Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637353a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6637353a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          Tqyhq6fqFE6wpQkJ5RDpCgXnvpNDd3sCcLIFFLOoAJc=
Subject key identifier:   EC:06:82:FD:57:E3:10:71:51:F2:15:13:05:EE:3F:5E:52:DA:AF:94
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       45D3BCC7B4F038AF6105EA7BCC88E36AB37543EA
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637353a3a2f34382d3438203d3e203437323732.roa
Signing time:             Fri 02 Aug 2024 04:53:40 +0000
ROA not before:           Fri 02 Aug 2024 04:48:40 +0000
ROA not after:            Fri 01 Aug 2025 04:53:40 +0000
asID:                     47272
IP address blocks:        2602:f96d:f75::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d3:bc:c7:b4:f0:38:af:61:05:ea:7b:cc:88:e3:6a:b3:75:43:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Aug  2 04:48:40 2024 GMT
            Not After : Aug  1 04:53:40 2025 GMT
        Subject: CN=EC0682FD57E3107151F2151305EE3F5E52DAAF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:a6:0a:ec:a2:f2:e5:5a:84:b9:18:b8:e7:
                    1b:fe:26:e3:3e:08:a7:d3:e5:5b:62:72:29:08:6d:
                    97:e1:39:44:3b:96:ee:cd:76:af:af:39:28:58:ed:
                    f1:2e:6a:ec:e8:08:a1:c9:5b:c6:1b:d2:22:12:8c:
                    58:55:79:45:9a:93:5a:3a:31:86:cb:a6:3f:78:5a:
                    f3:78:a0:70:66:bf:06:83:d9:1a:b3:2c:90:b6:d3:
                    87:d5:c8:b9:bf:c6:1a:2d:74:65:d6:40:66:db:10:
                    b8:af:88:04:21:6f:ce:e7:85:d1:87:1b:29:02:da:
                    e6:47:12:fd:d2:37:54:53:28:34:9f:e7:26:77:62:
                    a8:f8:75:9e:6d:60:e6:a2:fb:43:8e:f8:92:1f:de:
                    9b:e3:48:59:5a:a3:5c:e3:8e:04:90:31:fd:2e:2d:
                    fe:74:91:23:5f:a0:84:3f:f3:80:8a:60:c6:3b:01:
                    da:42:30:e2:17:fb:19:6f:3c:8f:67:7d:5b:01:37:
                    c1:ea:4f:de:a0:68:fa:f1:bc:a4:32:2f:51:4a:e7:
                    7f:09:0d:98:d2:74:c4:96:21:f3:cc:4f:15:d5:54:
                    46:a1:86:48:00:4d:63:2b:6b:63:5a:17:e6:33:01:
                    fb:b8:4f:5c:7a:25:b4:46:9f:10:e3:4e:d4:d8:86:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:06:82:FD:57:E3:10:71:51:F2:15:13:05:EE:3F:5E:52:DA:AF:94
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637353a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f75::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:34:23:86:0e:48:e8:83:6e:0a:c8:c8:c7:c9:5c:97:df:
         cb:c3:4e:9c:a2:19:9a:63:79:c7:90:c0:e3:5d:2a:99:7e:0d:
         53:13:48:b2:09:4a:09:29:37:c0:eb:94:cd:08:f0:b3:15:52:
         35:84:4b:ce:fa:58:a4:1f:2d:e5:c3:28:ce:85:56:cb:0b:23:
         e6:a9:5f:ab:41:dc:4c:ed:87:f3:76:04:6d:e8:00:a8:dd:22:
         46:ba:8d:47:61:86:50:a2:f9:70:4d:70:bd:f5:9a:3d:97:80:
         db:65:e1:cd:a8:a7:85:c4:c6:2e:4e:77:bf:a7:fc:9e:7d:81:
         74:b1:88:a7:a5:92:b3:5e:22:d0:46:1e:16:47:a2:3e:6d:8a:
         42:46:5d:60:8b:0d:d1:fb:49:56:e7:08:58:9d:0e:23:7c:61:
         19:20:3b:ab:31:88:c4:9e:6f:9f:74:c3:42:51:31:0a:c0:4f:
         4c:d0:09:60:2b:2c:82:cf:76:b9:1e:4e:69:71:20:25:f7:30:
         ba:cc:29:d4:6f:0e:63:32:14:b6:c3:2a:60:55:de:1b:9d:1d:
         cc:23:8d:03:bd:94:01:ae:0f:8f:15:32:bf:30:a7:c1:f5:cd:
         b9:83:68:56:77:6e:09:4c:6a:ce:5c:26:55:06:18:07:95:4d:
         ab:4d:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:15:23 2024 by rpki-client on console-fra.rpki-client.org