Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666643a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6666643a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          fLWMsLSAdpUdkENXkPCdO/qjk63pnc3hh7Ird4qsmbo=
Subject key identifier:   90:E4:D9:B5:7B:07:34:C1:CF:34:17:E3:55:9E:44:D7:C0:05:F6:CE
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       1A3FC882B8A257B560D8075E24B11FF963AF8F9A
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666643a3a2f34382d3438203d3e203437323732.roa
Signing time:             Mon 22 Jul 2024 19:46:01 +0000
ROA not before:           Mon 22 Jul 2024 19:41:01 +0000
ROA not after:            Mon 21 Jul 2025 19:46:01 +0000
asID:                     47272
IP address blocks:        2602:f96d:ffd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3f:c8:82:b8:a2:57:b5:60:d8:07:5e:24:b1:1f:f9:63:af:8f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 22 19:41:01 2024 GMT
            Not After : Jul 21 19:46:01 2025 GMT
        Subject: CN=90E4D9B57B0734C1CF3417E3559E44D7C005F6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:ba:6d:9e:13:dc:f9:01:8b:1d:0e:5a:ad:
                    73:df:5a:83:1c:15:be:8f:c2:fc:6f:52:e6:9b:f5:
                    d1:36:52:ae:b3:2b:d1:2b:6e:8e:4f:9c:ec:47:1a:
                    93:27:f8:b6:e6:fc:6b:c1:4f:4f:73:c3:c8:aa:03:
                    b6:33:9e:ba:1e:92:c4:7c:fd:fd:43:8a:dd:03:5d:
                    91:e5:59:ae:6c:b4:cb:f0:49:e8:e5:83:41:77:98:
                    6b:cb:8d:47:a0:73:04:9e:a3:f9:0b:13:f4:6e:5a:
                    17:0d:5f:46:62:b4:13:e5:ea:29:e3:0a:4c:69:58:
                    0f:f3:8f:67:6d:d1:d0:64:c4:74:95:37:80:4d:5c:
                    32:a1:db:96:af:c2:49:32:2c:2f:f9:90:17:7f:8b:
                    cf:c3:9c:4e:d3:b6:77:ff:17:82:94:1d:b0:e4:08:
                    c9:69:1b:52:bb:aa:84:69:04:7b:50:8c:70:5c:5e:
                    28:9f:c4:38:01:38:4a:af:88:25:8d:0d:6d:d4:e4:
                    8a:13:45:65:08:ba:79:42:e3:dd:03:94:dc:62:2c:
                    fb:63:30:e8:ab:bd:5c:b0:1a:cc:3d:3b:98:fe:24:
                    7a:26:5f:23:d5:6b:c0:4f:34:bf:60:8f:6c:30:5b:
                    59:f2:c1:41:02:2f:fc:76:14:11:07:5b:24:96:11:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E4:D9:B5:7B:07:34:C1:CF:34:17:E3:55:9E:44:D7:C0:05:F6:CE
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666643a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:97:3b:61:ef:f5:5e:f9:e2:fa:9e:eb:fc:36:59:57:2d:
         bb:29:0e:5d:98:c9:cb:b5:60:66:37:e3:5d:d2:2a:57:10:a1:
         f4:e2:71:a8:2b:d6:7c:ea:b7:04:80:1c:f5:d6:fd:0a:18:44:
         32:45:02:7b:8c:58:9f:88:27:fa:36:72:7a:52:f2:80:3b:4c:
         71:78:ae:d5:79:c2:50:1a:29:b9:57:a6:6d:01:56:72:75:01:
         fd:1e:c5:aa:e2:ff:a1:6b:97:27:ed:f4:5e:62:02:68:ec:67:
         db:53:94:c4:b9:85:b2:38:8b:2f:ba:c1:40:80:6f:af:0f:3d:
         f2:1e:52:49:94:32:c7:17:12:57:f0:97:9c:2d:18:e2:d8:4c:
         7a:7e:22:7e:7d:9b:86:af:4f:66:c0:bb:b8:6c:e8:2f:4f:2c:
         d6:56:03:bf:64:e4:b0:26:b7:7e:4c:bb:04:c0:b8:0e:33:ac:
         f2:30:bd:a4:bd:4b:f7:2e:c2:16:bf:b0:b8:05:ac:e1:b9:13:
         91:f8:ab:fe:0b:52:69:59:ba:e5:64:fd:5d:0d:74:57:c1:ef:
         3d:8e:57:53:3b:4a:ab:8a:56:d5:81:4f:50:21:cc:42:f9:24:
         ee:c2:03:63:4d:8e:fc:74:04:df:0e:d6:bd:7b:f6:92:9f:43:
         53:83:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:35 2024 by rpki-client on console-ams.rpki-client.org