Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637313a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6637313a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          ylyooXUuucldJZnqampXTqc8rFKg9JpJvG7junCMFRc=
Subject key identifier:   9B:D6:76:94:48:ED:2B:58:77:D1:D3:89:C5:48:EB:69:DF:9C:0C:47
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       2A1DE126C47C8E1CF6B8A4EFADA3F55C706BBCB2
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637313a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sat 27 Jul 2024 16:14:09 +0000
ROA not before:           Sat 27 Jul 2024 16:09:09 +0000
ROA not after:            Sat 26 Jul 2025 16:14:09 +0000
asID:                     47272
IP address blocks:        2602:f96d:f71::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1d:e1:26:c4:7c:8e:1c:f6:b8:a4:ef:ad:a3:f5:5c:70:6b:bc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 27 16:09:09 2024 GMT
            Not After : Jul 26 16:14:09 2025 GMT
        Subject: CN=9BD6769448ED2B5877D1D389C548EB69DF9C0C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:5a:cd:8d:b4:d4:31:8a:bb:6e:6a:99:b5:
                    6b:2c:ab:55:7b:5f:ac:d5:25:de:13:a4:4e:11:61:
                    b4:f2:f4:a3:df:26:b6:65:da:33:8b:82:a1:f4:51:
                    7d:b5:f6:97:e6:76:a7:93:03:4a:60:09:c0:3e:44:
                    4e:b3:2c:e8:02:10:e5:f1:37:a2:b4:d8:31:37:69:
                    f0:50:a6:46:1d:ae:46:08:9f:6f:4d:7f:af:aa:11:
                    82:c4:ae:0f:1f:d0:a7:42:d2:17:f6:cb:09:be:71:
                    15:98:b1:36:91:a5:90:b8:e0:f7:7f:a8:0e:5d:00:
                    5b:13:e3:d1:8f:17:a1:1e:16:a5:9c:54:da:a2:28:
                    4f:d2:3a:c1:91:9f:b7:d3:18:06:14:8c:bd:f9:b4:
                    10:70:03:53:95:c8:33:40:4c:53:22:cb:90:49:af:
                    1a:94:4f:5f:3c:a0:45:6a:7f:aa:bd:9d:5a:e4:92:
                    3e:1d:ee:26:24:40:58:64:fa:e6:93:8b:de:df:97:
                    4b:8a:b1:c8:a2:b0:2a:93:f2:c3:a1:c3:89:62:62:
                    00:32:e7:f1:a9:09:f2:51:80:b5:6b:6c:e1:13:e3:
                    ef:0a:8a:d2:07:e6:4e:01:af:47:eb:39:fd:d4:8b:
                    39:4f:8a:00:19:22:49:61:dd:a7:43:6e:40:f5:0d:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D6:76:94:48:ED:2B:58:77:D1:D3:89:C5:48:EB:69:DF:9C:0C:47
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637313a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f71::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:26:10:13:c0:f7:13:64:8e:29:4d:f2:5c:62:20:3a:32:0c:
         94:48:a9:30:12:55:3c:bb:c2:c8:28:ec:7d:27:4b:2e:14:3a:
         e8:b2:a8:0d:1e:54:69:0f:da:24:a0:75:39:b3:d7:8e:72:0a:
         4c:03:5d:26:cb:33:7f:72:67:78:ea:4a:ec:08:4b:aa:e2:69:
         01:58:a4:c1:24:b1:44:05:5a:49:14:25:ec:a3:42:aa:b9:8d:
         ca:67:05:b6:11:4e:7d:75:31:f8:36:a4:58:62:1c:8e:88:1e:
         36:d0:cb:e0:32:93:35:41:ba:20:2f:19:31:54:19:eb:99:c8:
         d8:c1:f0:40:88:2b:53:9c:13:c9:73:95:7c:82:f8:f3:a5:d0:
         eb:cf:4e:08:2c:27:64:a6:e6:84:8e:50:5d:2c:46:4d:fa:6d:
         a5:9d:d6:42:6a:c1:44:d4:77:96:ee:3d:70:26:24:84:ac:27:
         75:9a:d2:00:cd:32:a2:eb:aa:2d:c8:0d:9b:78:89:6f:4f:8e:
         91:aa:ef:c6:f6:3e:ad:1b:2c:f6:07:d5:ba:8a:ce:3e:cf:aa:
         ff:46:6f:6f:3a:ed:2d:08:ad:3f:12:d4:29:dd:b1:20:6c:61:
         13:9f:1b:1a:38:1c:56:64:52:d0:f4:67:f8:78:b0:49:91:9a:
         1b:b9:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:35 2024 by rpki-client on console-fra.rpki-client.org