Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3930303a3a2f34302d3438203d3e203437323732.roa
File:                     323630323a663936643a3930303a3a2f34302d3438203d3e203437323732.roa (raw, json)
Hash identifier:          6FU0wv3D/IsFVQ2jtJYg8ZHC2qkQqDyXS+V84jg6PIA=
Subject key identifier:   6E:9A:B4:60:A3:3E:3A:1C:24:D3:A1:A3:9F:51:02:DC:01:C6:B6:A3
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       58D208FBD4E199B4B74B8E4F34A1216D41A09EC4
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3930303a3a2f34302d3438203d3e203437323732.roa
Signing time:             Sat 21 Sep 2024 03:25:05 +0000
ROA not before:           Sat 21 Sep 2024 03:20:05 +0000
ROA not after:            Sat 20 Sep 2025 03:25:05 +0000
asID:                     47272
IP address blocks:        2602:f96d:900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d2:08:fb:d4:e1:99:b4:b7:4b:8e:4f:34:a1:21:6d:41:a0:9e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Sep 21 03:20:05 2024 GMT
            Not After : Sep 20 03:25:05 2025 GMT
        Subject: CN=6E9AB460A33E3A1C24D3A1A39F5102DC01C6B6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:cc:1b:20:09:52:82:21:30:82:a1:71:37:
                    94:77:a4:6b:dc:cc:e8:ba:05:fa:88:d7:ce:f1:ec:
                    ab:06:64:b3:a8:dd:1b:f5:51:e8:55:e4:5a:ed:c9:
                    43:be:b3:77:c3:e6:33:b2:02:d0:75:b9:2c:ef:56:
                    cd:39:aa:54:75:61:95:64:b2:19:ff:9d:8f:95:6a:
                    09:c1:73:0a:84:3c:b7:c1:f7:25:cd:9f:81:23:72:
                    6b:ff:21:db:31:25:5b:d4:bc:2f:20:d3:52:73:4c:
                    d1:5c:13:6b:77:03:34:b3:d0:07:71:51:3d:5e:3e:
                    a9:34:45:c4:6c:2f:66:ea:3e:2a:d2:ef:f0:b0:3f:
                    d1:6a:cc:74:ed:38:8f:96:fa:5d:36:43:14:f1:a5:
                    f6:0d:14:40:a2:c9:01:fd:70:db:9a:66:09:2d:e2:
                    73:dd:c8:c3:73:c5:bb:86:48:c0:3b:be:f0:b5:99:
                    95:e7:c1:78:18:73:5c:82:7b:82:d8:b1:0d:d7:58:
                    ab:80:f5:71:22:de:c9:a5:55:7d:4b:67:48:68:73:
                    be:3c:a3:cf:4c:26:c5:0b:7d:e2:89:fe:cc:32:4a:
                    18:fb:ba:8c:d5:b2:14:70:99:9a:c9:f7:a3:97:27:
                    3e:37:19:6a:25:46:d5:b9:84:2e:1a:66:e6:cd:5a:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:B4:60:A3:3E:3A:1C:24:D3:A1:A3:9F:51:02:DC:01:C6:B6:A3
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a3930303a3a2f34302d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:44:5b:c6:24:67:a9:3c:0d:ed:5e:d9:b5:c3:42:02:f3:
         dc:d1:f4:fc:1e:e5:e3:ba:2f:20:76:1e:45:c5:84:8d:7c:bb:
         75:d8:68:14:b4:50:81:99:23:96:67:57:6a:64:84:6c:5e:e2:
         60:9e:c7:97:ca:26:74:2f:6f:d8:ac:54:fe:b0:29:37:a1:ca:
         fa:58:8f:56:b3:8b:bc:46:8b:b2:1f:e6:d5:ba:5f:30:4c:54:
         42:96:41:a2:51:d7:bc:6e:ef:7c:32:3f:45:83:80:45:cf:1d:
         b9:07:8e:2a:27:67:95:5c:ff:1b:90:1f:74:00:4a:f4:ac:4e:
         8b:84:2d:4d:eb:ad:38:50:74:c4:b9:3d:d0:9b:ce:4a:16:c2:
         1f:90:d7:9d:87:17:b1:4d:20:d8:3d:43:23:58:4a:ba:76:31:
         50:f8:a1:17:19:b2:cf:73:87:73:f7:99:0e:a2:9c:85:1a:4b:
         a4:30:00:b0:6b:ec:d7:2c:ec:a6:6c:08:62:5d:02:56:cc:8e:
         7b:32:8e:b0:ba:7f:53:25:9c:58:98:ba:c9:c3:20:2f:f9:3c:
         e9:d5:ee:2d:31:02:b8:ba:56:07:ad:22:9c:33:af:75:5d:5a:
         14:44:80:ea:92:06:65:d8:c5:08:86:54:8e:fb:c2:c1:c3:93:
         2f:40:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:15:23 2024 by rpki-client on console-fra.rpki-client.org