Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34342d3434203d3e203135333533.roa
File:                     323630323a666131313a3130303a3a2f34342d3434203d3e203135333533.roa (raw, json)
Hash identifier:          1ZFjGQZ2jeH4KG7WYNU7NFY8tb3bUh9jeIplaVtecpo=
Subject key identifier:   CC:48:9C:0F:30:70:64:F3:A6:69:A0:7D:24:20:69:F4:E0:75:15:C5
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       070D1F749FE5E4EEE713E1724B0EE28CD5F3BA61
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34342d3434203d3e203135333533.roa
Signing time:             Sat 01 Jun 2024 08:11:58 +0000
ROA not before:           Sat 01 Jun 2024 08:06:58 +0000
ROA not after:            Sat 31 May 2025 08:11:58 +0000
asID:                     15353
IP address blocks:        2602:fa11:100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0d:1f:74:9f:e5:e4:ee:e7:13:e1:72:4b:0e:e2:8c:d5:f3:ba:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jun  1 08:06:58 2024 GMT
            Not After : May 31 08:11:58 2025 GMT
        Subject: CN=CC489C0F307064F3A669A07D242069F4E07515C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:a7:c2:ac:64:98:62:c1:c6:e9:09:20:c4:
                    01:ac:52:aa:ed:87:58:9f:a8:29:d1:a9:c7:35:30:
                    2c:19:7d:ba:12:a4:a7:07:68:ec:f0:99:9f:8a:3c:
                    04:09:b2:90:70:94:7d:59:b1:28:58:8a:33:8e:e2:
                    52:40:85:a3:a9:cf:1b:f2:8b:67:e8:83:4d:79:4b:
                    e4:5d:e2:d0:95:09:0b:df:eb:b4:3e:24:e3:16:12:
                    35:38:a2:12:a7:94:de:42:26:1e:0d:28:db:55:cb:
                    f4:32:d5:91:d5:3c:3d:37:70:e8:51:c7:73:97:38:
                    f6:aa:a8:73:84:2a:70:97:d1:67:8e:7a:26:14:29:
                    70:cb:c7:92:eb:59:20:fe:9a:77:15:04:70:0d:d2:
                    ff:89:24:3b:32:8a:50:58:d2:4e:3f:dd:a6:f0:66:
                    93:10:19:c0:3a:f1:aa:2b:bf:52:51:f7:9d:33:b2:
                    08:24:d0:fa:76:f2:5d:4d:e4:07:17:fa:01:5e:fd:
                    a7:75:eb:97:c8:e7:45:4d:73:64:57:a5:e4:f6:17:
                    f8:ad:b9:e6:f3:4b:e0:d6:08:b6:24:3a:f1:75:fb:
                    3e:71:e5:33:d5:8a:31:10:46:bb:06:68:21:c1:98:
                    02:52:5d:89:88:35:2f:da:98:73:40:48:33:23:93:
                    aa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:48:9C:0F:30:70:64:F3:A6:69:A0:7D:24:20:69:F4:E0:75:15:C5
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34342d3434203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:ad:e2:a6:a4:df:9e:55:1d:4b:78:41:d2:31:7d:85:a6:
         ec:3f:a4:a9:24:0b:4b:a3:ca:93:bf:c9:65:00:84:84:bc:aa:
         ca:08:2f:e1:cb:a1:bd:20:c9:f6:1e:47:13:e6:d1:f4:28:ac:
         4a:8c:73:20:df:a7:ea:5f:8d:23:02:e8:5a:6c:62:4b:07:cf:
         22:3c:35:a6:b5:d3:6b:56:4e:f5:26:8a:95:8e:8d:11:e2:6a:
         44:ae:b6:cd:ba:b2:12:76:a8:41:33:09:9d:19:a1:f8:76:6d:
         32:2b:27:f7:22:df:c6:4b:62:be:f9:19:1a:f1:a3:f4:9c:95:
         f9:ed:8e:85:78:50:0d:08:06:38:8b:e8:38:e1:1b:9a:f6:bb:
         4f:4e:fe:2e:50:51:e6:a9:c5:9b:7e:74:98:2e:6d:4c:c2:1b:
         df:2b:00:3c:31:a0:ab:f7:68:de:be:43:40:77:f4:95:4b:d7:
         55:06:89:1d:59:06:93:29:bf:01:3f:a3:e8:01:25:cb:25:d2:
         65:a8:54:10:47:97:7d:fc:9b:a4:86:4d:5a:03:d8:b1:4c:2b:
         e2:d6:3b:43:5e:fa:b8:6c:6b:5d:40:22:40:4e:34:6b:a9:0e:
         30:4a:a2:e9:c1:37:be:0a:1f:b8:0a:25:4d:d4:29:a2:e9:f6:
         19:85:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:13 2024 by rpki-client on console-ams.rpki-client.org