Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa
File:                     326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (raw, json)
Hash identifier:          edoB1hWqHuxmFEHkxCRYn0isHm/fDv/2a4OmQUGaBa8=
Subject key identifier:   7F:52:46:AF:B8:65:00:8A:10:A2:F9:3A:09:12:FC:A6:4C:EE:1F:E8
Certificate issuer:       /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Certificate serial:       4A7218CBF655822DFC369EF63A41E4A2AA7CD3ED
Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa
Signing time:             Wed 16 Oct 2024 05:24:14 +0000
ROA not before:           Wed 16 Oct 2024 05:19:14 +0000
ROA not after:            Wed 15 Oct 2025 05:24:14 +0000
asID:                     401386
IP address blocks:        2a14:7581:2100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:72:18:cb:f6:55:82:2d:fc:36:9e:f6:3a:41:e4:a2:aa:7c:d3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
        Validity
            Not Before: Oct 16 05:19:14 2024 GMT
            Not After : Oct 15 05:24:14 2025 GMT
        Subject: CN=7F5246AFB865008A10A2F93A0912FCA64CEE1FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:92:c3:22:4e:4c:98:9c:75:ee:e0:12:51:
                    3b:b2:a7:cc:19:26:3e:97:ff:f0:4c:cc:89:76:ad:
                    2f:44:df:c0:ee:f4:7d:a6:53:66:ab:4d:20:6b:4c:
                    e0:0d:c9:92:6f:89:99:c1:e9:73:58:c3:63:15:a4:
                    8b:d0:27:fb:b2:1d:cc:2c:f8:08:d2:b3:f2:d2:ee:
                    10:d5:91:b2:a9:72:9d:20:98:5b:82:47:5f:1e:c9:
                    d0:9b:6f:bf:30:81:b0:ff:9e:ee:f6:0d:22:5f:0b:
                    d0:78:fb:ca:78:8f:29:68:ff:4a:2c:bc:94:c1:37:
                    d9:a7:22:9b:af:cd:c3:0a:7b:da:44:07:75:8b:1d:
                    4d:49:46:f7:ed:5b:f5:ec:cf:95:21:f8:43:55:21:
                    ad:26:02:a4:44:82:e2:81:d5:c1:64:44:e3:c2:d5:
                    7c:bf:ad:8b:c9:aa:13:51:26:4f:7e:54:19:86:33:
                    d2:ef:a0:39:53:58:ee:89:3a:6b:96:34:86:c4:e8:
                    ed:87:81:6d:84:06:f4:6c:f0:36:2c:f2:e3:0c:ab:
                    93:8c:19:0a:aa:35:d9:cf:e6:49:5f:6d:7a:99:ca:
                    24:7b:f2:29:4d:46:40:21:56:11:ad:de:61:7b:83:
                    eb:07:45:4f:d8:28:0d:06:af:37:01:75:c6:d9:a5:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:52:46:AF:B8:65:00:8A:10:A2:F9:3A:09:12:FC:A6:4C:EE:1F:E8
            X509v3 Authority Key Identifier:
                keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:b3:76:2c:67:17:1f:86:96:0d:10:ca:6e:29:9c:1b:d6:
         78:c1:b6:ce:1b:03:9d:e2:66:97:25:ca:4a:29:9f:15:a9:8f:
