Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666383a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6666383a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          98ZDfqFPCF2ZztQG8Q11p/61b2qzrjt8rW4xUX3zLv4=
Subject key identifier:   4E:15:5A:EB:58:0C:20:9D:74:84:1C:82:9C:25:57:E7:B1:C8:E3:7C
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       4D2049362380C04EAFF521949E72A9F13D60A426
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666383a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sat 13 Jul 2024 15:08:48 +0000
ROA not before:           Sat 13 Jul 2024 15:03:48 +0000
ROA not after:            Sat 12 Jul 2025 15:08:48 +0000
asID:                     47272
IP address blocks:        2602:f96d:ff8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:20:49:36:23:80:c0:4e:af:f5:21:94:9e:72:a9:f1:3d:60:a4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 13 15:03:48 2024 GMT
            Not After : Jul 12 15:08:48 2025 GMT
        Subject: CN=4E155AEB580C209D74841C829C2557E7B1C8E37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:ee:09:4e:d9:d5:2a:22:dd:49:4a:f2:bd:
                    43:6f:89:b2:14:b9:42:e4:b2:0e:84:53:a5:b9:1d:
                    c3:69:d9:bc:9e:99:f8:92:0f:c4:93:18:70:10:a1:
                    8b:3b:e3:bf:d6:db:6e:40:2a:9d:7d:73:fd:e2:37:
                    30:db:e0:55:67:7c:d9:03:74:c0:24:41:06:6b:13:
                    7c:8e:bb:52:cc:24:1d:f9:52:75:45:15:e4:88:cd:
                    30:fb:40:08:76:c2:1f:0c:57:cc:10:13:80:cf:86:
                    42:f5:36:a2:92:ce:98:27:f4:d8:e4:e6:f1:0b:4a:
                    a1:02:f2:62:57:71:23:57:7d:6a:d6:2a:3c:b6:22:
                    36:ab:e9:cd:9e:7b:be:1e:9b:91:0d:cb:e7:45:c5:
                    fe:83:e2:44:ac:5a:1d:a5:21:e1:32:12:f6:be:6a:
                    ea:89:2d:86:86:b6:c4:b6:32:9f:8e:4a:36:0d:b9:
                    b0:ac:5e:a5:aa:a9:a0:74:7e:58:26:5b:c2:94:01:
                    37:f3:6c:4a:61:c6:5b:8b:b2:1f:56:19:a2:2a:63:
                    f9:fd:8b:8f:17:7e:f5:67:89:d1:31:93:17:be:bc:
                    09:57:e6:7c:35:f4:10:4c:68:8f:83:fc:76:9a:e3:
                    5a:04:55:2f:61:4f:b4:20:0d:3f:29:51:85:56:c0:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:15:5A:EB:58:0C:20:9D:74:84:1C:82:9C:25:57:E7:B1:C8:E3:7C
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666383a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ff8::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:9d:31:a0:4c:50:6e:83:ee:53:3e:1d:87:69:ff:85:1d:
         62:df:4a:c2:e4:db:82:d0:86:c2:ee:e0:6e:aa:57:cc:84:fd:
         57:9b:a5:f0:da:e1:fb:9a:19:5c:5a:c8:15:37:77:33:98:26:
         c3:f1:ec:d7:8d:10:87:88:a3:b8:48:ea:95:39:78:af:f6:7b:
         1f:05:4e:c4:36:36:5b:b7:ca:d7:29:3d:cc:b9:c0:a9:e5:aa:
         b5:17:24:16:08:51:0e:d8:f0:a4:45:bd:42:b0:6b:f0:98:72:
         90:d3:98:52:9b:18:28:13:5f:81:b6:64:14:eb:ca:1b:96:cc:
         b5:8a:28:09:13:03:91:2c:e7:cf:bb:38:7f:4b:03:4f:87:29:
         e8:83:0b:4b:09:bd:0e:38:88:30:66:f7:58:93:4c:62:46:1a:
         a4:76:66:d7:cb:c9:5f:b8:39:df:2a:81:41:a0:04:c0:65:47:
         d4:76:63:79:b7:c6:9a:da:e1:d9:24:4d:5c:a7:d5:71:e6:7c:
         90:10:db:27:b9:8f:a5:d2:44:04:bc:85:43:0c:cf:48:1d:e7:
         27:e7:ca:58:e1:ab:e0:e9:f0:08:3a:85:9a:cf:9c:42:d5:83:
         70:9e:07:90:18:09:a4:97:f2:4b:7c:d1:5c:c7:1a:a9:36:e4:
         37:0a:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:35 2024 by rpki-client on console-fra.rpki-client.org