Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a33303a3a2f34342d3434203d3e203133383532.roa
File:                     323630323a663766663a33303a3a2f34342d3434203d3e203133383532.roa (raw, json)
Hash identifier:          XRpSV8mM/ikvrI3omBv7quv/dtlqd32U3vh8DXt5/ow=
Subject key identifier:   EE:BC:04:28:28:68:0D:81:FB:8A:C1:DB:92:28:97:7E:5E:1F:12:84
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       4BD2FDA2E1A3BB7187B4BA300302CB57D6DB17E5
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a33303a3a2f34342d3434203d3e203133383532.roa
Signing time:             Tue 24 Sep 2024 05:52:43 +0000
ROA not before:           Tue 24 Sep 2024 05:47:43 +0000
ROA not after:            Tue 23 Sep 2025 05:52:43 +0000
asID:                     13852
IP address blocks:        2602:f7ff:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d2:fd:a2:e1:a3:bb:71:87:b4:ba:30:03:02:cb:57:d6:db:17:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 24 05:47:43 2024 GMT
            Not After : Sep 23 05:52:43 2025 GMT
        Subject: CN=EEBC042828680D81FB8AC1DB9228977E5E1F1284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:ef:25:93:db:15:aa:7e:79:86:c3:f7:e3:
                    00:4f:b3:fe:39:f1:0f:29:ab:6c:e9:01:d5:33:fe:
                    79:91:eb:42:6c:c8:7b:94:97:d2:78:73:55:4b:3e:
                    66:53:17:56:68:10:18:36:73:1a:ea:07:91:65:36:
                    de:b7:ad:0b:d6:89:11:c4:8d:7d:f7:ad:8c:14:71:
                    c1:7e:b0:c3:9f:d3:b6:d5:48:01:0f:d6:07:de:43:
                    cd:bc:82:bd:2f:16:01:63:7a:9f:8b:af:69:3f:71:
                    ff:b8:c1:9b:2e:6f:7c:18:ad:17:39:05:a6:63:c4:
                    65:6c:dd:ee:df:62:2a:3e:f3:b6:de:98:3b:28:10:
                    f2:23:b3:eb:1d:3f:c1:84:d9:04:ce:bb:f3:2e:9b:
                    c1:b8:04:87:41:01:b8:9d:dd:de:51:c8:b9:08:64:
                    c0:d4:83:44:18:f3:53:65:92:bf:1b:bd:8f:18:6a:
                    e7:9f:d0:25:5d:3f:63:08:00:04:6c:52:dd:97:90:
                    b7:b4:9f:e3:a3:bc:40:cb:41:1a:df:dd:4a:3f:70:
                    b4:86:e2:75:fd:f7:ab:87:c8:56:2b:dd:3b:69:55:
                    77:f8:d7:af:99:0c:a6:53:a7:71:42:29:92:03:71:
                    4a:54:4d:ba:d9:f1:5b:4d:fe:96:f8:73:00:f0:f1:
                    c1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BC:04:28:28:68:0D:81:FB:8A:C1:DB:92:28:97:7E:5E:1F:12:84
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a33303a3a2f34342d3434203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:b0:82:d5:7e:a3:aa:ee:4a:2a:ce:6e:26:ab:78:26:59:cc:
         a8:22:fe:ab:57:41:00:df:6b:08:a7:7f:72:f9:67:aa:d2:b2:
         b4:01:d6:1a:3d:75:47:70:7a:15:5b:56:0a:09:51:f2:eb:2b:
         88:63:03:37:80:e5:84:9a:d7:35:2f:80:7b:ee:c6:5f:01:59:
         48:18:f9:7a:de:d9:0e:53:6e:03:de:d3:ee:b1:e4:b3:63:43:
         7b:55:d2:47:19:83:d6:40:5a:45:d9:0e:16:5d:2a:42:6b:12:
         e1:d9:21:ac:10:ba:bf:c4:a9:55:fe:16:9b:15:d7:20:a7:08:
         ca:10:08:83:c9:8a:bb:79:24:bb:1c:79:4d:bf:ae:b4:97:17:
         49:bc:77:f3:f1:67:66:5c:1b:88:26:02:44:bc:23:51:a5:d0:
         66:63:37:4b:e8:3a:2f:d0:5d:7a:08:99:1e:39:1b:f5:4d:f7:
         6e:50:1a:8a:38:ee:a8:8c:2d:4c:7e:31:55:78:8a:06:61:40:
         27:c4:02:c4:5e:2d:fb:97:4f:8b:e3:6a:88:3c:5a:53:8f:20:
         7f:ce:3a:d5:3d:b8:41:ff:28:fb:8d:a5:1f:75:99:d3:07:a3:
         b1:1f:68:29:4c:44:93:2f:92:f8:7d:a3:1e:5c:ff:62:39:4b:
         ea:9a:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:56:30 2024 by rpki-client on console-fra.rpki-client.org