Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa
File:                     326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=
Subject key identifier:   8E:A6:4A:E1:39:B7:74:F3:12:49:C8:1B:0F:8A:C0:08:B0:CD:5F:68
Certificate issuer:       /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
Certificate serial:       1C63FCE1A09E60BE74D60774A7E446FAF49001A8
Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Tue 10 Sep 2024 19:15:22 +0000
ROA not before:           Tue 10 Sep 2024 19:10:22 +0000
ROA not after:            Tue 09 Sep 2025 19:15:22 +0000
asID:                     200676
IP address blocks:        2a06:a003:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 05:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:63:fc:e1:a0:9e:60:be:74:d6:07:74:a7:e4:46:fa:f4:90:01:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
        Validity
            Not Before: Sep 10 19:10:22 2024 GMT
            Not After : Sep  9 19:15:22 2025 GMT
        Subject: CN=8EA64AE139B774F31249C81B0F8AC008B0CD5F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:72:dd:16:80:7e:64:f6:4e:b7:1a:b3:c4:
                    3b:92:86:a1:b3:ad:e6:94:4f:d6:d1:4d:c9:56:4b:
                    bc:8b:a1:89:4d:f1:3a:32:a3:81:a6:2c:2c:5e:a9:
                    a3:6a:55:82:0b:1a:6a:b0:33:c3:e9:43:1a:ca:36:
                    67:a5:1c:74:1e:ed:53:dd:d2:d5:aa:6e:29:8e:06:
                    c7:e5:c8:1a:b8:ec:f3:cf:55:0e:56:8c:db:b4:6b:
                    e2:5e:f6:df:5d:a4:38:df:b9:ec:5e:1d:3c:70:c1:
                    22:40:ab:8c:12:ba:c7:a9:f6:05:4e:d5:c6:a9:4f:
                    37:43:0f:9f:1e:b6:3f:1f:db:07:d0:29:36:4c:3a:
                    ba:08:11:fd:8d:ea:97:8a:53:df:d4:d5:15:f8:d4:
                    f5:e6:3d:0c:34:f1:aa:15:d4:a9:d6:bc:83:f0:8c:
                    75:2a:dd:29:15:ce:6a:b9:4c:54:6f:60:37:55:50:
                    14:34:ed:c6:60:62:a5:88:00:57:7b:bc:cb:96:20:
                    71:6c:38:e4:bb:7c:9f:a3:dd:e7:c3:31:1d:62:9d:
                    73:0c:b7:b1:fb:71:20:26:4e:f9:09:98:ea:cc:0b:
                    3b:87:fd:93:be:7e:7c:b8:a6:9d:97:c8:67:3c:82:
                    fc:be:16:c4:cd:e4:39:ba:5b:3e:02:3f:62:99:56:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:4A:E1:39:B7:74:F3:12:49:C8:1B:0F:8A:C0:08:B0:CD:5F:68
            X509v3 Authority Key Identifier:
                keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a003:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:12:3b:05:fa:8c:57:1b:fa:ec:1b:88:62:bc:dd:60:85:a2:
         a2:61:0c:98:77:8b:bc:48:86:eb:6f:e7:2e:4d:9a:58:8e:76:
         6d:e1:13:8a:f6:f6:f6:5e:f8:af:b0:5e:b9:0e:c8:f5:88:0f:
         2f:fc:37:d5:2a:15:66:e4:77:36:56:f2:65:40:05:04:e9:5d:
         8f:0c:3a:b3:c2:56:68:10:e1:f3:c4:81:ac:df:a0:ae:f2:db:
         ce:eb:9a:65:d1:11:92:0b:9b:5c:e0:8a:f5:53:5f:be:c4:b0:
         5b:2d:32:86:c5:ef:d6:50:f4:7b:cb:49:03:29:4e:e7:02:40:
         d9:73:86:89:9f:cf:4b:2e:4b:7f:2e:49:91:ff:75:29:a8:4f:
         36:3c:42:7f:34:d5:16:1a:8a:6f:dc:62:09:df:e2:bf:24:6e:
         8d:b7:07:57:a1:fe:92:af:ad:45:36:2b:6e:92:67:88:9f:7b:
         ee:c2:a8:66:c5:69:1e:46:22:a2:c0:3c:d7:de:b2:78:dc:02:
         86:f3:c6:6b:4e:30:eb:ce:9b:e9:ed:2a:c5:41:1c:3a:a9:eb:
         22:53:80:9f:8d:bd:bf:29:e8:ce:11:5b:54:10:c2:92:41:ad:
         30:d7:4b:73:36:ff:bb:e0:97:5b:17:69:12:d7:bf:0b:7d:48:
         60:1f:f2:fb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUHGP84aCeYL501gd0p+RG+vSQAagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz
Rjk1NTFDRDAeFw0yNDA5MTAxOTEwMjJaFw0yNTA5MDkxOTE1MjJaMDMxMTAvBgNV
BAMTKDhFQTY0QUUxMzlCNzc0RjMxMjQ5QzgxQjBGOEFDMDA4QjBDRDVGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH83LdFoB+ZPZOtxqzxDuShqGz
reaUT9bRTclWS7yLoYlN8Toyo4GmLCxeqaNqVYILGmqwM8PpQxrKNmelHHQe7VPd
0tWqbimOBsflyBq47PPPVQ5WjNu0a+Je9t9dpDjfuexeHTxwwSJAq4wSusep9gVO
1capTzdDD58etj8f2wfQKTZMOroIEf2N6peKU9/U1RX41PXmPQw08aoV1KnWvIPw
jHUq3SkVzmq5TFRvYDdVUBQ07cZgYqWIAFd7vMuWIHFsOOS7fJ+j3efDMR1inXMM
t7H7cSAmTvkJmOrMCzuH/ZO+fny4pp2XyGc8gvy+FsTN5Dm6Wz4CP2KZVh77AgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUjqZK4Tm3dPMSScgbD4rACLDNX2gwHwYDVR0j
BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1
Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1
NTFDRC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYt
MzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3LzEvMzI2MTMwMzYzYTYxMzAzMDMz
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMDM2MzczNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoGoAOwCzANBgkqhkiG9w0BAQsFAAOCAQEAUxI7BfqMVxv67BuI
YrzdYIWiomEMmHeLvEiG62/nLk2aWI52beETivb29l74r7BeuQ7I9YgPL/w31SoV
ZuR3NlbyZUAFBOldjww6s8JWaBDh88SBrN+grvLbzuuaZdERkgubXOCK9VNfvsSw
Wy0yhsXv1lD0e8tJAylO5wJA2XOGiZ/PSy5Lfy5Jkf91KahPNjxCfzTVFhqKb9xi
Cd/ivyRujbcHV6H+kq+tRTYrbpJniJ977sKoZsVpHkYiosA8196yeNwChvPGa04w
686b6e0qxUEcOqnrIlOAn429vynozhFbVBDCkkGtMNdLczb/u+CXWxdpEte/C31I
YB/y+w==
-----END CERTIFICATE-----
Generated at Sun Nov 24 14:06:20 2024 by rpki-client on console-ams.rpki-client.org