Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215214.roa
File:                     AS215214.roa (raw, json)
Hash identifier:          QwoWRmxAFcow03epHy185YTVZTzMa45Dzfl/q1JdzyQ=
Subject key identifier:   FF:10:1D:77:F2:CF:3A:3C:9C:21:E6:0F:CD:44:70:53:FB:3A:71:39
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3D432F77AA14C30C00D04D766BC8008227F8433B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215214.roa
Signing time:             Thu 29 Aug 2024 03:41:13 +0000
ROA not before:           Thu 29 Aug 2024 03:36:13 +0000
ROA not after:            Thu 28 Aug 2025 03:41:13 +0000
asID:                     215214
IP address blocks:        2a0a:6044:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:43:2f:77:aa:14:c3:0c:00:d0:4d:76:6b:c8:00:82:27:f8:43:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 29 03:36:13 2024 GMT
            Not After : Aug 28 03:41:13 2025 GMT
        Subject: CN=FF101D77F2CF3A3C9C21E60FCD447053FB3A7139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:2d:73:6f:ea:ba:58:b6:b7:e0:6a:9e:a2:
                    f2:fb:b1:fe:a4:b1:b1:4d:98:88:3c:83:35:49:f0:
                    d0:e9:32:74:cf:aa:c0:cd:18:c0:01:7d:43:f4:b6:
                    55:b2:f9:3a:d7:65:db:23:d3:19:64:8f:35:d1:5b:
                    0b:8d:b4:37:e3:22:6f:d3:99:17:1c:17:27:c1:05:
                    6f:cf:32:94:f1:c7:07:88:a5:0c:74:59:dc:52:3e:
                    f3:75:d1:26:50:e1:cd:53:5c:f4:c1:9c:e6:51:09:
                    bb:50:cd:3b:0c:d1:81:00:2b:c7:c6:87:a6:eb:75:
                    ae:91:c6:9f:18:79:99:69:e2:f7:32:c3:38:cb:5a:
                    57:e1:a3:65:f9:a1:80:02:8b:27:42:85:cc:8d:bf:
                    3d:e1:4c:60:66:8e:ff:0d:4f:83:c2:f5:7b:ea:7e:
                    4a:53:59:84:ae:43:ce:c1:4e:df:c9:83:bf:92:a4:
                    9c:c9:25:c9:2e:cd:48:d0:09:a4:7d:9c:74:b0:6e:
                    86:79:a4:bf:c9:b7:25:c4:ff:32:02:f3:11:4a:ac:
                    8f:c3:d1:e5:2d:9b:f8:e7:e9:9f:09:ec:95:a8:d2:
                    13:53:a1:6d:2e:ad:4d:5c:ad:4b:ed:19:66:52:9f:
                    2c:32:c2:3d:55:1e:aa:c5:ca:bd:e6:62:f2:4a:e5:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:1D:77:F2:CF:3A:3C:9C:21:E6:0F:CD:44:70:53:FB:3A:71:39
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215214.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:0c:b1:ec:ce:f9:6d:18:ae:7f:7c:20:fc:a8:8f:79:aa:2d:
         89:42:13:56:c8:82:a1:1e:d7:72:4c:46:af:31:c9:5c:8a:48:
         f5:ad:15:d4:44:e5:a1:06:07:94:09:f2:0a:62:2c:e3:93:76:
         d1:7d:68:e1:c4:7e:c7:1c:69:1c:16:27:ca:ae:74:5b:b2:9e:
         7c:87:cb:88:91:e9:9c:61:88:0d:11:f0:20:12:8e:66:ce:73:
         8d:00:57:30:b9:8c:61:7d:8d:11:8f:4a:eb:81:74:36:80:cb:
         af:97:df:80:f2:c5:db:da:c1:90:f4:60:2d:09:ab:08:34:41:
         0b:8e:57:6f:75:09:0d:77:04:0c:5d:4a:de:1f:15:52:66:d4:
         f2:8f:00:5e:b7:56:b1:5b:a3:83:ea:52:0b:81:16:dd:8b:ed:
         d0:21:b3:58:d3:b0:ce:82:28:21:93:d9:9b:47:bc:c8:05:7a:
         82:4f:c8:61:d5:8e:8e:c6:58:6f:ff:6e:48:9b:75:d8:63:7f:
         f0:91:1a:2e:e3:65:1c:61:8f:2a:f8:a2:4d:98:54:34:e3:bc:
         90:2d:9c:00:18:37:58:6c:8a:45:c6:d4:34:73:09:37:f5:5f:
         75:14:fb:99:d3:46:97:64:f9:bf:51:67:4d:40:6c:46:9f:51:
         a2:f7:22:b7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPUMvd6oUwwwA0E12a8gAgif4QzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MjkwMzM2MTNaFw0yNTA4MjgwMzQxMTNaMDMxMTAvBgNV
BAMTKEZGMTAxRDc3RjJDRjNBM0M5QzIxRTYwRkNENDQ3MDUzRkIzQTcxMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMi1zb+q6WLa34GqeovL7sf6k
sbFNmIg8gzVJ8NDpMnTPqsDNGMABfUP0tlWy+TrXZdsj0xlkjzXRWwuNtDfjIm/T
mRccFyfBBW/PMpTxxweIpQx0WdxSPvN10SZQ4c1TXPTBnOZRCbtQzTsM0YEAK8fG
h6brda6Rxp8YeZlp4vcywzjLWlfho2X5oYACiydChcyNvz3hTGBmjv8NT4PC9Xvq
fkpTWYSuQ87BTt/Jg7+SpJzJJckuzUjQCaR9nHSwboZ5pL/JtyXE/zIC8xFKrI/D
0eUtm/jn6Z8J7JWo0hNToW0urU1crUvtGWZSnywywj1VHqrFyr3mYvJK5cPxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/xAdd/LPOjycIeYPzURwU/s6cTkwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE1MjE0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgpg
RPAwDQYJKoZIhvcNAQELBQADggEBAKQMsezO+W0Yrn98IPyoj3mqLYlCE1bIgqEe
13JMRq8xyVyKSPWtFdRE5aEGB5QJ8gpiLOOTdtF9aOHEfsccaRwWJ8qudFuynnyH
y4iR6ZxhiA0R8CASjmbOc40AVzC5jGF9jRGPSuuBdDaAy6+X34DyxdvawZD0YC0J
qwg0QQuOV291CQ13BAxdSt4fFVJm1PKPAF63VrFbo4PqUguBFt2L7dAhs1jTsM6C
KCGT2ZtHvMgFeoJPyGHVjo7GWG//bkibddhjf/CRGi7jZRxhjyr4ok2YVDTjvJAt
nAAYN1hsikXG1DRzCTf1X3UU+5nTRpdk+b9RZ01AbEafUaL3Irc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:43 2024 by rpki-client on console-ams.rpki-client.org