Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS207083.roa
File:                     AS207083.roa (raw, json)
Hash identifier:          SHEvWCgOpVRZDzRua+Ij0dipj1n+kozM3Hiw+3DwgSI=
Subject key identifier:   7F:93:88:F9:BB:ED:6F:60:3C:0E:A0:66:40:BB:B9:48:CC:14:F7:56
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       2A45530ED171C3A640C1E3A1B6E79FEBE30814BC
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS207083.roa
Signing time:             Thu 31 Oct 2024 01:19:40 +0000
ROA not before:           Thu 31 Oct 2024 01:14:40 +0000
ROA not after:            Thu 30 Oct 2025 01:19:40 +0000
asID:                     207083
IP address blocks:        2a09:54c6:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:45:53:0e:d1:71:c3:a6:40:c1:e3:a1:b6:e7:9f:eb:e3:08:14:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Oct 31 01:14:40 2024 GMT
            Not After : Oct 30 01:19:40 2025 GMT
        Subject: CN=7F9388F9BBED6F603C0EA06640BBB948CC14F756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:80:6f:b6:b1:90:ab:16:50:eb:f5:e5:50:
                    a1:e1:b6:a0:91:c8:f8:10:60:04:24:77:e4:ec:08:
                    1e:b2:d0:d3:ae:b5:8f:70:23:75:ef:b2:8e:d2:a7:
                    8d:ce:e3:12:da:35:4e:eb:e6:93:f5:f0:cd:a4:01:
                    38:c0:2e:95:89:72:bd:7e:61:65:82:11:a1:8c:58:
                    35:d9:d2:d4:d9:ce:bd:ca:5a:69:37:ca:96:e0:60:
                    fd:68:56:2a:5d:a1:4c:01:37:8b:44:0b:bf:6a:bd:
                    36:8a:71:24:be:7b:a0:f2:d7:35:e2:87:59:ad:6c:
                    aa:37:2b:fa:38:7e:7c:82:5d:af:f6:1b:58:2b:60:
                    2c:8a:27:70:7b:cb:a1:e1:ef:4a:4a:8f:9c:93:0a:
                    1a:60:2a:1a:4c:17:69:ad:bc:29:20:c2:5a:21:e2:
                    ce:5b:e8:db:2e:45:20:31:4e:38:b4:1c:c1:c5:96:
                    e6:f2:b6:88:86:e7:73:5f:30:7c:2b:97:05:b8:d0:
                    98:49:98:80:a5:de:f6:62:25:b3:01:0b:25:58:44:
                    17:bc:b2:15:7a:05:af:3e:92:53:ba:35:d8:ea:f1:
                    f9:9b:05:58:4e:7c:c1:60:e1:27:d5:9c:99:e9:83:
                    d0:f0:29:9a:fa:91:85:14:f4:fb:15:6e:81:29:53:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:93:88:F9:BB:ED:6F:60:3C:0E:A0:66:40:BB:B9:48:CC:14:F7:56
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS207083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:13:b4:5e:48:60:d2:d5:b9:67:83:0d:ab:59:40:b4:dc:db:
         c6:b7:73:f6:57:24:10:cf:1f:55:d8:3d:4c:b0:3d:65:6f:d8:
         c7:44:81:ba:76:04:9b:38:11:94:0c:9c:72:e4:4e:34:84:3c:
         3f:c8:8f:5d:e1:12:e2:ee:30:01:02:f0:1f:34:52:77:30:06:
         c3:f0:b3:b3:62:5d:00:3d:b5:ba:a6:20:e1:42:5d:69:48:32:
         c3:86:55:1f:5b:01:71:2d:44:d4:ef:81:38:68:e4:33:67:17:
         25:87:24:c5:be:b9:f1:6e:57:99:bf:7b:9b:4b:27:be:86:2b:
         bb:3b:6e:a2:a7:98:cc:73:74:65:90:6b:34:54:fb:63:7e:01:
         08:25:ce:37:26:82:da:60:b9:86:2d:81:b3:64:f5:e4:e8:9d:
         fe:3e:25:fb:99:3f:d3:26:80:93:27:f8:81:b7:0c:ae:ce:41:
         a5:e5:b9:bf:40:f7:df:19:29:99:de:32:dc:73:b3:90:b6:e2:
         de:bc:e7:06:5f:bf:e8:9d:68:a8:28:34:f7:7a:69:18:19:32:
         7e:d7:08:b4:24:1a:0b:e6:c6:c2:3a:60:62:24:24:df:b5:d1:
         f3:60:d7:4e:67:bb:50:69:83:94:77:da:5c:45:14:7b:a4:32:
         7f:4d:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org