Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666633a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6666633a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          KtzV2WFlfEaQsVgPmc4oTAXuiaSbxWCl/p9u93CxaUY=
Subject key identifier:   50:B4:4C:96:1D:C0:2E:29:6E:44:BA:6B:10:E2:8E:7F:EC:F1:F1:2A
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       1179FFF6DE353D4FA2B09B81ECA27AEA554A25A5
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666633a3a2f34382d3438203d3e203437323732.roa
Signing time:             Mon 22 Jul 2024 16:49:16 +0000
ROA not before:           Mon 22 Jul 2024 16:44:16 +0000
ROA not after:            Mon 21 Jul 2025 16:49:16 +0000
asID:                     47272
IP address blocks:        2602:f96d:ffc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 21:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:79:ff:f6:de:35:3d:4f:a2:b0:9b:81:ec:a2:7a:ea:55:4a:25:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 22 16:44:16 2024 GMT
            Not After : Jul 21 16:49:16 2025 GMT
        Subject: CN=50B44C961DC02E296E44BA6B10E28E7FECF1F12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:1a:f5:09:c4:e5:b3:c5:85:d5:3a:38:dc:
                    5b:f1:1f:00:c2:9c:d5:0f:a0:06:c7:4f:b2:49:bb:
                    49:a0:1f:76:3e:b7:a9:e5:e2:f1:d2:57:8b:7e:59:
                    53:16:ac:fc:e9:98:78:c8:32:6b:68:15:b9:5d:63:
                    b4:c3:5a:01:d3:bf:3b:ec:5c:8e:4f:b0:46:01:98:
                    b9:02:39:6c:f7:67:07:fa:9f:68:41:74:de:d5:10:
                    2d:81:4a:d2:d4:b6:dc:20:58:7e:0f:1c:2a:ac:35:
                    ea:79:34:80:49:e3:09:1e:04:58:26:f5:ba:81:21:
                    94:3a:a2:9c:c2:91:a2:ed:50:bd:4b:d3:f1:84:51:
                    33:4a:fe:e6:7b:69:db:ab:18:23:9e:04:42:8d:48:
                    0d:5e:11:58:93:82:52:83:cb:59:cb:ed:56:7d:ab:
                    3b:a2:06:39:c8:43:8f:67:2d:0d:bf:3a:f9:2f:f4:
                    97:ea:52:3b:bc:6f:c6:c0:9b:7b:12:79:0b:53:ef:
                    93:07:5e:07:64:56:c4:79:2e:42:17:16:fd:5b:58:
                    b0:1b:44:08:3f:1c:6e:41:9a:4b:aa:fc:48:89:23:
                    d5:a8:7f:90:e2:e0:8c:03:cd:18:01:99:a9:74:42:
                    38:f2:ef:8e:31:95:f7:98:51:53:e9:b5:f5:7c:6e:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B4:4C:96:1D:C0:2E:29:6E:44:BA:6B:10:E2:8E:7F:EC:F1:F1:2A
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666633a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:4c:b3:82:d3:5a:c2:a3:14:68:5b:34:4e:c9:df:2d:69:
         b2:e3:d9:4b:9e:fd:0b:87:ff:66:ff:27:f6:f5:f8:3a:6a:dc:
         19:3a:5d:48:5d:e1:29:40:ce:d2:b9:41:c1:44:1b:a2:18:24:
         cd:58:1a:89:e0:be:10:e3:b6:9b:99:eb:d7:a2:0d:20:d8:28:
         44:59:45:af:01:d2:60:2f:c2:06:b6:9b:8b:59:94:71:e3:87:
         6a:f9:8c:eb:1f:16:06:7c:f5:66:34:4e:26:2d:c4:6d:b8:e0:
         df:0a:6d:d0:80:dd:4e:78:9d:30:10:06:04:a8:57:77:e7:33:
         f6:a7:d8:6a:16:ae:0e:f4:9d:ba:6a:be:86:33:d5:db:94:15:
         6b:a0:4b:ad:f8:93:a5:d8:bf:cb:b8:fb:15:2a:64:cd:1b:41:
         3e:63:a1:98:3d:16:c4:e7:2b:d0:f9:d3:ce:a0:03:e3:c5:14:
         de:31:42:eb:80:81:be:26:32:1d:b2:48:81:f4:dd:da:e7:94:
         74:7a:af:cd:fa:14:ff:28:54:4c:4f:bf:22:19:ba:a7:6f:74:
         c7:b2:44:46:3c:3d:bd:33:ee:2c:49:9b:a6:0b:49:95:ca:ad:
         33:d9:34:47:21:6d:d4:44:b0:55:e5:29:f9:ae:8f:2f:5b:56:
         44:7b:56:af
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUEXn/9t41PU+isJuB7KJ66lVKJaUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTY4YjQwZjY1Y2ZjMTc0NDVmODliMjE5
MmE1NzM3OWQ3ZjEzYmU4ZmEwHhcNMjQwNzIyMTY0NDE2WhcNMjUwNzIxMTY0OTE2
WjAzMTEwLwYDVQQDEyg1MEI0NEM5NjFEQzAyRTI5NkU0NEJBNkIxMEUyOEU3RkVD
RjFGMTJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QYa9QnE5bPF
hdU6ONxb8R8AwpzVD6AGx0+ySbtJoB92Prep5eLx0leLfllTFqz86Zh4yDJraBW5
XWO0w1oB07877FyOT7BGAZi5Ajls92cH+p9oQXTe1RAtgUrS1LbcIFh+DxwqrDXq
eTSASeMJHgRYJvW6gSGUOqKcwpGi7VC9S9PxhFEzSv7me2nbqxgjngRCjUgNXhFY
k4JSg8tZy+1Wfas7ogY5yEOPZy0Nvzr5L/SX6lI7vG/GwJt7EnkLU++TB14HZFbE
eS5CFxb9W1iwG0QIPxxuQZpLqvxIiSPVqH+Q4uCMA80YAZmpdEI48u+OMZX3mFFT
6bX1fG5B+QIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFFC0TJYdwC4pbkS6axDijn/s
8fEqMB8GA1UdIwQYMBaAFG16Jmcwko2d/f2s429zrInkJOIoMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2Mx
LTI3NjU0M2EyNWM3ZC80LzZEN0EyNjY3MzA5MjhEOURGREZEQUNFMzZGNzNBQzg5
RTQyNEUyMjguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03
ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTY4YjQwZjY1Y2ZjMTc0NDVmODliMjE5MmE1
NzM3OWQ3ZjEzYmU4ZmEuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH
MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC80LzMyMzYzMDMy
M2E2NjM5MzY2NDNhNjY2NjYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNzMy
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACYC+W0P/DANBgkqhkiG9w0BAQsFAAOCAQEADoxMs4LT
WsKjFGhbNE7J3y1psuPZS579C4f/Zv8n9vX4OmrcGTpdSF3hKUDO0rlBwUQbohgk
zVgaieC+EOO2m5nr16ININgoRFlFrwHSYC/CBrabi1mUceOHavmM6x8WBnz1ZjRO
Ji3Ebbjg3wpt0IDdTnidMBAGBKhXd+cz9qfYahauDvSdumq+hjPV25QVa6BLrfiT
pdi/y7j7FSpkzRtBPmOhmD0WxOcr0PnTzqAD48UU3jFC64CBviYyHbJIgfTd2ueU
dHqvzfoU/yhUTE+/Ihm6p290x7JERjw9vTPuLEmbpgtJlcqtM9k0RyFt1ESwVeUp
+a6PL1tWRHtWrw==
-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:24 2024 by rpki-client on console-fra.rpki-client.org