         8f:88:e0:62:9d:2b:a9:d9:a0:bc:d0:26:ec:1d:e3:e1:28:d2:
         f2:36:1d:1c:6c:09:6f:25:f6:ef:9a:5d:58:52:aa:2a:b2:a5:
         61:f0:2b:34:96:e9:95:32:fd:4a:ef:08:9a:7e:2d:5a:62:32:
         98:d2:1b:da:68:a4:68:c1:86:5f:7c:73:db:92:45:6a:aa:a0:
         e3:3c:2e:59:3d:24:07:b2:28:76:20:04:e7:63:a6:dd:2a:5d:
         d9:c7:5f:3f:b8:a9:4d:35:0d:54:6d:15:88:53:05:2c:5c:66:
         8e:68:f5:ec:97:34:ce:f8:e3:d8:be:a8:46:93:f5:4f:02:a2:
         9e:f3:61:a0:96:e2:ca:cf:a7:5b:14:5e:dd:e7:9d:12:12:2f:
         d4:65:67:3b:50:38:cc:a2:75:b8:14:be:8a:f9:e3:b0:a7:c1:
         ee:34:6b:99:79:92:17:c8:bd:db:bd:48:80:5d:2a:09:1c:91:
         58:bd:be:8a:f5:f8:9f:2f:17:c3:dd:3b:1a:8e:ac:e3:f9:88:
         d8:31:07:ce:04:74:72:55:79:e5:96:33:b4:ea:a5:93:4d:d2:
         60:32:2f:55
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUSnIYy/ZVgi38Np72OkHkoqp80+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVERUQzREVDQjFEQThBNEU2QUFFNjcyNkU4MDU1MzA0
NjA4OUFGRDAeFw0yNDEwMTYwNTE5MTRaFw0yNTEwMTUwNTI0MTRaMDMxMTAvBgNV
BAMTKDdGNTI0NkFGQjg2NTAwOEExMEEyRjkzQTA5MTJGQ0E2NENFRTFGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlJLDIk5MmJx17uASUTuyp8wZ
Jj6X//BMzIl2rS9E38Du9H2mU2arTSBrTOANyZJviZnB6XNYw2MVpIvQJ/uyHcws
+AjSs/LS7hDVkbKpcp0gmFuCR18eydCbb78wgbD/nu72DSJfC9B4+8p4jylo/0os
vJTBN9mnIpuvzcMKe9pEB3WLHU1JRvftW/Xsz5Uh+ENVIa0mAqREguKB1cFkROPC
1Xy/rYvJqhNRJk9+VBmGM9LvoDlTWO6JOmuWNIbE6O2HgW2EBvRs8DYs8uMMq5OM
GQqqNdnP5klfbXqZyiR78ilNRkAhVhGt3mF7g+sHRU/YKA0GrzcBdcbZpROvAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUf1JGr7hlAIoQovk6CRL8pkzuH+gwHwYDVR0j
BBgwFoAUrt7T3ssdqKTmquZyboBVMEYImv0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTI1NDk5NDMtNjQ1Ny00NWUwLWE1NGYtYzE5MzA4MTVi
NmY3LzAvQUVERUQzREVDQjFEQThBNEU2QUFFNjcyNkU4MDU1MzA0NjA4OUFGRC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BRURFRDNERUNCMURBOEE0RTZBQUU2NzI2
RTgwNTUzMDQ2MDg5QUZELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8xMjU0OTk0My02NDU3LTQ1ZTAtYTU0Zi1jMTkzMDgxNWI2ZjcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTMyMzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQz
MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSEwDQYJKoZIhvcNAQELBQADggEBAEa5
s3YsZxcfhpYNEMpuKZwb1njBts4bA53iZpclykopnxWpj4+I4GKdK6nZoLzQJuwd
4+Eo0vI2HRxsCW8l9u+aXVhSqiqypWHwKzSW6ZUy/UrvCJp+LVpiMpjSG9popGjB
hl98c9uSRWqqoOM8Llk9JAeyKHYgBOdjpt0qXdnHXz+4qU01DVRtFYhTBSxcZo5o
9eyXNM7449i+qEaT9U8Cop7zYaCW4srPp1sUXt3nnRISL9RlZztQOMyidbgUvor5
47Cnwe40a5l5khfIvdu9SIBdKgkckVi9vor1+J8vF8PdOxqOrOP5iNgxB84EdHJV
eeWWM7TqpZNN0mAyL1U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:12 2024 by rpki-client on console-ams.rpki-client.org