Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630623a3a2f34382d3438203d3e20313938353930.roa
File:                     323630323a666161353a6630623a3a2f34382d3438203d3e20313938353930.roa (raw, json)
Hash identifier:          Tv9U7/9HDJqPO4i3Fx+WiyAv1EPL9ykcl7xkOKCyZwg=
Subject key identifier:   82:05:D9:1A:D1:CF:EF:44:CB:88:99:78:DC:D7:98:8B:85:41:8F:3D
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       44927398086914932F23E742D721142F42C63D95
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630623a3a2f34382d3438203d3e20313938353930.roa
Signing time:             Wed 31 Jan 2024 15:09:42 +0000
ROA not before:           Wed 31 Jan 2024 15:04:42 +0000
ROA not after:            Wed 29 Jan 2025 15:09:42 +0000
asID:                     198590
IP address blocks:        2602:faa5:f0b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:92:73:98:08:69:14:93:2f:23:e7:42:d7:21:14:2f:42:c6:3d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan 31 15:04:42 2024 GMT
            Not After : Jan 29 15:09:42 2025 GMT
        Subject: CN=8205D91AD1CFEF44CB889978DCD7988B85418F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:15:25:9d:8d:e7:7b:22:64:f7:cf:41:48:
                    e4:03:41:3b:86:31:a6:c8:33:af:10:80:71:c3:23:
                    e6:96:db:7e:90:de:17:29:c7:4c:ea:91:82:a5:25:
                    24:f3:3a:12:9e:53:f0:f1:1c:e8:82:e2:63:0b:26:
                    52:e0:5e:5e:d1:7d:8c:29:70:02:4c:e0:ad:89:fa:
                    f4:78:08:0b:4b:71:bf:63:e3:a3:74:30:dc:14:5d:
                    25:8d:7c:c2:bc:28:8b:52:52:6c:4c:fc:98:ec:d8:
                    13:4d:64:5f:c5:dd:d7:80:02:3b:a1:ff:3c:05:ce:
                    29:02:1b:17:eb:9a:d3:51:48:ed:eb:c9:9f:7c:db:
                    6c:90:6e:f6:d2:db:44:da:de:75:f9:9b:af:f2:f4:
                    44:19:7e:df:5b:34:19:6d:0f:9a:ec:c7:73:69:5a:
                    5b:91:78:47:ca:bc:ca:b6:67:66:2f:6f:45:c5:34:
                    d4:be:e2:49:e6:4c:2c:13:f8:5c:b4:b5:1b:44:33:
                    ed:53:78:c0:c9:a4:34:5f:dd:40:f2:43:7e:da:b4:
                    fd:a0:06:ff:11:b4:57:cf:6a:c0:25:09:1d:be:85:
                    0a:9c:93:80:42:4b:59:a4:95:62:f4:d1:7b:b7:aa:
                    21:0f:d6:6d:70:e7:8e:ef:b1:09:5d:a3:50:3c:bd:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:05:D9:1A:D1:CF:EF:44:CB:88:99:78:DC:D7:98:8B:85:41:8F:3D
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/323630323a666161353a6630623a3a2f34382d3438203d3e20313938353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:86:b2:e0:72:1c:17:3a:c7:ab:cb:89:89:c4:6e:f7:05:
         d3:b9:3c:58:fc:fd:3f:e7:c3:cc:6e:fc:6c:43:72:a4:17:0f:
         81:f4:19:66:02:46:df:9f:aa:64:ca:be:a5:99:e3:61:66:2d:
         55:78:f1:d3:26:03:c7:ce:06:ae:f5:30:1d:5b:73:06:f9:93:
         36:71:db:d6:ce:74:d2:6d:33:4f:77:ed:c7:8a:1b:34:10:99:
         b6:6d:d0:e5:3c:39:21:7c:77:cf:16:db:f2:48:77:d1:79:a2:
         28:45:38:e7:bb:8b:e2:3c:af:6b:19:90:8f:4a:e3:86:ab:76:
         bd:75:6a:87:93:11:69:29:ff:74:39:fd:d6:25:e0:00:b4:f8:
         4c:b1:f6:0d:6d:db:55:29:48:7e:22:e6:b3:1b:f6:8d:ca:b1:
         76:3e:88:8a:42:2e:fe:d1:d1:32:24:2c:2e:f8:8c:7f:7f:83:
         e1:56:06:46:4b:ad:35:96:23:93:69:d4:c3:2b:57:0d:76:05:
         f8:23:28:28:bb:02:38:ed:80:26:1c:6c:95:43:88:47:c1:ae:
         e3:a8:d3:b0:98:89:79:3c:68:1f:97:a6:a2:7d:2c:df:db:15:
         09:5d:e2:e3:10:c6:7c:2a:d3:da:0f:5f:c4:ec:f3:75:86:00:
         d6:e4:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:28 2024 by rpki-client on console-fra.rpki-client.org