Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57110.roa
File:                     AS57110.roa (raw, json)
Hash identifier:          A2m19QFSbKBhoS/f9tRoo4171ovM+8Id3E/ZA5t1U04=
Subject key identifier:   DC:B3:AD:C3:4A:51:4B:A9:1E:6C:5A:7D:23:82:18:AF:29:91:4F:1B
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0F1DC3FDFF89CD9A3A2928C1BDFE1A253EE5EF9F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57110.roa
Signing time:             Thu 29 Aug 2024 03:41:12 +0000
ROA not before:           Thu 29 Aug 2024 03:36:12 +0000
ROA not after:            Thu 28 Aug 2025 03:41:12 +0000
asID:                     57110
IP address blocks:        2a0a:6044:d000::/40 maxlen: 40
                          2a0a:6044:d100::/40 maxlen: 40
                          2a0a:6044:d200::/40 maxlen: 40
                          2a0a:6044:d300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1d:c3:fd:ff:89:cd:9a:3a:29:28:c1:bd:fe:1a:25:3e:e5:ef:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 29 03:36:12 2024 GMT
            Not After : Aug 28 03:41:12 2025 GMT
        Subject: CN=DCB3ADC34A514BA91E6C5A7D238218AF29914F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:0d:a6:f8:66:21:b5:0b:4e:3f:93:f2:6e:
                    00:fb:2c:27:3f:3c:03:b2:8c:6e:64:a0:3c:de:1f:
                    31:07:34:a3:4f:e7:be:7d:61:ff:77:b1:4d:18:9b:
                    9b:45:2c:86:09:38:79:c5:d8:92:45:c7:bc:7d:c3:
                    85:53:a4:42:5e:95:a5:81:cc:4e:6e:95:0a:c5:f7:
                    0f:9e:5c:bd:51:c5:2c:d5:ae:00:82:f0:23:35:a6:
                    fd:3e:d5:ae:be:24:0a:4c:0e:84:b6:d4:3d:a9:4c:
                    ad:90:93:a1:0c:ad:6e:e9:38:0c:ad:63:1d:12:7a:
                    05:a9:1d:84:a9:df:70:a5:a4:c7:b5:8e:4b:a7:f5:
                    fe:9f:c1:95:9e:02:c8:b6:6e:ee:28:12:d3:03:08:
                    43:c9:03:f8:91:c5:76:31:22:8c:5f:1b:20:c9:6f:
                    34:c1:b5:bb:ab:07:9b:df:17:d8:89:f4:64:e0:af:
                    b6:ce:d6:a8:ec:ee:65:21:f5:19:13:8c:b2:00:7a:
                    b9:15:c5:e6:33:c5:aa:7b:5f:94:aa:ea:96:5f:65:
                    34:9d:02:2d:fa:97:79:b7:96:c6:7a:9e:e2:51:34:
                    3c:ad:1a:07:26:48:db:55:2b:51:c2:a5:f8:76:bb:
                    eb:ee:9a:eb:d2:2f:b0:47:a9:19:69:8a:35:28:9e:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B3:AD:C3:4A:51:4B:A9:1E:6C:5A:7D:23:82:18:AF:29:91:4F:1B
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:d000::/38

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:4c:d6:ac:51:99:61:03:23:59:8a:41:ae:b4:12:09:cc:
         66:e5:cf:57:19:8d:2f:3f:c3:20:3b:3f:12:6f:56:28:dd:7a:
         23:63:e8:49:b8:74:25:45:37:7e:cd:53:2f:4d:a5:81:0b:f3:
         eb:22:52:01:30:12:8f:d4:6b:66:05:a9:cb:9e:84:1d:13:d3:
         0a:70:72:f1:fd:15:6b:c2:2e:f3:8b:62:d1:ef:b0:7e:24:ab:
         ed:0a:8f:87:1a:7d:88:4a:ae:7f:9d:67:39:85:62:8f:00:a4:
         7a:66:e5:d8:26:6b:08:37:3d:d6:34:4c:55:0b:08:7a:32:73:
         33:c5:f5:75:e2:cc:ca:2c:56:d4:d5:81:e7:0d:ca:48:9d:8b:
         8d:ee:40:1d:f6:3a:aa:30:2a:34:90:f1:73:bf:02:d1:c4:7f:
         9e:b8:0e:a1:d5:5a:80:2d:62:80:6c:f7:63:ad:12:e2:e8:4d:
         81:7e:5d:dd:6c:1d:98:09:82:8d:30:d4:8d:1f:3b:7a:5b:b2:
         65:cd:37:15:b6:ab:71:90:d7:51:5b:9a:2b:b2:83:6f:5d:c7:
         7d:3d:b4:66:ac:d2:c2:dd:5e:df:c1:92:53:83:fa:80:52:02:
         6f:e2:5c:f9:63:49:6a:06:e8:cd:7e:37:92:b6:25:db:0e:ec:
         dd:32:f8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org