Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6633303a3a2f34342d3434203d3e203437323732.roa
File:                     323630323a663936643a6633303a3a2f34342d3434203d3e203437323732.roa (raw, json)
Hash identifier:          fz7dSzI2tf5GUz7LIHwaJ3V8BI6d4UOoOg0ahEjEKr4=
Subject key identifier:   C0:F6:83:BD:E6:43:49:A2:5C:1C:11:3D:FA:8C:97:29:DF:E8:7A:00
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       3214C089900F1330CE57D22A34992DA01315BDCB
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6633303a3a2f34342d3434203d3e203437323732.roa
Signing time:             Thu 26 Sep 2024 15:15:56 +0000
ROA not before:           Thu 26 Sep 2024 15:10:56 +0000
ROA not after:            Thu 25 Sep 2025 15:15:56 +0000
asID:                     47272
IP address blocks:        2602:f96d:f30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:14:c0:89:90:0f:13:30:ce:57:d2:2a:34:99:2d:a0:13:15:bd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Sep 26 15:10:56 2024 GMT
            Not After : Sep 25 15:15:56 2025 GMT
        Subject: CN=C0F683BDE64349A25C1C113DFA8C9729DFE87A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fe:ad:12:47:2a:fb:15:81:c6:b2:1f:fc:91:
                    ba:0e:56:f0:a5:08:1d:aa:d7:ea:aa:bb:82:d3:c3:
                    91:50:a6:2d:af:52:09:58:8e:18:66:db:51:b1:a4:
                    8b:f8:5b:4b:51:f7:ae:63:ee:21:87:71:87:8f:13:
                    49:b6:80:b0:86:20:37:52:4a:d4:cb:c9:56:0e:69:
                    36:a4:33:8d:7d:8d:a2:47:df:1c:67:43:16:3e:34:
                    f9:1b:f6:83:aa:5a:eb:89:0f:49:50:6a:22:1a:be:
                    21:2e:19:7f:3b:14:6d:da:9b:d4:bd:eb:68:43:bb:
                    36:51:d4:58:b6:05:95:16:22:5e:62:dc:80:35:00:
                    ea:e9:d5:6b:d5:22:2e:3d:a6:46:81:76:c3:97:9f:
                    f5:e4:c0:dd:a2:b8:c3:4b:55:a1:84:2f:61:84:5f:
                    ec:9a:c4:04:af:ad:44:e8:db:2f:3a:e4:77:81:be:
                    78:fd:66:38:9e:77:05:0b:9a:a0:6e:07:0f:b5:c0:
                    b1:ba:06:ac:a8:71:cb:db:2f:84:10:f0:d6:61:04:
                    5a:e3:38:df:df:67:ba:c3:ac:fb:83:6f:82:6d:93:
                    bb:9f:f2:86:4f:53:19:43:9a:da:6a:8d:3e:b4:c8:
                    47:06:57:06:ad:72:61:c7:50:7a:7d:4b:e1:0a:37:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F6:83:BD:E6:43:49:A2:5C:1C:11:3D:FA:8C:97:29:DF:E8:7A:00
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6633303a3a2f34342d3434203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f30::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:a8:f5:74:3f:59:40:ea:93:9c:07:0e:23:91:fd:ca:c2:
         ce:b8:f5:d1:ff:cf:e8:e9:e9:25:51:31:90:eb:e2:b7:7a:af:
         b7:b4:f0:75:35:4d:24:8c:23:46:b7:35:9b:e1:d1:71:77:f1:
         ed:1b:5d:d8:af:4d:b7:cb:59:21:91:d1:14:bc:74:ca:e5:42:
         1c:50:0c:40:fa:d2:82:c5:53:37:37:f3:3c:2e:18:63:ef:a1:
         00:9f:0f:a0:bc:81:61:e5:f9:8d:81:a6:1d:6e:e4:04:9b:66:
         61:39:69:e2:e1:0d:72:9b:1b:3f:39:15:1b:be:32:2a:bb:32:
         f5:87:e5:3a:cd:35:c9:c7:34:cf:54:d5:86:cd:04:af:7f:9f:
         4f:1e:dd:68:c6:d9:19:f8:b4:c8:2b:b1:50:fb:d4:f1:d0:06:
         ba:74:5c:90:90:3b:98:be:c8:29:5e:20:9a:52:0f:2b:43:e1:
         9b:17:20:10:39:8b:7f:a3:55:ee:e1:db:f7:00:29:24:4e:66:
         cf:65:75:c2:3e:99:4b:e0:a8:33:97:81:35:a6:89:b6:d2:e0:
         64:0e:b7:43:3a:8b:4d:33:d5:82:ce:c6:9b:62:5d:41:43:77:
         29:dd:b5:38:36:27:3b:3d:80:6b:90:09:0c:4f:11:26:d0:b2:
         cb:72:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:35 2024 by rpki-client on console-fra.rpki-client.org