Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666653a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a6666653a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          DIKb5sAKm+OenjZsgNavOulYkx38V03zYRS16d0GXXM=
Subject key identifier:   39:73:52:33:2A:6D:BF:95:36:5E:2D:22:51:1D:3C:9F:91:51:F7:CB
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       0721D81FB8150FE1DAEDB0FAAFDD625948F2C975
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666653a3a2f34382d3438203d3e203437323732.roa
Signing time:             Wed 24 Jul 2024 14:26:02 +0000
ROA not before:           Wed 24 Jul 2024 14:21:02 +0000
ROA not after:            Wed 23 Jul 2025 14:26:02 +0000
asID:                     47272
IP address blocks:        2602:f96d:ffe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:21:d8:1f:b8:15:0f:e1:da:ed:b0:fa:af:dd:62:59:48:f2:c9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Jul 24 14:21:02 2024 GMT
            Not After : Jul 23 14:26:02 2025 GMT
        Subject: CN=397352332A6DBF95365E2D22511D3C9F9151F7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:97:88:e4:14:6c:57:ce:86:79:d1:c2:72:
                    7e:9a:21:92:a1:bb:02:af:5c:75:04:a4:ae:6f:54:
                    17:ac:cc:79:04:45:24:82:b2:46:c3:e9:d2:73:4e:
                    f5:4b:3f:53:7a:07:ba:2a:a8:71:e7:1e:d7:df:a7:
                    bf:c9:f9:eb:6b:30:42:c9:42:ba:23:f5:1b:c8:59:
                    92:ff:71:05:0b:ce:22:00:b1:d8:36:84:a6:e7:a2:
                    1a:1d:d1:2e:d4:3a:21:da:be:37:47:43:bb:93:c5:
                    e8:00:aa:a4:1a:a4:13:01:ff:4f:cf:4f:9d:7b:2c:
                    3a:1f:e5:d0:67:c0:7f:6f:0f:dd:a9:25:ce:8a:ed:
                    0e:6d:66:ca:0c:1a:f1:ea:6f:56:c0:09:63:13:a2:
                    72:66:fa:b7:41:8c:d3:92:8e:10:46:b8:71:1d:3b:
                    07:44:20:a2:88:a6:96:c9:6a:2d:da:c3:8a:b6:e6:
                    ad:e4:76:60:4f:ae:d0:21:89:5b:36:44:64:5d:10:
                    55:13:03:d0:37:80:31:8f:b2:dd:1c:65:29:6a:1c:
                    fe:1d:a6:55:33:9a:b7:0b:ed:0b:84:9d:c4:eb:06:
                    1d:8a:85:7e:92:3b:05:05:e6:a2:f6:b5:25:c9:bc:
                    03:f5:d0:51:6c:0f:ae:ff:75:51:35:00:f8:c7:1a:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:52:33:2A:6D:BF:95:36:5E:2D:22:51:1D:3C:9F:91:51:F7:CB
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/323630323a663936643a6666653a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:33:b0:e4:6a:8a:90:78:e2:36:1a:9d:77:0e:65:97:07:
         cf:d0:be:ed:6d:eb:64:17:08:c6:b1:f2:53:39:e7:9f:ff:3a:
         23:b7:32:72:d2:e2:af:7c:e2:36:64:51:32:2f:2b:ad:d1:84:
         88:3b:93:db:ec:45:57:7f:6d:3e:c0:ed:c8:d7:7e:b4:89:4a:
         5b:f0:35:f4:7b:96:c6:2b:76:f7:12:4e:98:f9:7e:52:e3:a1:
         c0:45:8a:db:64:ba:e8:9e:85:2b:00:eb:34:61:0e:24:e9:48:
         35:13:9a:97:8e:06:b8:d4:80:97:61:26:26:8d:c5:72:fb:9d:
         3e:d3:b6:c0:e1:ed:7a:62:13:fe:e8:e7:99:3c:49:7c:d4:1f:
         02:4d:27:24:7a:5d:dd:c4:5c:15:ee:49:a8:ff:64:59:11:4d:
         b8:f2:93:87:6d:6c:dc:6f:0d:1c:e0:3c:da:43:b3:9a:5a:e5:
         45:bc:5d:18:fa:84:98:07:04:3d:a2:20:b0:43:aa:a9:db:15:
         b4:18:42:82:2a:66:74:e5:7b:02:6d:75:ee:22:c0:d9:1e:05:
         3a:c6:af:a3:b6:9a:08:6b:69:bc:fb:8f:0c:ae:2b:f3:f9:00:
         94:fb:df:d1:69:23:ac:79:f5:c8:eb:67:af:1c:cc:99:62:7d:
         2f:30:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:35 2024 by rpki-client on console-fra.rpki-client.org