Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6630303a3a2f34342d3434203d3e203437323732.roa
File:                     323630323a663936643a6630303a3a2f34342d3434203d3e203437323732.roa (raw, json)
Hash identifier:          Fo17SxW/je3elygYA2vgnvYffHfXDEOK6jOb3nwj05A=
Subject key identifier:   B9:31:50:6B:CD:3E:C7:66:E0:38:0A:52:CD:30:47:6D:12:D5:49:D3
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       986EAC5144C46445881B9BC57962A422C691A7
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6630303a3a2f34342d3434203d3e203437323732.roa
Signing time:             Tue 30 Jul 2024 20:14:42 +0000
ROA not before:           Tue 30 Jul 2024 20:09:42 +0000
ROA not after:            Tue 29 Jul 2025 20:14:42 +0000
asID:                     47272
IP address blocks:        2602:f96d:f00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:6e:ac:51:44:c4:64:45:88:1b:9b:c5:79:62:a4:22:c6:91:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 30 20:09:42 2024 GMT
            Not After : Jul 29 20:14:42 2025 GMT
        Subject: CN=B931506BCD3EC766E0380A52CD30476D12D549D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:13:58:1c:b6:3b:86:05:44:10:eb:2d:8e:
                    b7:35:9d:b2:10:d1:a3:e9:e6:96:77:07:dd:bd:67:
                    c6:c0:9b:56:58:21:d3:72:49:3d:d4:24:4a:8b:5b:
                    cc:2a:65:8c:f5:71:28:cf:65:74:3f:c4:47:92:c8:
                    c5:47:d2:a2:da:f4:b2:45:5b:44:8e:21:3d:0e:dd:
                    a1:0e:7b:49:a8:bd:2a:7e:c8:70:aa:ea:5d:4e:11:
                    e4:c0:5c:f6:25:2e:83:20:8c:2f:02:b8:30:2e:ac:
                    08:29:0c:04:ca:b1:5c:d7:a9:d9:8a:c6:05:fb:ed:
                    eb:f1:f6:6c:1d:71:2b:f0:57:c5:ea:4f:24:1c:cf:
                    62:af:64:de:20:0e:96:3f:d5:6a:b5:d2:d0:d3:81:
                    ba:91:8e:d5:ec:74:e1:27:36:28:2e:e5:a4:41:d4:
                    3e:16:80:89:fb:71:d2:e6:8e:90:b4:97:cf:66:bd:
                    29:b9:c1:b7:a9:db:8b:22:90:7e:81:02:d6:1e:73:
                    34:e3:e0:ad:78:cf:dd:65:a7:d1:53:3a:76:f5:23:
                    85:17:2c:7c:e5:95:38:dd:a1:30:57:3f:31:33:e1:
                    57:93:f5:d0:53:84:d8:6e:ba:bf:4c:a7:76:fd:20:
                    60:4b:a0:64:8a:30:42:0c:13:0a:df:b3:98:28:9f:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:31:50:6B:CD:3E:C7:66:E0:38:0A:52:CD:30:47:6D:12:D5:49:D3
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6630303a3a2f34342d3434203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f00::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:69:b9:b8:c3:c4:59:2c:df:25:cd:63:ad:eb:d8:0c:34:6c:
         f1:1d:f0:6e:c1:77:90:0f:99:4d:72:16:de:07:c7:8d:8e:51:
         aa:db:17:cb:dc:85:a4:38:6e:91:8f:55:06:e3:fe:16:d3:e6:
         53:35:4f:36:f8:53:d3:38:57:db:98:44:ee:bf:74:9a:56:30:
         8e:f5:b6:62:c5:71:ca:5e:2f:91:91:bc:14:ca:0d:f0:f1:51:
         18:45:25:dc:d6:4f:1f:4b:5e:a4:28:96:22:33:0c:cd:ea:69:
         e8:95:6f:d5:e9:ec:9b:04:9c:9d:61:a6:84:b9:29:01:8b:c9:
         fd:f9:28:34:a3:01:ae:02:b1:e1:87:6c:66:db:b0:2f:ad:8e:
         22:48:85:67:b9:ce:f4:f2:9f:3d:ca:fb:18:ed:f1:37:b3:8a:
         c2:55:0f:85:b2:40:59:a1:f4:f1:d9:53:9f:e1:b6:a9:86:72:
         00:e3:4c:c2:78:98:b1:74:c3:f9:0d:93:40:c7:96:0b:3d:88:
         a3:13:0e:e8:56:d8:23:5a:3f:f9:02:53:12:16:29:87:82:4e:
         15:83:ac:e4:c8:e3:52:e6:61:90:61:2b:ac:f6:71:2b:8a:83:
         70:22:f2:76:1d:3c:e4:ba:53:29:f1:17:39:a5:a1:d2:64:2c:
         69:20:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:35 2024 by rpki-client on console-fra.rpki-client.org