Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637373a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6637373a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          WnJWfX0ur2M1CwWDqag50pjrdQhmzIZ5lKZJxwC5pA8=
Subject key identifier:   60:5D:67:7A:EA:88:3F:A3:0B:92:1F:77:63:67:31:0D:AC:C7:F4:86
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       0C5A5964953B457C4D7C7795ECDFDE0A83A5763B
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637373a3a2f34382d3438203d3e203437323732.roa
Signing time:             Wed 14 Aug 2024 18:00:54 +0000
ROA not before:           Wed 14 Aug 2024 17:55:54 +0000
ROA not after:            Wed 13 Aug 2025 18:00:54 +0000
asID:                     47272
IP address blocks:        2602:f96d:f77::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5a:59:64:95:3b:45:7c:4d:7c:77:95:ec:df:de:0a:83:a5:76:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Aug 14 17:55:54 2024 GMT
            Not After : Aug 13 18:00:54 2025 GMT
        Subject: CN=605D677AEA883FA30B921F776367310DACC7F486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:e8:b1:cb:b0:83:c7:e9:80:2b:4a:41:1c:
                    9b:a3:4a:f1:10:b3:93:cd:ab:42:82:ea:da:2a:18:
                    36:54:ea:6b:d6:c5:6b:fe:40:8a:70:ca:bf:f1:c0:
                    4b:7a:9b:44:86:b9:18:4b:c4:9d:23:8d:be:88:e3:
                    1c:13:c6:b5:53:8c:b3:74:5a:03:0e:0b:1b:94:a7:
                    7a:4b:18:63:c0:c5:03:8c:29:d0:91:05:44:2a:fd:
                    c5:5a:42:f6:da:60:94:61:f4:d1:dc:03:1d:98:41:
                    d4:95:80:c6:82:d5:bf:c7:29:9b:9e:9c:08:c9:5d:
                    10:ee:6c:08:5b:ef:27:39:99:bc:21:db:e2:ba:2f:
                    d6:00:89:b6:d4:80:94:30:e2:84:96:ca:62:0d:8f:
                    10:95:5e:86:81:86:7d:00:96:3b:cd:d7:ce:3b:03:
                    45:25:d3:08:4b:61:ae:e7:cd:46:fa:a1:9f:98:1d:
                    74:4c:3b:2b:38:db:b0:2b:0f:57:3a:a2:34:0d:ae:
                    1a:a6:90:2c:a8:b9:6d:90:ae:32:20:02:08:d4:0d:
                    70:ec:d2:b8:f8:ea:f2:7e:a0:b7:ad:1f:27:57:65:
                    48:88:f2:a3:72:7e:aa:49:72:bd:e5:9f:69:1c:e6:
                    d5:01:46:a6:74:ea:ea:bc:e2:53:2f:ae:62:7a:63:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5D:67:7A:EA:88:3F:A3:0B:92:1F:77:63:67:31:0D:AC:C7:F4:86
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6637373a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f77::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:fc:e1:27:74:d8:9b:6d:32:3c:14:9d:7e:02:a2:77:be:
         9e:1b:b4:e0:a9:a4:3a:ba:cd:84:f0:26:c5:b2:2d:7c:12:4d:
         89:85:88:30:94:d5:78:4e:9c:79:c7:8d:a6:73:25:9f:46:f4:
         19:bf:9c:b9:52:42:ec:b2:cb:60:43:aa:6f:61:b2:69:54:37:
         20:25:7a:df:79:62:47:66:39:9c:01:df:34:76:7d:f1:0b:1e:
         87:e8:af:84:38:01:cf:69:f6:35:bd:7b:24:21:b2:64:2b:40:
         2f:d6:2c:27:13:32:e5:7d:9b:02:2a:94:48:c5:fe:00:67:d6:
         b3:97:62:75:ea:a8:49:68:60:9a:87:2e:02:89:b4:67:cd:bd:
         81:2c:70:c0:ae:39:fc:31:79:05:d3:55:ed:30:df:5e:5f:14:
         a8:7c:a6:f8:9c:93:11:e8:bf:5a:29:56:78:63:ee:6c:d9:f5:
         95:8f:e9:80:33:8e:9c:08:7f:74:f7:47:43:63:31:5c:da:38:
         c5:ea:3a:d6:cc:19:08:86:17:5d:5e:af:e0:54:72:11:8a:ab:
         d1:12:67:bc:1a:c5:fd:e8:2f:a3:df:80:c1:71:89:11:f0:fc:
         6f:8a:08:09:09:c6:41:7e:7d:8b:10:49:89:f5:d2:77:69:8b:
         db:d8:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:49:01 2024 by rpki-client on console-ams.rpki-client.org