Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6330303a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6330303a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          2jBfgvnspusRgUqKq0w7R02NSiQRTTYSUjbD1r81/xA=
Subject key identifier:   C2:8E:DA:3D:87:A2:F4:51:68:44:85:DB:34:CE:84:A0:44:5A:D7:E0
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       0360E91BF52160BBA7B2924C20CA3559B65DA9F7
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6330303a3a2f34382d3438203d3e203437323732.roa
Signing time:             Thu 15 Aug 2024 17:01:17 +0000
ROA not before:           Thu 15 Aug 2024 16:56:17 +0000
ROA not after:            Thu 14 Aug 2025 17:01:17 +0000
asID:                     47272
IP address blocks:        2602:f96d:c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:e9:1b:f5:21:60:bb:a7:b2:92:4c:20:ca:35:59:b6:5d:a9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Aug 15 16:56:17 2024 GMT
            Not After : Aug 14 17:01:17 2025 GMT
        Subject: CN=C28EDA3D87A2F451684485DB34CE84A0445AD7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:0e:1d:33:15:0c:82:19:d3:35:10:11:63:
                    ff:bc:a7:da:98:f1:cb:07:93:ad:e8:ac:85:52:f5:
                    34:d1:45:25:52:b7:33:70:d5:98:01:04:5a:18:36:
                    ff:0c:35:26:68:08:21:15:b8:03:3b:47:84:29:56:
                    a1:b3:b6:6e:36:ed:4f:bb:76:0e:32:65:d5:3e:80:
                    9b:4d:14:0a:ac:e5:da:d1:17:06:e1:0b:59:68:cb:
                    6f:f9:2c:fb:63:0f:79:bf:18:27:9a:0b:b7:50:d8:
                    97:38:7c:70:9a:50:de:2b:ff:16:87:82:69:2b:9e:
                    4f:39:c1:73:67:86:03:ee:7b:8a:e9:08:28:f4:9c:
                    44:ad:3c:9f:77:b1:39:64:67:a4:2f:d1:f2:25:7c:
                    77:04:16:d8:c3:de:5a:ca:49:16:58:67:a0:6b:af:
                    ac:7e:56:b2:0c:05:37:7b:f1:40:7d:72:c6:70:4d:
                    a1:7a:7e:7a:7c:93:0f:67:21:77:e7:5a:c1:5f:e1:
                    0d:aa:c4:c7:55:be:c5:2f:e4:21:47:2b:0d:ba:19:
                    09:09:ad:4e:6f:dc:88:d2:51:7d:9b:92:d1:db:67:
                    7e:76:59:16:5f:8f:58:92:8d:0c:5b:a1:75:07:0f:
                    00:f3:96:76:72:b5:d6:91:11:ff:03:a0:a4:61:88:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8E:DA:3D:87:A2:F4:51:68:44:85:DB:34:CE:84:A0:44:5A:D7:E0
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6330303a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:fe:24:5b:0d:24:35:22:8c:51:6b:36:29:e9:f6:72:2b:ec:
         1e:1a:69:9a:f8:ec:66:c4:3a:d7:71:41:11:65:c4:ee:f2:3e:
         15:1c:b4:60:4d:1b:35:c4:2a:d9:68:7d:ed:89:b6:4b:ce:f3:
         30:5b:5d:ad:d5:b7:84:65:83:ae:4f:ec:9c:c8:ec:14:98:7d:
         45:a8:26:1c:b4:f2:e6:6c:d0:0b:fd:9d:6e:6d:b1:7c:79:9e:
         8b:87:78:69:3b:8b:81:63:d6:89:01:92:dc:1a:d2:29:6f:d1:
         a4:61:14:b1:de:33:17:02:dd:1a:b3:b8:7a:a2:c6:1b:b7:fd:
         c2:b0:2e:a1:09:27:5d:f0:cb:6a:7e:79:09:63:32:81:1d:11:
         02:51:15:21:be:2f:99:06:b6:ad:c7:d0:12:61:ee:7c:e2:76:
         bf:41:0a:43:56:29:ff:f3:3f:67:e1:02:5b:95:98:ad:2a:bf:
         47:6d:0d:e1:b1:ca:12:d1:ec:3b:30:e0:92:7e:c4:3d:e8:0f:
         b6:92:86:2e:43:6f:e7:51:cc:4b:50:47:54:54:a0:df:8d:df:
         d3:1c:16:d5:aa:3d:24:10:f4:aa:dc:86:39:1c:af:69:1a:92:
         1e:b4:e5:c5:5d:69:0e:e8:a8:07:42:e5:6c:40:1b:21:f6:d5:
         06:a3:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:49:01 2024 by rpki-client on console-ams.rpki-client.org