Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637343a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6637343a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          InQSy5uLlJsABG3DnUihio8wEqldqb7/pKXMtOHIbwc=
Subject key identifier:   C8:CB:FB:CE:CA:39:73:D1:DA:2B:76:2C:07:41:FF:48:B9:4A:A1:1A
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       0C7CB360D2C643C2C0B34A2D086957A60FF0AFDC
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637343a3a2f34382d3438203d3e203437323732.roa
Signing time:             Thu 01 Aug 2024 14:58:35 +0000
ROA not before:           Thu 01 Aug 2024 14:53:35 +0000
ROA not after:            Thu 31 Jul 2025 14:58:35 +0000
asID:                     47272
IP address blocks:        2602:f96d:f74::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Dec 2024 00:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7c:b3:60:d2:c6:43:c2:c0:b3:4a:2d:08:69:57:a6:0f:f0:af:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Aug  1 14:53:35 2024 GMT
            Not After : Jul 31 14:58:35 2025 GMT
        Subject: CN=C8CBFBCECA3973D1DA2B762C0741FF48B94AA11A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:25:99:41:b1:4f:34:db:98:1e:90:90:ef:
                    ab:ea:37:a1:59:cc:a4:e7:df:00:55:23:0f:e1:fb:
                    97:ed:f6:93:84:95:18:5b:08:26:9c:64:26:2e:7d:
                    a6:56:b0:20:1e:6c:2e:63:73:0d:87:fc:fe:e0:4e:
                    f1:88:c8:f6:2d:8a:36:3b:73:31:25:5d:c4:58:89:
                    4c:fd:dd:e0:35:c7:e4:13:14:0f:ec:da:53:a5:78:
                    4b:8c:19:8b:37:00:03:ce:b1:1b:5d:77:f2:5f:84:
                    9e:ca:d6:7d:ce:25:47:36:80:fe:80:6b:7c:52:a0:
                    09:0a:83:0a:ea:53:79:fa:11:56:c3:90:59:59:8e:
                    ca:87:f8:9b:73:c9:10:cb:73:c7:33:6f:82:20:95:
                    27:8b:8d:70:7a:78:5d:fd:a7:72:ce:1f:c4:a8:ff:
                    fd:40:85:03:34:e4:63:0d:13:da:e4:39:2d:d3:a1:
                    f8:aa:39:8f:17:b1:04:f8:70:45:cd:d7:55:8b:63:
                    62:da:a6:63:68:f3:de:e9:b9:98:44:fe:0b:10:34:
                    dc:96:b7:b6:7f:a6:bc:39:3f:2c:e7:6f:3c:01:e6:
                    e4:d5:7a:ba:22:48:66:6b:64:b0:98:ff:b4:e0:2f:
                    37:65:eb:2b:4a:50:ac:cb:e5:9a:8a:6f:7f:0f:4f:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CB:FB:CE:CA:39:73:D1:DA:2B:76:2C:07:41:FF:48:B9:4A:A1:1A
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637343a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f74::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:4d:84:08:96:a7:27:b4:81:c1:c9:e1:d4:d6:e0:a3:ba:
         23:b1:8d:55:a7:eb:53:8a:47:f3:a3:73:3a:79:86:ab:e0:3b:
         60:0c:51:1f:5c:7b:13:6d:30:d8:59:20:f8:eb:c9:3b:9b:99:
         44:47:a9:b6:03:9b:50:fe:e0:91:de:d2:69:bd:a5:06:79:28:
         fd:05:e4:db:a8:f1:f6:c4:30:07:ba:27:1f:27:ba:45:05:6d:
         70:1f:7d:1e:82:81:1f:68:f8:95:90:ad:ad:8e:12:0b:8b:74:
         a7:6e:3f:a9:74:c1:e0:6a:5a:79:a8:b7:c8:ed:b0:ce:1a:58:
         4b:25:a0:93:8a:4d:d2:d6:a2:c9:39:28:c0:cb:00:5b:9f:3b:
         3e:5a:23:6b:be:0f:aa:4a:9e:9a:ae:83:42:95:33:22:9f:90:
         a0:49:46:e5:15:c2:3c:3e:a1:66:5d:7c:42:e2:dd:52:c0:f2:
         6f:da:a2:33:e5:a9:32:ae:cc:d8:34:c8:de:0e:0f:fa:dd:4c:
         c6:ab:4f:1d:f4:00:99:da:20:27:2b:8b:4c:a0:b2:b5:76:a8:
         48:ed:7f:c6:58:df:2c:60:9b:55:68:89:ad:74:35:b3:62:d4:
         b5:0f:36:83:80:0d:9d:71:11:2a:81:f9:aa:f4:c3:69:65:f1:
         37:7d:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 00:35:37 2024 by rpki-client on console-ams.rpki-client.org