Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031653a3a2f34382d3438203d3e20323136303433.roa
File:                     326130363a313238333a633031653a3a2f34382d3438203d3e20323136303433.roa (raw, json)
Hash identifier:          rMbfh7lMnlG23jKNBSxnE+CtqSGMDuN7/04TbDYpoaI=
Subject key identifier:   ED:0E:CF:C6:79:62:D5:43:88:E1:5C:F9:17:2B:3C:51:A0:54:E5:87
Certificate issuer:       /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
Certificate serial:       588AFA738A5D581FD18CE27A07D9A100C71D26EC
Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031653a3a2f34382d3438203d3e20323136303433.roa
Signing time:             Sun 28 Apr 2024 20:17:16 +0000
ROA not before:           Sun 28 Apr 2024 20:12:16 +0000
ROA not after:            Sun 27 Apr 2025 20:17:16 +0000
asID:                     216043
IP address blocks:        2a06:1283:c01e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 00:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8a:fa:73:8a:5d:58:1f:d1:8c:e2:7a:07:d9:a1:00:c7:1d:26:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24
        Validity
            Not Before: Apr 28 20:12:16 2024 GMT
            Not After : Apr 27 20:17:16 2025 GMT
        Subject: CN=ED0ECFC67962D54388E15CF9172B3C51A054E587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:4d:9b:1a:18:04:b7:b6:63:3f:31:67:bf:
                    f6:dd:52:88:cf:5e:f4:55:98:cc:fb:0a:c8:d3:88:
                    b9:ef:33:8b:24:03:6b:f9:f6:16:c6:de:89:c5:4a:
                    4a:ca:ef:69:86:12:8f:2f:36:27:9d:cf:e5:2d:89:
                    51:c6:18:43:41:e4:6f:a3:41:35:62:16:56:d0:e3:
                    de:2d:49:c1:6b:41:bf:4f:15:69:95:1a:62:16:69:
                    f4:9c:2b:c4:73:a6:81:9e:b6:d6:6e:75:87:77:48:
                    3c:96:f2:e3:74:8b:aa:96:23:75:77:6b:50:71:b9:
                    8b:af:bd:9f:36:c7:d3:a3:16:28:3d:88:4a:38:4d:
                    b7:65:ef:e7:e3:ef:e6:cf:97:48:28:87:70:3c:9d:
                    67:f2:b4:f9:55:78:c2:6b:37:4e:e2:8e:0a:95:64:
                    e0:11:b9:9d:bd:0b:74:32:4d:60:c3:27:d8:fa:e0:
                    84:c8:7f:a9:ed:d9:eb:b9:c2:fd:52:99:cd:87:8e:
                    1f:3f:58:51:58:04:5e:24:db:0a:30:78:97:c8:50:
                    d1:ce:62:2d:99:7d:ec:57:68:ee:e9:0b:2d:a6:66:
                    a4:ec:78:e9:54:27:89:c1:dc:d4:88:26:88:65:b7:
                    29:1b:6c:c9:42:9c:88:c7:7e:ba:99:3f:8b:0c:b2:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0E:CF:C6:79:62:D5:43:88:E1:5C:F9:17:2B:3C:51:A0:54:E5:87
            X509v3 Authority Key Identifier:
                keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a633031653a3a2f34382d3438203d3e20323136303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c01e::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:b5:10:68:af:f5:cd:c7:bd:9e:02:03:12:10:45:7f:8a:02:
         86:74:ba:7f:47:37:30:be:d2:9a:2b:9d:cb:d3:72:b6:ef:00:
         f0:84:6a:ee:33:3f:42:d4:ad:d0:b3:a4:bd:a7:20:5f:cf:5c:
         67:45:96:a4:65:fd:c4:d7:3b:85:d1:31:43:18:eb:25:96:1e:
         0f:18:12:84:af:7c:af:c9:0d:6d:46:73:87:28:55:33:ba:65:
         a4:90:87:c3:2c:69:72:d3:b3:2f:2a:a1:1b:29:d6:67:d9:75:
         dd:91:86:7a:e7:9f:89:c2:da:67:6d:b3:38:bd:58:f3:33:30:
         c5:e6:78:e1:c8:88:ae:0f:06:3e:18:c2:e9:ee:a5:43:17:1b:
         04:7b:55:0d:7f:ca:78:c8:43:3d:0e:a2:34:17:6b:db:e7:09:
         46:1a:b2:09:49:dc:79:12:77:8f:a5:7b:fa:72:d6:b7:b0:40:
         30:a6:f8:c4:9b:75:80:2b:a4:7c:df:62:9b:ca:4e:f6:15:8b:
         3b:35:61:02:c5:9c:6a:25:b1:c6:61:fb:25:22:91:b5:e7:2c:
         fc:46:e3:0f:af:d2:1d:3e:df:ce:29:51:06:f1:6d:a6:52:9b:
         ef:69:5a:28:e3:07:e2:80:3b:ae:4b:00:e1:d8:8d:71:54:66:
         f1:46:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 15:00:40 2024 by rpki-client on console-fra.rpki-client.org