Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa
File:                     323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          jdkeCFq6jZpmJyE5tazsE5RQRmAWRpqXKhXFnEyweqE=
Subject key identifier:   B3:6F:04:6B:E4:BD:B3:4C:05:1F:3B:20:91:09:49:BA:DC:9C:89:04
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       20E49F17DBE3A2EA6F4627DBF92EAD0402832041
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa
Signing time:             Wed 02 Oct 2024 20:12:40 +0000
ROA not before:           Wed 02 Oct 2024 20:07:40 +0000
ROA not after:            Wed 01 Oct 2025 20:12:40 +0000
asID:                     13852
IP address blocks:        2602:f7ff:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 Nov 2024 07:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e4:9f:17:db:e3:a2:ea:6f:46:27:db:f9:2e:ad:04:02:83:20:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Oct  2 20:07:40 2024 GMT
            Not After : Oct  1 20:12:40 2025 GMT
        Subject: CN=B36F046BE4BDB34C051F3B20910949BADC9C8904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:89:dc:28:c9:f1:a6:55:c4:9f:3f:7a:5f:
                    87:a2:7e:6c:38:70:80:98:c0:61:91:3e:8c:da:9c:
                    19:bf:2a:88:63:ad:5f:65:1c:2c:8c:11:ad:e3:37:
                    3a:66:21:1c:8b:a7:59:4b:61:68:d7:f2:60:2a:30:
                    16:3e:28:07:c1:a4:ba:11:9e:a3:e8:ac:c7:f6:3d:
                    bc:b5:95:68:0b:2d:c9:c0:cc:12:2e:b5:46:ae:c6:
                    68:22:86:5a:a0:3f:66:25:00:30:31:85:c6:53:97:
                    03:18:1e:af:a8:16:8e:03:56:bc:87:c2:c9:ea:a8:
                    fe:ae:ef:ef:79:6d:63:a3:40:fe:7a:ac:86:cb:78:
                    83:30:75:ea:df:eb:6e:1e:19:7c:13:0f:5c:0f:91:
                    a1:a0:20:58:35:d6:df:ef:87:d0:ac:b9:7e:b2:a0:
                    ae:ce:33:2c:56:b5:9b:60:26:1d:d8:02:dd:b5:f4:
                    3e:5d:00:4f:4f:f7:49:59:17:13:06:ed:b0:75:fb:
                    7d:59:a0:22:49:dd:b1:b9:c7:3d:fc:50:14:f5:20:
                    73:0d:59:00:35:3b:f8:42:43:e9:07:90:f8:dc:8a:
                    8d:29:83:3e:2d:40:b1:a6:b1:4b:2d:a4:e4:97:6a:
                    fa:f0:8e:1e:dd:24:2e:3d:c0:59:9c:b6:3d:23:38:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6F:04:6B:E4:BD:B3:4C:05:1F:3B:20:91:09:49:BA:DC:9C:89:04
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:80:17:bb:cb:a9:30:c4:3e:2f:8e:be:75:44:84:c4:89:07:
         7b:2f:3d:62:f6:3f:bf:d9:ce:80:06:78:d0:ea:a1:a8:a8:b9:
         06:3f:f4:cb:4f:11:35:48:c1:ff:93:f7:ee:bc:a0:44:e6:42:
         ff:1e:00:43:88:8e:c2:d7:c8:26:33:07:81:38:a2:aa:0f:a6:
         8f:11:66:35:cd:e7:5d:9c:84:78:e7:18:b2:8d:68:29:d7:bd:
         19:12:b3:95:ff:5a:38:83:59:a0:ec:17:4d:a9:8e:a6:e8:2b:
         48:15:1b:4d:b1:81:30:40:dc:fe:f7:5e:b8:bf:a4:3b:61:96:
         15:ce:b6:eb:9b:d9:7f:b5:62:6c:40:78:76:c8:a4:c3:68:ac:
         8d:27:9e:8e:2b:02:2a:5b:8f:ab:87:f0:38:c9:a8:7d:f7:72:
         d5:18:7c:db:fd:ea:04:50:3f:5d:73:7a:46:de:dd:f0:fc:7c:
         d1:98:de:e0:5d:4c:08:2a:3e:02:44:e4:ac:70:5c:21:c1:54:
         5f:c9:9e:ea:62:b0:f8:56:df:a0:cc:49:7b:97:6f:4e:e5:5f:
         bf:4d:51:a4:3e:2e:a8:a3:ce:83:47:9d:85:c2:82:27:f3:83:
         ab:93:00:64:da:a6:89:14:cb:ea:a4:4a:58:e8:53:cc:ff:e6:
         e0:51:07:99
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIUIOSfF9vjoupvRifb+S6tBAKDIEEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdl
NjU2NGMxMDJlZTc5OTZjZTgwHhcNMjQxMDAyMjAwNzQwWhcNMjUxMDAxMjAxMjQw
WjAzMTEwLwYDVQQDEyhCMzZGMDQ2QkU0QkRCMzRDMDUxRjNCMjA5MTA5NDlCQURD
OUM4OTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+yJ3CjJ8aZV
xJ8/el+Hon5sOHCAmMBhkT6M2pwZvyqIY61fZRwsjBGt4zc6ZiEci6dZS2Fo1/Jg
KjAWPigHwaS6EZ6j6KzH9j28tZVoCy3JwMwSLrVGrsZoIoZaoD9mJQAwMYXGU5cD
GB6vqBaOA1a8h8LJ6qj+ru/veW1jo0D+eqyGy3iDMHXq3+tuHhl8Ew9cD5GhoCBY
Ndbf74fQrLl+sqCuzjMsVrWbYCYd2ALdtfQ+XQBPT/dJWRcTBu2wdft9WaAiSd2x
ucc9/FAU9SBzDVkANTv4QkPpB5D43IqNKYM+LUCxprFLLaTkl2r68I4e3SQuPcBZ
nLY9Izja5wIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFLNvBGvkvbNMBR87IJEJSbrc
nIkEMB8GA1UdIwQYMBaAFCLsJ7yZl1ND5vJfWkbG5nwoLZbdMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0
LWNjODBkY2EwOTNlNi8zLzIyRUMyN0JDOTk5NzUzNDNFNkYyNUY1QTQ2QzZFNjdD
MjgyRDk2REQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt
NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZTgzZmJmMi1iNjRiLTRjNTUtYmEyOC1j
YTg0YWQwYWY1YWIvZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdlNjU2
NGMxMDJlZTc5OTZjZTguY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUH
MAuGgY9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0LWNjODBkY2EwOTNlNi8zLzMyMzYzMDMy
M2E2NjM3NjY2NjNhMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTMy
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAJgL3/wACMA0GCSqGSIb3DQEBCwUAA4IBAQBDgBe7y6kwxD4v
jr51RITEiQd7Lz1i9j+/2c6ABnjQ6qGoqLkGP/TLTxE1SMH/k/fuvKBE5kL/HgBD
iI7C18gmMweBOKKqD6aPEWY1zeddnIR45xiyjWgp170ZErOV/1o4g1mg7BdNqY6m
6CtIFRtNsYEwQNz+9164v6Q7YZYVzrbrm9l/tWJsQHh2yKTDaKyNJ56OKwIqW4+r
h/A4yah993LVGHzb/eoEUD9dc3pG3t3w/HzRmN7gXUwIKj4CROSscFwhwVRfyZ7q
YrD4Vt+gzEl7l29O5V+/TVGkPi6oo86DR52FwoIn84OrkwBk2qaJFMvqpEpY6FPM
/+bgUQeZ
-----END CERTIFICATE-----
Generated at Tue Nov 12 06:30:21 2024 by rpki-client on console-ams.rpki-client.org