Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa
File:                     323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa (raw, json)
Hash identifier:          iRujg7GNZHRMOA4fp4OiJ9OlMbooU+3hRMbbYSf3g+g=
Subject key identifier:   17:7D:8A:3F:8E:58:5D:64:79:B4:50:29:43:85:40:49:FC:C5:4C:7F
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       722CF8ADEF6BFA84F422193D86DAEBA5DB964B09
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa
Signing time:             Sun 11 Aug 2024 11:39:40 +0000
ROA not before:           Sun 11 Aug 2024 11:34:40 +0000
ROA not after:            Sun 10 Aug 2025 11:39:40 +0000
asID:                     47272
IP address blocks:        2602:f96d:300::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 21:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2c:f8:ad:ef:6b:fa:84:f4:22:19:3d:86:da:eb:a5:db:96:4b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Aug 11 11:34:40 2024 GMT
            Not After : Aug 10 11:39:40 2025 GMT
        Subject: CN=177D8A3F8E585D6479B4502943854049FCC54C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:a3:25:52:1c:25:af:10:bb:7d:2a:93:5b:
                    6c:7d:7b:37:32:78:fd:0e:2c:9b:af:cb:72:a2:24:
                    e3:6e:8b:04:1e:67:bf:9a:61:03:06:b5:ec:8c:35:
                    e7:18:f3:72:3d:9c:30:56:bd:a4:50:2c:7b:60:8a:
                    e8:2c:52:7b:86:a1:6c:3c:95:77:bd:98:94:83:2a:
                    79:de:ba:0c:ec:0d:5f:ad:63:6d:a1:08:b5:07:3f:
                    dd:93:72:12:5e:02:5d:8a:e8:0b:41:37:0c:4d:06:
                    6d:94:00:93:be:6f:8f:0a:c3:60:b9:91:53:d9:2f:
                    93:25:e5:c3:ce:eb:6a:1e:03:dc:78:e7:1d:6b:3b:
                    15:54:44:a9:52:0a:04:19:e9:d9:ca:5a:70:11:50:
                    13:9a:f5:f1:02:00:12:29:35:f7:9a:12:59:45:3d:
                    9e:61:a9:0a:f8:f0:36:15:00:cd:70:01:fa:4f:23:
                    79:f3:91:d1:a2:36:04:81:1d:cb:13:34:2e:13:f4:
                    33:1c:f0:4b:2a:cc:6f:93:3d:13:a7:00:e2:ac:be:
                    99:76:13:ef:51:ad:89:2a:5d:dc:5b:7e:af:c5:22:
                    00:d8:c3:15:43:07:cc:96:d2:aa:3b:3a:60:64:79:
                    f5:13:6f:44:dd:9b:42:3d:ca:9b:b0:fb:6b:28:b2:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7D:8A:3F:8E:58:5D:64:79:B4:50:29:43:85:40:49:FC:C5:4C:7F
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:62:93:59:71:d9:cf:ff:91:a7:71:64:ad:64:75:28:46:44:
         37:40:a2:7d:ba:94:f8:4b:ed:b0:15:2b:cc:07:e6:fa:e9:1e:
         ce:cb:65:73:15:1c:d1:8f:43:f9:27:2b:c1:61:81:b2:71:0e:
         f3:61:73:55:15:7f:1f:14:70:cb:44:f3:56:58:73:d9:ca:b2:
         72:0e:6f:17:ce:39:06:df:22:b1:9a:41:02:f7:1e:86:b7:92:
         f7:c2:65:47:2b:25:9c:e1:0a:e6:d1:51:b7:db:7a:b9:ec:96:
         87:13:e5:8d:ff:38:77:9c:b4:24:64:7f:08:57:ce:d0:c1:94:
         41:38:03:df:59:e5:21:5b:c9:68:ea:03:61:ff:a8:64:30:05:
         22:10:9b:f3:72:e3:a9:d1:cd:fb:c8:4e:51:c7:06:7b:4d:3e:
         b9:b3:d2:a7:e1:54:f4:49:60:92:a5:a9:8d:73:3c:e6:99:54:
         a6:f6:33:28:79:fb:c2:56:dd:4c:25:02:48:48:9c:ae:e8:b1:
         ee:fa:dc:ce:29:8e:f0:28:74:09:38:ad:e0:54:fa:4b:bc:61:
         62:c5:06:26:8a:e3:09:e5:39:d0:d1:f4:be:ee:ee:3b:70:9a:
         b3:c3:2e:42:83:fc:50:af:4f:c5:6e:e6:50:d9:ef:94:de:75:
         e1:d0:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:24 2024 by rpki-client on console-fra.rpki-client.org