Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6230303a3a2f34302d3430203d3e203336383332.roa
File:                     323630323a663936643a6230303a3a2f34302d3430203d3e203336383332.roa (raw, json)
Hash identifier:          aFiilS+MSqQQIMhL6M+Xp6nRAfSkX1Xzud9lDJxWeVE=
Subject key identifier:   94:9C:9E:F6:51:30:05:8A:1E:67:5A:28:26:1D:05:AE:CE:16:A1:73
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       5A46C4087EF5A8890ECF56D23F64F5199CB5F1DE
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6230303a3a2f34302d3430203d3e203336383332.roa
Signing time:             Wed 21 Aug 2024 12:56:40 +0000
ROA not before:           Wed 21 Aug 2024 12:51:40 +0000
ROA not after:            Wed 20 Aug 2025 12:56:40 +0000
asID:                     36832
IP address blocks:        2602:f96d:b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 13:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:46:c4:08:7e:f5:a8:89:0e:cf:56:d2:3f:64:f5:19:9c:b5:f1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Aug 21 12:51:40 2024 GMT
            Not After : Aug 20 12:56:40 2025 GMT
        Subject: CN=949C9EF65130058A1E675A28261D05AECE16A173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:11:ce:62:dd:2e:37:88:24:a7:d0:bc:a8:
                    b4:ce:5c:ac:f4:29:cd:7c:39:c4:94:0d:53:0f:06:
                    70:97:23:07:8d:a0:41:8c:92:68:c5:dd:a3:88:1c:
                    5f:5e:d9:f9:b9:2c:49:32:22:b8:bc:da:e6:6a:88:
                    84:cd:2e:b4:d4:11:c1:a8:ed:7c:dd:e2:49:67:9b:
                    6f:2a:62:1e:f2:86:a8:07:4b:1c:9b:ea:ac:05:1e:
                    38:13:1b:7a:53:c2:ca:3d:02:d4:94:89:73:c2:a8:
                    b6:fd:8b:27:95:da:24:6a:0b:b7:cc:10:ca:5b:b4:
                    ec:ca:b9:93:26:91:2c:b4:b9:1b:d9:3c:7e:43:a7:
                    0b:09:e3:bc:09:77:5b:7f:b9:21:99:de:d4:0b:45:
                    80:cf:01:2d:25:91:6a:ba:71:5e:37:88:df:3b:b7:
                    3b:39:e9:f0:5f:f9:bf:e0:db:81:1f:a2:a6:bb:1a:
                    be:4f:e8:45:0a:14:e1:fa:cb:8d:46:0d:20:51:b0:
                    cf:30:3b:4f:2f:36:ab:0d:a5:cd:29:9c:0a:d5:35:
                    a5:88:53:c3:b1:71:fc:01:0f:24:08:45:f5:cb:54:
                    d7:52:2d:58:65:f3:86:0e:53:9f:86:07:8e:41:c3:
                    9e:be:8c:61:be:f3:c9:01:e1:1a:2b:67:a4:5d:5c:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:9E:F6:51:30:05:8A:1E:67:5A:28:26:1D:05:AE:CE:16:A1:73
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6230303a3a2f34302d3430203d3e203336383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:67:b5:70:d1:65:58:76:e0:22:be:d2:1c:ea:3b:5b:dd:d5:
         2d:fb:a3:11:c6:28:a5:ff:be:37:5a:c8:52:7b:ea:ae:93:c2:
