Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666623a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6666623a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          R0+/Q92x5EzLtaNvVaeIfj9lan1Bg8z2kq+yv+mqvks=
Subject key identifier:   41:CE:73:73:83:46:17:CD:AA:0B:C0:9F:A6:27:D0:7E:FD:DE:AE:B8
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       263F5B4F653C41EBD1797BEFFC400F024166B3E7
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666623a3a2f34382d3438203d3e203437323732.roa
Signing time:             Thu 18 Jul 2024 17:10:22 +0000
ROA not before:           Thu 18 Jul 2024 17:05:22 +0000
ROA not after:            Thu 17 Jul 2025 17:10:22 +0000
asID:                     47272
IP address blocks:        2602:f96d:ffb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3f:5b:4f:65:3c:41:eb:d1:79:7b:ef:fc:40:0f:02:41:66:b3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 18 17:05:22 2024 GMT
            Not After : Jul 17 17:10:22 2025 GMT
        Subject: CN=41CE7373834617CDAA0BC09FA627D07EFDDEAEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:3e:8e:a7:c1:00:0e:a3:fe:64:7b:db:b7:
                    a7:b1:32:e9:c7:64:c1:74:de:1d:42:71:80:cf:75:
                    ce:fe:e3:ba:9c:27:39:6d:e8:d6:5d:9e:ad:a8:4a:
                    49:b2:78:2f:8f:e9:ac:bf:a7:6a:ef:86:5a:3c:84:
                    43:2b:dc:1a:f5:d1:70:14:d0:5a:55:e7:59:32:db:
                    f0:1c:37:a9:8b:65:22:b8:28:eb:16:0f:25:ae:38:
                    23:2b:ec:2b:cf:59:23:1a:97:7c:be:e2:97:cd:1a:
                    26:2f:b9:0e:be:da:02:00:b3:37:41:e5:d2:7a:d9:
                    34:3b:9c:16:bf:de:c5:1b:14:cf:48:8d:80:46:61:
                    71:e2:03:39:86:2c:6e:9f:d3:c4:7f:cd:e4:0a:06:
                    4f:dc:a5:bd:ad:a0:69:65:19:8d:0b:13:fb:6e:03:
                    00:f4:6e:4e:ef:76:d8:25:81:42:1b:87:31:9c:6c:
                    27:ad:17:ea:1a:a0:8c:3e:d7:ee:a1:59:7d:34:d1:
                    6d:4d:f6:80:27:67:6f:2d:59:b5:b8:5b:81:d4:3b:
                    f2:d4:b5:95:30:da:82:c0:6f:25:f9:95:5b:aa:79:
                    e2:e7:ad:a8:0d:8c:dc:9f:0d:bf:36:34:7a:7e:34:
                    8e:d6:eb:40:9b:fa:08:03:6d:45:04:47:fc:ff:ec:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CE:73:73:83:46:17:CD:AA:0B:C0:9F:A6:27:D0:7E:FD:DE:AE:B8
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666623a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffb::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:08:ea:89:4c:24:a1:a1:d8:8e:e7:c6:da:ff:6a:ab:cf:fb:
         4b:0a:33:89:2f:6b:e2:c9:70:f4:6c:b1:2f:ac:21:ae:fa:fa:
         e5:62:88:d0:39:a8:d6:4f:0b:20:93:38:d9:6b:c1:50:61:9e:
         be:69:f9:9c:5e:14:14:bf:48:15:21:66:6f:3c:cd:71:0c:98:
         61:d5:4a:77:94:d6:4b:8a:e2:32:34:cf:ca:61:31:72:ea:b3:
         9b:81:11:40:af:45:07:c0:f3:b1:dd:52:d0:48:1c:26:86:08:
         66:8b:da:4d:07:74:20:18:0a:35:40:41:52:67:81:e8:16:fd:
         99:14:8f:79:16:4a:00:ae:fd:c8:29:86:4c:32:eb:8f:af:f4:
         9f:53:3c:6d:7c:41:07:14:50:29:53:24:e9:f6:6f:27:cf:7d:
         33:c8:5d:a2:2b:79:5e:25:ff:37:f1:51:11:21:af:57:e9:18:
         2f:ff:db:bc:a6:da:b9:c6:7c:c9:6a:80:0f:c3:6f:bf:fb:99:
         05:2f:7d:b5:36:a7:a3:76:67:cc:dc:64:5f:55:6d:d3:a2:eb:
         6f:20:03:f3:c2:21:3f:43:28:98:d7:ed:c1:ef:d5:39:4c:79:
         4c:86:b7:d9:93:6a:61:18:3e:e2:83:5d:1b:26:a6:26:09:9a:
         b3:76:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:35 2024 by rpki-client on console-fra.rpki-client.org