Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a37303a3a2f34342d3434203d3e20323135373531.roa
File:                     323630323a663766663a37303a3a2f34342d3434203d3e20323135373531.roa (raw, json)
Hash identifier:          FMLKXgJBfG1dAAJKXhFrC8iIerl7nyzyT/6MRRFKEt0=
Subject key identifier:   E0:4E:C8:C4:FD:1E:A2:F8:AB:85:A9:26:6F:AD:21:EC:7F:63:2E:0F
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       189D6FB9C942A9BD1B7F03BD391F94924CE9DD42
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a37303a3a2f34342d3434203d3e20323135373531.roa
Signing time:             Thu 19 Sep 2024 19:27:49 +0000
ROA not before:           Thu 19 Sep 2024 19:22:49 +0000
ROA not after:            Thu 18 Sep 2025 19:27:49 +0000
asID:                     215751
IP address blocks:        2602:f7ff:70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 21:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9d:6f:b9:c9:42:a9:bd:1b:7f:03:bd:39:1f:94:92:4c:e9:dd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 19 19:22:49 2024 GMT
            Not After : Sep 18 19:27:49 2025 GMT
        Subject: CN=E04EC8C4FD1EA2F8AB85A9266FAD21EC7F632E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:28:03:a4:f8:88:f7:f9:1b:c9:83:1a:54:
                    eb:5e:83:92:e0:70:6c:31:87:ec:8b:77:2b:7f:db:
                    1f:54:ff:e0:e8:31:83:cb:36:dc:cb:21:15:13:bd:
                    d8:97:99:b8:87:a4:0f:61:80:2a:b6:f7:7e:a4:af:
                    94:7a:c2:88:da:01:3d:f7:1f:25:8f:61:fe:03:c7:
                    99:ca:68:2c:60:69:81:95:19:e5:70:44:50:18:8d:
                    f3:48:63:cd:9c:36:25:fb:38:72:94:93:ca:b3:54:
                    e5:62:70:50:4c:db:bf:da:4f:19:24:87:c2:24:3d:
                    39:07:67:73:b0:12:86:09:62:43:d6:96:42:9c:fc:
                    da:69:2f:32:b5:b6:8e:ec:60:7f:5c:6c:90:55:b4:
                    5b:78:c5:68:74:c5:2e:a9:05:e0:3f:01:20:0e:6d:
                    f1:d6:19:99:40:7d:ea:38:c3:22:81:e0:c5:ed:32:
                    99:fb:5c:51:fa:0b:b4:8e:55:ba:df:c9:dc:a1:c7:
                    ce:57:4f:48:5d:2c:6e:4a:c6:82:2e:a0:e4:e1:3c:
                    c6:4e:e6:92:b4:4a:f7:2c:bb:fa:2f:35:cd:6b:ae:
                    f9:06:f0:01:3b:a8:25:97:d9:a1:45:97:75:46:70:
                    0f:cd:71:66:02:94:31:eb:5a:2a:e0:c8:68:d1:b4:
                    45:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4E:C8:C4:FD:1E:A2:F8:AB:85:A9:26:6F:AD:21:EC:7F:63:2E:0F
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a37303a3a2f34342d3434203d3e20323135373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:27:06:51:11:de:64:20:e1:bf:4f:12:36:11:87:09:c5:8f:
         46:54:f2:a2:57:1b:b2:38:01:31:0d:19:a0:f3:bd:ff:bf:ce:
         4b:e8:90:ca:95:1d:8f:16:b4:c0:46:cb:10:bb:f2:c1:df:30:
         15:34:67:00:07:d1:50:07:96:9f:9c:9c:7b:f2:7a:64:e6:fb:
         21:e4:5a:fd:f8:47:03:0c:68:06:a9:84:66:ae:d9:4d:23:1a:
         78:81:5f:f5:af:a6:7f:45:93:90:4c:81:ce:e4:e8:36:97:ba:
         f6:7c:26:d8:00:cc:11:81:9c:93:55:ec:7b:75:c0:db:93:e1:
         e9:48:fa:9c:e9:14:8d:da:ae:f0:b9:27:bc:97:9e:f3:a4:1c:
         6f:9b:23:60:49:eb:4e:fc:59:78:f5:f3:50:40:a8:08:62:3e:
         09:f5:b5:15:93:78:62:77:04:02:e6:60:b3:73:72:3f:2a:4b:
         26:40:c6:4d:16:f3:19:8e:84:80:8d:1c:f1:0c:6a:b6:de:a0:
         cf:da:f4:48:2f:49:08:c5:89:51:7e:7b:ae:af:db:1b:48:41:
         39:cf:64:28:4f:31:76:fc:88:2f:e1:df:b4:a1:44:3f:aa:fd:
         04:5e:bb:6b:11:06:ac:e9:e3:20:9c:73:c4:d7:5b:19:dd:5e:
         9c:10:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:14:27 2024 by rpki-client on console-fra.rpki-client.org