Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666613a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6666613a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          ynCdIVC7FyYdu1EipsLo0Hjd3bWWpmD1VwYiKUygXaQ=
Subject key identifier:   D6:17:55:00:21:65:9D:F2:1B:03:D3:79:6E:97:A7:0B:75:48:BC:9B
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       635982257818FE154E3A4B0BCECF21E9BA2EFA9C
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666613a3a2f34382d3438203d3e203437323732.roa
Signing time:             Tue 16 Jul 2024 21:54:04 +0000
ROA not before:           Tue 16 Jul 2024 21:49:04 +0000
ROA not after:            Tue 15 Jul 2025 21:54:04 +0000
asID:                     47272
IP address blocks:        2602:f96d:ffa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:59:82:25:78:18:fe:15:4e:3a:4b:0b:ce:cf:21:e9:ba:2e:fa:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 16 21:49:04 2024 GMT
            Not After : Jul 15 21:54:04 2025 GMT
        Subject: CN=D617550021659DF21B03D3796E97A70B7548BC9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:f2:17:87:51:cd:86:f1:1b:1d:5b:9e:38:
                    a3:d6:2b:2c:95:0a:82:ec:ab:9a:80:a9:e3:0d:02:
                    c6:18:6f:84:62:25:65:d9:94:f3:63:a4:ef:36:40:
                    25:38:49:36:dc:b5:3c:c4:90:72:be:c7:cc:bb:17:
                    5c:e5:6a:a5:46:d6:00:76:e2:76:b8:49:00:d7:e8:
                    3c:ad:0d:2e:56:ff:33:f6:30:7e:3c:2e:47:94:6a:
                    e1:2f:ec:d4:4b:d4:2d:0e:91:bf:06:a1:83:c1:83:
                    ee:73:ae:1e:e8:c7:99:11:fd:4b:cc:75:9c:a0:08:
                    98:9e:b6:34:44:2a:02:a1:e1:ab:96:b3:12:e1:5c:
                    15:c4:99:05:e4:87:9c:26:48:50:03:c6:3a:ce:27:
                    24:22:32:2e:59:1b:34:1a:96:41:71:2b:b6:37:d8:
                    fc:e3:6c:16:1f:f4:22:58:ad:71:47:af:60:0f:29:
                    93:4e:f8:bb:d2:68:07:ef:a0:58:c4:5a:1b:b4:99:
                    d4:d2:e7:1b:b8:cd:20:e6:e3:03:fc:59:f4:e7:62:
                    0b:e9:f0:8a:d5:4d:db:02:fa:8d:8b:76:81:02:cf:
                    c3:03:3e:ab:a7:84:16:b7:4c:3c:e0:90:24:8a:0d:
                    4e:8f:f9:de:ed:3a:f4:6a:01:13:67:fb:55:54:be:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:55:00:21:65:9D:F2:1B:03:D3:79:6E:97:A7:0B:75:48:BC:9B
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666613a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffa::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:75:48:00:b9:d2:74:15:6f:c8:0c:65:92:8f:ac:c8:54:
         b8:83:ea:27:94:5f:75:24:95:6e:5a:30:0b:d5:ca:b3:0b:51:
         26:d2:3e:e6:3e:8e:6a:b1:4e:0b:9a:6a:5f:a6:10:41:f4:18:
         c7:0e:26:26:95:a6:b8:f1:be:37:f3:2b:a0:34:9a:09:95:ba:
         17:91:85:48:a3:92:bb:a9:24:8e:a8:b3:09:56:46:ed:9c:cd:
         da:19:6f:d1:65:68:53:32:cd:41:80:f0:d0:3a:06:d6:c9:07:
         bc:f0:86:e8:32:4e:b8:58:fe:13:5d:66:64:21:37:8d:7e:9e:
         ad:8c:b6:e3:e6:5a:b5:d4:50:cb:d6:50:5c:75:f9:b1:99:9d:
         fd:6f:30:d2:e7:7c:0f:8f:69:d2:c8:a9:c3:14:ae:51:44:7d:
         61:bb:a2:28:fc:7e:2c:7d:57:e9:67:16:14:e6:48:50:f3:77:
         12:5d:bb:cb:96:b8:9c:bf:79:7a:46:8a:95:03:0a:e1:42:29:
         73:08:b4:08:be:f6:5b:7e:1d:bd:35:7b:24:e6:ff:e9:d0:9a:
         96:7a:b3:20:94:26:75:27:3b:2b:c3:97:d7:5f:ea:7d:7e:c8:
         3e:ef:22:e9:87:4d:d0:74:be:de:61:e6:5b:c9:f2:22:21:e0:
         cd:93:19:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:35 2024 by rpki-client on console-fra.rpki-client.org