Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a3a2f34372d3437203d3e203133383532.roa
File:                     323630323a663766663a3a2f34372d3437203d3e203133383532.roa (raw, json)
Hash identifier:          LDkqFvPL3o/efEjqIiW+FxteB100HkeM92v9RegGzqE=
Subject key identifier:   E8:45:C8:D5:89:78:EF:B8:F4:50:1B:D8:01:97:83:36:E9:3D:CB:BB
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       597FA26342BF35108450B9F0F479E2FA249BC152
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a3a2f34372d3437203d3e203133383532.roa
Signing time:             Wed 18 Sep 2024 06:35:42 +0000
ROA not before:           Wed 18 Sep 2024 06:30:42 +0000
ROA not after:            Wed 17 Sep 2025 06:35:42 +0000
asID:                     13852
IP address blocks:        2602:f7ff::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7f:a2:63:42:bf:35:10:84:50:b9:f0:f4:79:e2:fa:24:9b:c1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 18 06:30:42 2024 GMT
            Not After : Sep 17 06:35:42 2025 GMT
        Subject: CN=E845C8D58978EFB8F4501BD801978336E93DCBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:67:fa:1c:87:be:6d:e2:48:d6:f7:30:47:
                    8b:6a:e7:a2:0b:dd:13:35:f4:5c:da:83:73:a2:06:
                    b3:65:87:e9:ac:3d:5f:5c:07:18:b3:57:c0:75:7a:
                    c6:2b:f4:15:48:b4:ab:0c:d2:54:9a:1e:a1:10:de:
                    90:1e:db:1f:19:e4:8c:11:55:86:38:c0:de:2a:02:
                    97:a0:01:cc:1f:1f:b4:7e:0f:c2:74:5d:c8:cd:19:
                    03:a7:49:68:c1:fc:ce:36:e8:d7:ce:bb:cd:81:3e:
                    2f:40:38:3f:10:0e:c6:eb:88:0d:28:74:78:f4:c0:
                    ce:ef:d6:a3:2b:b1:4a:7c:31:f3:de:f9:97:c9:79:
                    e0:b6:41:94:73:d9:aa:5f:85:98:94:5d:fd:7c:12:
                    84:ba:b3:75:c4:18:5c:21:57:33:a4:fa:87:cf:73:
                    81:59:c2:4b:c2:33:6e:68:06:dc:80:a3:f9:ea:ec:
                    26:b8:b0:b1:61:3e:39:de:f3:1d:d6:ad:64:f6:86:
                    62:02:0a:66:29:ac:d1:d0:c3:a5:ea:a8:12:65:4c:
                    88:7d:b9:75:30:9a:2c:9b:65:db:83:96:d9:90:cc:
                    ee:be:61:a8:ea:59:1c:ca:7d:64:38:c2:0a:6a:2b:
                    28:bb:30:84:a0:da:e4:ca:78:2c:91:36:57:dc:85:
                    97:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:45:C8:D5:89:78:EF:B8:F4:50:1B:D8:01:97:83:36:E9:3D:CB:BB
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/323630323a663766663a3a2f34372d3437203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:7a:23:d8:78:b8:35:96:cb:cc:bf:bd:c7:f4:99:b0:8f:7a:
         48:34:54:7d:22:9b:51:d6:b9:e4:44:f9:7b:38:64:ca:7d:0e:
         aa:a5:a3:ce:8a:42:8b:a8:ee:04:7a:46:06:0a:14:a7:7e:f3:
         54:e8:56:d2:40:0d:9d:8f:5c:f0:b2:89:b7:93:66:b0:30:24:
         fb:cf:35:60:a8:0a:04:8d:e3:44:a2:09:fe:00:82:0b:af:6d:
         7d:8d:2f:54:82:12:10:d1:eb:10:f9:f3:89:8b:24:bb:a3:44:
         b9:47:50:97:a7:a4:1d:33:4d:8a:f1:19:fb:48:6c:2c:31:f9:
         55:ad:e5:7e:37:80:77:7e:81:31:5a:fd:60:d3:4b:89:3e:39:
         ed:8a:be:ce:04:fe:32:22:1a:58:47:82:d0:92:f1:3f:ee:65:
         58:7e:2f:85:7e:2b:62:7d:88:e7:5f:a9:17:30:d2:8b:40:0e:
         d6:7d:c8:db:4c:cb:17:da:8e:f6:8d:85:b3:24:18:02:5a:49:
         e5:35:c2:f1:4f:f0:5e:cb:62:1f:d3:f2:14:ac:42:93:b1:14:
         31:8c:91:1e:20:32:3c:e1:8a:98:2b:87:5f:3e:9c:96:6e:ec:
         62:51:9a:1b:71:00:0b:05:f4:68:64:f7:ee:83:01:b0:0e:b4:
         f3:c8:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:13:10 2024 by rpki-client on console-ams.rpki-client.org