Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          6ZjP/n/SV8wJv/itzH0FAZKFfmnblLQYuHhOFAR029Q=
Subject key identifier:   D7:0B:0D:7D:21:CE:9B:F1:D2:D8:02:D5:45:6C:69:B3:60:80:93:E7
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       5EE68C67040E50C4A375B371AD73DEACC357ADC8
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa
Signing time:             Tue 02 Jul 2024 20:27:47 +0000
ROA not before:           Tue 02 Jul 2024 20:22:47 +0000
ROA not after:            Tue 01 Jul 2025 20:27:47 +0000
asID:                     47272
IP address blocks:        2602:f96d:100::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e6:8c:67:04:0e:50:c4:a3:75:b3:71:ad:73:de:ac:c3:57:ad:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul  2 20:22:47 2024 GMT
            Not After : Jul  1 20:27:47 2025 GMT
        Subject: CN=D70B0D7D21CE9BF1D2D802D5456C69B3608093E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:d4:7c:85:28:78:ed:d4:8e:1f:5c:1e:94:
                    7b:31:c0:7b:4f:4d:e0:5a:06:fa:45:2d:13:28:4f:
                    93:a0:da:3f:ae:94:39:2c:f5:39:d4:38:77:df:f4:
                    f0:6d:31:b8:f2:76:97:3c:91:9a:de:12:f6:15:ad:
                    85:67:1a:2b:3b:2f:2b:20:b0:cb:7d:9f:87:ba:b3:
                    d5:ad:47:3d:80:46:fd:23:79:cb:12:5b:48:d4:97:
                    0e:fd:78:37:12:22:c0:04:7f:55:e0:ee:4e:cc:b5:
                    f3:fa:75:13:2d:4d:11:21:9f:73:4c:02:ae:35:92:
                    89:7f:f2:7d:78:cf:58:3b:ef:65:c2:11:24:3a:cd:
                    43:b5:c8:a0:b5:4b:72:71:65:0b:f2:25:cd:0d:c0:
                    8b:25:d4:88:e0:26:a5:25:88:17:c8:bb:c4:ff:b9:
                    5c:9a:a1:fd:dd:4e:60:3c:f2:6d:72:8b:95:bb:f5:
                    13:6a:31:d9:97:28:41:0a:ce:61:3c:74:79:07:cc:
                    b5:4a:d2:ec:68:86:b1:e7:b3:fa:28:06:e2:ca:a5:
                    ff:84:c8:ed:cd:3f:f9:a9:8d:a5:a0:5a:68:72:c2:
                    78:5f:2e:0e:a1:c1:da:87:93:a0:a7:79:05:b2:78:
                    1d:1e:b5:b1:ae:59:d2:c0:96:ef:00:08:d0:64:69:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0B:0D:7D:21:CE:9B:F1:D2:D8:02:D5:45:6C:69:B3:60:80:93:E7
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:a6:30:ec:0e:22:27:64:49:0c:b8:f7:f7:c4:74:a3:6b:8d:
         fb:fb:75:66:df:69:96:19:73:43:45:80:a1:6b:fc:77:81:22:
         43:b0:5c:83:61:a1:43:14:30:f7:f9:4b:a4:5e:88:ad:29:1a:
         7c:58:a9:5a:2a:02:6b:fa:d7:9e:9b:05:86:80:b5:1f:98:ef:
         0d:0c:89:69:6b:95:c0:09:f9:f1:5a:4c:89:8f:a1:d2:71:74:
         fd:43:e6:ec:57:7a:8c:ce:ed:ab:2a:99:78:42:bf:50:ee:36:
         04:c8:b6:7c:20:c5:81:f1:08:c8:a6:a0:72:e2:51:d2:87:22:
         71:a1:8a:3c:79:fd:fc:5e:86:ad:bc:5c:19:7c:28:8d:62:e8:
         e1:7d:15:6b:88:6e:c3:30:8d:e2:96:96:ce:04:5b:90:08:ce:
         72:2f:66:b4:10:c9:52:ca:de:7d:90:7e:54:29:58:8f:bf:d2:
         24:37:50:d1:59:4e:b2:e8:bc:f4:12:6e:a8:f0:44:68:fa:c4:
         bd:9d:34:22:e2:ba:f6:99:d9:1f:60:d1:1d:8a:a5:55:3e:d3:
         55:d9:8d:15:82:96:88:98:19:4f:fd:90:18:6f:1d:8e:51:b9:
         6b:3b:da:aa:1b:37:3a:c0:83:56:10:1b:93:3e:01:6b:42:8d:
         d0:a4:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:35 2024 by rpki-client on console-ams.rpki-client.org