         c2:90:68:55:51:f0:13:99:06:f0:21:28:2f:01:6b:a3:92:4b:
         ae:bb:dd:af:d4:ac:0b:a1:ce:26:b6:21:b9:af:31:3e:f8:16:
         47:1f:6f:64:a8:81:46:57:21:80:ac:67:b5:d5:ca:4b:8f:2c:
         e7:cf:65:89:e4:d5:0b:eb:28:36:21:aa:19:c3:b2:81:6c:f2:
         cf:64:9e:55:b9:ba:00:3f:14:42:90:84:7d:5d:30:23:07:43:
         0e:34:2f:63:22:41:92:7e:d6:de:78:f3:98:ce:14:64:b7:5c:
         98:af:df:0a:ab:11:6c:ac:94:b9:ac:7a:07:03:fc:d0:71:50:
         26:35:06:38:30:62:6b:78:37:bb:db:68:00:77:1e:96:08:9e:
         bf:0f:f5:a8:74:d0:98:b0:a6:a9:84:f2:9e:e7:6b:53:b1:20:
         51:a8:af:42:f3:f6:b8:57:d8:2e:cd:b7:39:42:93:0f:b9:69:
         ed:a7:49:6f:37:64:38:92:43:ce:62:df:0f:dd:15:c3:de:f9:
         ce:ac:0a:67:62:2d:2c:d6:cf:52:7f:87:66:a5:95:00:7f:3c:
         e4:3b:b4:19
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgIUWkbECH71qIkOz1bSP2T1GZy18d4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTY4YjQwZjY1Y2ZjMTc0NDVmODliMjE5
MmE1NzM3OWQ3ZjEzYmU4ZmEwHhcNMjQwODIxMTI1MTQwWhcNMjUwODIwMTI1NjQw
WjAzMTEwLwYDVQQDEyg5NDlDOUVGNjUxMzAwNThBMUU2NzVBMjgyNjFEMDVBRUNF
MTZBMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g8RzmLdLjeI
JKfQvKi0zlys9CnNfDnElA1TDwZwlyMHjaBBjJJoxd2jiBxfXtn5uSxJMiK4vNrm
aoiEzS601BHBqO183eJJZ5tvKmIe8oaoB0scm+qsBR44Ext6U8LKPQLUlIlzwqi2
/Ysnldokagu3zBDKW7TsyrmTJpEstLkb2Tx+Q6cLCeO8CXdbf7khmd7UC0WAzwEt
JZFqunFeN4jfO7c7OenwX/m/4NuBH6Kmuxq+T+hFChTh+suNRg0gUbDPMDtPLzar
DaXNKZwK1TWliFPDsXH8AQ8kCEX1y1TXUi1YZfOGDlOfhgeOQcOevoxhvvPJAeEa
K2ekXVzeuwIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFJScnvZRMAWKHmdaKCYdBa7O
FqFzMB8GA1UdIwQYMBaAFG16Jmcwko2d/f2s429zrInkJOIoMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2Mx
LTI3NjU0M2EyNWM3ZC80LzZEN0EyNjY3MzA5MjhEOURGREZEQUNFMzZGNzNBQzg5
RTQyNEUyMjguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03
ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTY4YjQwZjY1Y2ZjMTc0NDVmODliMjE5MmE1
NzM3OWQ3ZjEzYmU4ZmEuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH
MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC80LzMyMzYzMDMy
M2E2NjM5MzY2NDNhNjIzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzMzNjM4
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGACYC+W0LMA0GCSqGSIb3DQEBCwUAA4IBAQAoZ7Vw0WVY
duAivtIc6jtb3dUt+6MRxiil/743WshSe+quk8LCkGhVUfATmQbwISgvAWujkkuu
u92v1KwLoc4mtiG5rzE++BZHH29kqIFGVyGArGe11cpLjyznz2WJ5NUL6yg2IaoZ
w7KBbPLPZJ5VuboAPxRCkIR9XTAjB0MONC9jIkGSftbeePOYzhRkt1yYr98KqxFs
rJS5rHoHA/zQcVAmNQY4MGJreDe722gAdx6WCJ6/D/WodNCYsKaphPKe52tTsSBR
qK9C8/a4V9guzbc5QpMPuWntp0lvN2Q4kkPOYt8P3RXD3vnOrApnYi0s1s9Sf4dm
pZUAfzzkO7QZ
-----END CERTIFICATE-----
Generated at Wed Sep 18 15:58:58 2024 by rpki-client on console-fra.rpki-client.org