Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a653663303a3a2f34342d3438203d3e20323136333131.roa
File:                     326130613a363034343a653663303a3a2f34342d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          DAPz+TMcmRQD3OFidgIXIKxvOm5luGBdN2Kc6tmYHK0=
Subject key identifier:   9A:78:50:7D:C9:62:81:13:D2:12:CE:77:A6:12:D2:06:5F:DE:B5:BC
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       6B70533D8B54788A2498BEEA9E26A9102727081A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a653663303a3a2f34342d3438203d3e20323136333131.roa
Signing time:             Sat 01 Jun 2024 20:12:41 +0000
ROA not before:           Sat 01 Jun 2024 20:07:41 +0000
ROA not after:            Sat 31 May 2025 20:12:41 +0000
asID:                     216311
IP address blocks:        2a0a:6044:e6c0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Jun 2024 22:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:53:3d:8b:54:78:8a:24:98:be:ea:9e:26:a9:10:27:27:08:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jun  1 20:07:41 2024 GMT
            Not After : May 31 20:12:41 2025 GMT
        Subject: CN=9A78507DC9628113D212CE77A612D2065FDEB5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:b8:86:7c:22:0d:22:d6:13:31:3b:83:4d:
                    f0:7d:0d:d5:e0:a7:7f:55:16:e3:86:c0:72:fd:ae:
                    e9:84:e1:1f:db:ee:6b:8b:4e:60:0d:f2:3b:54:45:
                    23:4d:e5:18:9f:f6:3c:ed:13:9e:05:f4:46:20:89:
                    8c:a0:f3:73:99:bb:e1:8e:61:5d:e1:52:bc:1a:25:
                    62:e9:f7:82:f4:51:73:06:c8:ad:07:9b:e4:b4:09:
                    b2:f5:9d:9b:d3:75:7f:39:5a:fe:b6:87:c6:f8:c7:
                    0e:21:89:ac:58:46:7b:a2:aa:4a:da:9c:af:79:6e:
                    ed:57:34:9d:ee:72:ad:29:b0:f3:08:76:8b:62:69:
                    74:14:21:9b:11:89:15:d7:2d:b3:02:71:5e:fb:58:
                    3e:f8:98:97:b4:d6:c0:d1:5c:1c:24:88:59:41:5d:
                    42:2d:d8:b4:7c:28:c5:36:a3:24:cb:5c:26:3b:bf:
                    02:27:56:3f:68:c1:44:58:6a:4e:e1:c7:53:75:be:
                    81:5e:31:87:06:97:2c:4c:f8:03:1e:6a:de:7b:6a:
                    9f:ee:f1:0c:5f:39:db:67:12:84:c9:f5:b8:6f:99:
                    73:ed:3a:47:22:87:7c:ac:d0:e5:99:c5:e3:27:47:
                    99:43:0c:87:e6:68:fe:1d:4d:5e:2e:e6:3b:02:0c:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:78:50:7D:C9:62:81:13:D2:12:CE:77:A6:12:D2:06:5F:DE:B5:BC
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a653663303a3a2f34342d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:e6c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:e6:1d:eb:5f:24:9c:f3:67:ac:58:89:97:ea:17:02:5a:22:
         2d:86:d1:77:5f:d6:f3:ef:e9:e8:bd:37:81:46:cb:04:ee:7e:
         33:e4:10:0e:71:8b:ce:82:21:2c:f6:34:eb:3c:32:94:b2:da:
         10:8e:73:fc:e8:53:74:ed:ee:8b:52:75:53:02:ac:0b:75:44:
         5a:f3:59:53:5a:3a:31:2c:05:1c:15:ea:dd:28:a6:ee:75:2a:
         19:d4:1e:80:96:62:01:94:53:13:a5:84:d3:62:f1:81:4e:c1:
         f3:41:47:40:e8:ed:de:a4:62:54:80:e9:50:72:7a:b1:30:d2:
         b5:0a:5b:f2:dc:0d:57:45:f3:1d:67:c0:2b:52:e0:48:7c:1c:
         ed:9e:da:bb:3a:ae:31:f1:94:59:5c:c6:97:1e:c2:2c:36:1f:
         8a:47:d3:e7:c0:65:f2:42:79:38:a0:f3:e6:76:ae:bc:de:b8:
         73:12:67:7f:12:8f:e8:70:27:f6:5b:c9:bf:af:d2:2d:a0:8f:
         bf:fe:5d:80:03:59:eb:78:d3:dd:50:0c:46:99:10:4f:d6:07:
         bb:dc:a0:73:49:56:71:ed:2d:c8:05:f2:b2:c3:e4:52:7e:5a:
         a9:24:07:6c:4c:82:29:03:ac:f1:99:94:9a:e8:74:25:f6:0d:
         82:49:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 07:02:42 2024 by rpki-client on console-fra.rpki-client.org