:d3:52:05:cb:bb:c3:a2:e0:
                    23:3d:6e:8d:0c:d6:c5:15:df:78:5b:35:ba:d1:b0:
                    c8:2f:6a:a6:49:a0:28:08:5b:c7:41:6b:1a:dd:89:
                    37:ba:c0:ae:ca:48:1e:a4:3d:2c:bb:21:0f:87:98:
                    7a:ec:f4:9b:c0:89:c3:f0:26:e1:f7:89:45:c8:bf:
                    91:6b:7e:70:ed:45:c1:15:c8:02:13:85:7e:c8:ec:
                    6d:7c:7e:69:a0:17:eb:9e:1a:d8:99:b6:4a:4b:4a:
                    8e:f6:98:aa:1e:5d:9e:11:c7:34:1c:00:a7:2c:9f:
                    ed:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:5A:70:F1:A8:21:8E:2D:2B:5A:4B:E2:62:C2:0D:A2:12:A9:62
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630373a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f07::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:9b:44:d4:1b:ec:10:d5:13:7f:a0:b1:ce:df:18:b4:cb:da:
         88:29:3b:dc:cd:5c:70:1f:f2:00:e7:56:3b:76:64:8b:31:d6:
         ac:e4:05:58:c8:66:74:e2:5f:3a:00:e1:a2:9d:eb:83:fd:47:
         5a:60:8d:f5:e4:b2:5e:4e:e9:4e:d2:74:69:63:31:43:d7:75:
         fb:fe:1f:a6:6e:9f:5f:31:e8:98:82:dd:93:65:a5:40:66:e2:
         ab:50:26:b9:6d:2d:4c:c8:f4:b3:46:eb:17:d2:61:b8:fd:ba:
         df:51:9f:39:19:13:d1:8e:64:14:0e:ef:f0:81:b6:6e:ab:fc:
         91:ce:22:39:13:26:5b:51:77:20:30:24:0b:6b:26:53:af:08:
         38:74:83:dc:31:21:c9:34:ea:8f:45:26:99:d5:15:bd:58:fa:
         f7:2e:c1:93:44:a7:cb:22:00:53:f3:ce:36:90:c7:e8:38:13:
         28:45:8a:85:c3:ee:f6:af:24:53:24:c3:0c:ab:3d:dd:97:f5:
         bc:0f:d3:95:88:fc:95:44:06:ff:0d:2f:01:48:2e:c5:00:9f:
         3e:e5:23:9c:80:bc:0f:e2:85:f0:b4:0b:07:6d:47:2a:8d:0c:
         d2:b8:6e:ee:a2:84:00:5f:30:52:f8:02:e8:59:79:75:f9:ab:
         bb:d1:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 13:26:51 2024 by rpki-client on console-fra.rpki-client.org