Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637323a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6637323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          v8NiyoiT15ZZeF21nSUuVEV/cKecXd5yB19bvFNMrZQ=
Subject key identifier:   41:A3:95:37:AE:49:92:0F:99:65:1F:9F:1E:2A:18:CF:25:1C:C4:97
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       45F31F1313B2B88155E15AD6495D48EEF197A3F6
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sat 27 Jul 2024 16:15:22 +0000
ROA not before:           Sat 27 Jul 2024 16:10:22 +0000
ROA not after:            Sat 26 Jul 2025 16:15:22 +0000
asID:                     47272
IP address blocks:        2602:f96d:f72::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f3:1f:13:13:b2:b8:81:55:e1:5a:d6:49:5d:48:ee:f1:97:a3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 27 16:10:22 2024 GMT
            Not After : Jul 26 16:15:22 2025 GMT
        Subject: CN=41A39537AE49920F99651F9F1E2A18CF251CC497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:9d:a0:11:6b:1c:de:15:cf:85:e7:9e:19:
                    e9:9a:11:7f:92:15:fe:48:2e:5a:04:44:58:b1:6a:
                    c2:b2:64:ef:9e:3b:d8:50:a2:37:91:58:dd:59:e9:
                    fa:fc:e2:5f:5f:8f:c9:be:46:9a:6c:6e:bb:f1:51:
                    bc:4c:d7:5d:a2:f4:55:a8:84:df:b9:46:0d:36:44:
                    01:d0:f8:3e:7d:13:98:16:fa:b6:af:fc:e2:7c:61:
                    77:36:d5:a9:8b:4e:ac:89:06:02:03:23:27:90:b3:
                    c1:6e:df:69:a0:b9:c3:57:92:42:e1:97:e1:af:d9:
                    38:a3:d1:d3:7a:45:31:b1:2d:a7:78:06:0a:e5:79:
                    3d:4e:08:bc:40:b1:5d:28:f9:d2:34:28:d4:dd:de:
                    bf:b6:b2:62:cd:d3:82:82:65:df:c7:6d:0f:d8:cf:
                    6d:17:99:14:71:25:e1:a4:c4:b8:8e:4b:bb:2d:d5:
                    39:ee:fd:c8:a1:0d:6e:54:ed:3c:e1:9d:53:49:6d:
                    ad:db:ec:02:df:c0:20:32:93:c4:c1:d7:c9:a8:7c:
                    09:4d:ed:8a:48:0a:b8:95:ff:cd:0a:d4:d1:7c:f3:
                    8f:06:46:da:c2:17:3c:6c:45:09:cf:85:c6:78:85:
                    ec:5c:d9:90:98:0d:b8:82:a9:80:94:c9:fe:4e:e1:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:95:37:AE:49:92:0F:99:65:1F:9F:1E:2A:18:CF:25:1C:C4:97
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f72::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:63:f5:27:a3:dd:2f:07:68:44:bb:3d:ac:c4:c1:8d:a8:
         fa:9a:d5:c4:55:84:c7:be:26:46:61:18:c6:a5:b5:a3:70:66:
         8a:d7:c9:8b:23:e0:54:d9:64:13:82:e4:7e:5e:09:60:04:9a:
         ac:1f:b4:a9:44:3c:d9:3d:9f:d7:97:26:05:3e:0c:ad:9f:cc:
         e4:3f:b0:2d:ea:2d:b0:a3:af:2a:37:69:e8:8b:13:70:1a:d2:
         a8:cd:36:ed:b0:43:4a:f3:d4:d9:ad:43:01:27:67:32:75:6f:
         c3:56:ec:ea:cb:f2:a6:d9:a5:0e:07:95:bd:4e:6c:0f:73:db:
         5f:e6:2e:f8:4d:df:2f:ee:fb:69:05:7d:54:d8:cb:95:e6:17:
         2c:34:49:ed:25:66:7c:32:dc:01:99:ef:e7:d6:03:03:1b:5a:
         43:58:26:e2:d1:7d:3a:ad:cd:29:41:43:85:2e:50:f9:c4:70:
         b6:cb:d9:6d:e2:33:a9:cf:bf:9e:76:c0:5f:2a:cb:dc:45:4e:
         04:a7:db:03:0d:8b:2e:9b:45:bf:6c:02:dc:39:d5:cb:cf:d4:
         80:61:ae:fa:c1:eb:80:8a:a1:ff:52:bb:fa:e7:79:1d:44:ab:
         97:cd:de:5d:03:0b:cf:86:b9:b2:1c:e4:50:34:b2:97:55:2d:
         aa:99:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:35 2024 by rpki-client on console-ams.rpki-client.org