Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57483.roa
File:                     AS57483.roa (raw, json)
Hash identifier:          8UjnGaYcttrL17b28dt0bVdGAUAmbGExVkFUjNQoNSM=
Subject key identifier:   82:AA:AE:DC:80:CE:23:B7:37:6A:A0:17:BA:F6:0B:43:5C:00:2B:69
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       3EEA97A2848BB720F752F7AAE27AD31DE667D0C8
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57483.roa
Signing time:             Tue 17 Sep 2024 18:36:06 +0000
ROA not before:           Tue 17 Sep 2024 18:31:06 +0000
ROA not after:            Tue 16 Sep 2025 18:36:06 +0000
asID:                     57483
IP address blocks:        2a0a:6044:7100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ea:97:a2:84:8b:b7:20:f7:52:f7:aa:e2:7a:d3:1d:e6:67:d0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Sep 17 18:31:06 2024 GMT
            Not After : Sep 16 18:36:06 2025 GMT
        Subject: CN=82AAAEDC80CE23B7376AA017BAF60B435C002B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:98:bb:26:4f:f0:98:18:07:8b:f1:68:2e:
                    35:77:c6:40:83:13:28:63:09:ae:cd:71:74:bf:53:
                    c7:45:10:73:4e:dc:a2:c5:fe:a6:71:c2:53:9b:e7:
                    fa:e2:9e:57:69:83:98:a4:7b:a6:a1:44:39:7a:ab:
                    ea:e7:cb:21:37:a2:11:2a:51:c7:ed:f2:02:a8:82:
                    c1:54:06:5a:16:af:a7:ae:d7:57:c7:8b:66:06:81:
                    49:c4:ff:7f:da:e0:d9:9c:ce:ce:d9:b3:2b:02:4d:
                    9b:06:d0:55:1d:0a:a9:8c:66:0c:f1:10:b5:54:6a:
                    f3:e6:f1:82:7d:92:7c:d6:6a:88:30:4c:a8:3e:0f:
                    41:08:09:eb:c2:ac:b1:ae:15:b9:3c:b1:61:3c:e3:
                    cd:62:63:05:1c:52:32:77:6a:2b:c9:39:d8:1b:d3:
                    a8:aa:84:11:fd:b9:5e:6e:1e:a2:48:69:a0:c6:75:
                    3f:a2:94:c8:da:e8:ed:f5:ce:fc:21:95:74:07:c8:
                    bf:d8:ec:3e:36:c6:76:cf:40:9c:35:84:9b:9d:35:
                    82:19:6c:42:d2:1c:3d:5f:66:e5:41:c6:95:bf:b6:
                    34:1b:0d:e3:78:0f:b2:bb:83:e1:22:ee:30:8e:47:
                    15:32:4f:ba:ac:8c:5f:d5:90:75:98:a8:ba:42:65:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AA:AE:DC:80:CE:23:B7:37:6A:A0:17:BA:F6:0B:43:5C:00:2B:69
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:e8:8c:c3:b8:49:aa:c3:26:14:57:5b:22:f0:3e:0b:fa:
         f7:cc:be:66:95:ee:24:37:3d:1e:17:35:e2:6f:c8:4a:f7:e9:
         6e:46:c9:19:51:b0:be:ca:88:36:5f:88:d4:1d:b7:06:79:f8:
         4d:e3:9c:d5:e8:5b:1b:0b:be:b3:8b:bf:30:df:e4:3c:fe:c6:
         b4:17:98:88:01:20:c3:fc:08:f3:2f:65:73:9c:fb:9f:57:55:
         d7:0e:4d:4a:b2:93:0d:39:01:69:ba:4f:ce:70:d9:a2:be:1b:
         05:ea:46:ab:8b:2a:d9:46:86:1f:7a:4f:52:6b:2b:91:df:46:
         ba:97:5c:2c:12:af:78:53:04:a4:df:69:c9:85:a3:a7:76:be:
         8a:de:de:90:c4:a2:de:09:04:c6:4a:86:42:fd:c4:db:82:5c:
         4f:f8:de:fe:00:fb:ea:8c:c3:33:f7:02:5a:7c:30:04:db:9b:
         be:1c:d9:ea:17:b6:16:ff:c2:c2:69:6f:aa:bd:7f:99:49:4e:
         ec:66:02:6d:0d:f3:88:31:02:67:20:e2:e0:b6:fa:18:3a:98:
         fa:98:78:79:36:0d:21:c7:93:f4:aa:e2:e0:6a:32:06:9d:cb:
         5b:b5:96:8d:23:79:7d:60:2c:3f:6c:a5:23:06:ca:9d:1a:06:
         bd:43:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:01 2024 by rpki-client on console-ams.rpki-client.org