Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34382d3438203d3e203630303235.roa
File:                     323630323a666131313a3130303a3a2f34382d3438203d3e203630303235.roa (raw, json)
Hash identifier:          pVxbiZ74TTPj/Iq38TV1xtDPTwsS6W072PYZBj+CmPM=
Subject key identifier:   40:CC:C3:9A:89:F0:15:A1:E9:28:FC:5F:FA:F4:41:BF:67:2B:95:5A
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       40992371F3337BE1BC5CA5027428F6BAB26B4BBD
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34382d3438203d3e203630303235.roa
Signing time:             Fri 22 Mar 2024 06:43:08 +0000
ROA not before:           Fri 22 Mar 2024 06:38:08 +0000
ROA not after:            Fri 21 Mar 2025 06:43:08 +0000
asID:                     60025
IP address blocks:        2602:fa11:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:99:23:71:f3:33:7b:e1:bc:5c:a5:02:74:28:f6:ba:b2:6b:4b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Mar 22 06:38:08 2024 GMT
            Not After : Mar 21 06:43:08 2025 GMT
        Subject: CN=40CCC39A89F015A1E928FC5FFAF441BF672B955A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:30:e6:d5:35:5c:96:d1:32:e6:c4:8d:61:
                    d0:43:3e:2f:2b:83:59:a8:6f:e6:e4:1a:1b:67:4f:
                    83:2b:19:37:94:f7:c9:d4:f4:46:4c:f6:23:c1:66:
                    70:07:c8:96:a8:27:56:d5:37:d9:8d:bc:3c:70:67:
                    02:e3:6e:ca:c6:91:7a:a9:d4:de:ac:49:6a:1e:d2:
                    8c:7e:27:f0:3d:96:f5:3f:9d:91:57:22:cc:51:2a:
                    c5:4d:8e:d8:9f:82:75:9b:86:65:37:8b:40:e1:97:
                    8a:79:9b:10:c5:cc:3a:9a:6d:a9:64:2d:2b:e1:7e:
                    8b:ec:89:b0:73:7a:5d:9f:19:3c:d4:32:a2:73:16:
                    b8:bd:f3:36:5c:44:9d:ea:af:9f:57:ef:85:30:4d:
                    65:19:0c:53:8f:2a:77:92:37:75:bf:5d:c0:af:04:
                    f8:52:ea:64:46:97:47:62:49:7c:74:31:07:38:c1:
                    89:45:fa:41:16:0d:78:2d:aa:e5:d3:46:8c:fc:35:
                    43:29:8a:a6:59:0f:f3:54:84:59:77:92:ad:4b:50:
                    8d:5d:95:d3:19:e2:e0:92:84:77:bb:11:91:cb:45:
                    4e:4e:6c:73:1d:95:dd:06:90:4d:f8:0e:56:fd:eb:
                    16:e9:94:de:93:b1:c7:3f:7e:a1:d9:4b:92:9c:82:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CC:C3:9A:89:F0:15:A1:E9:28:FC:5F:FA:F4:41:BF:67:2B:95:5A
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3130303a3a2f34382d3438203d3e203630303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:3a:fe:7e:5b:88:4b:36:ae:7f:76:74:df:e0:25:55:5d:97:
         cb:97:25:a8:5a:79:74:a8:41:30:85:0d:96:36:2b:86:e5:7d:
         5c:8d:9e:1b:ea:3b:22:05:cc:d4:4f:84:6e:ba:4c:9a:50:21:
         2e:75:03:b4:2c:91:17:dc:22:0d:10:0c:99:3c:ef:d4:0b:88:
         37:ab:2a:e1:e4:59:0d:e5:ff:86:41:8c:55:0e:e2:cf:f6:95:
         7d:0d:bc:a4:03:a4:8f:1c:6e:13:b8:02:c5:f0:ab:53:46:a2:
         01:53:da:3a:32:f2:54:7c:71:fd:c7:9f:87:52:bf:3c:35:4c:
         53:56:89:d3:6b:ff:9b:a6:a8:f4:fa:cb:40:b9:4e:da:79:f2:
         ef:0d:60:a1:09:57:d9:73:9d:bc:0b:a3:13:94:39:29:78:0f:
         10:7d:9b:f9:d6:4e:b9:db:29:1a:7a:5a:ec:01:cd:a5:84:f1:
         fa:c6:9e:5d:de:98:e3:02:8d:e8:75:60:0d:24:17:d6:ed:50:
         00:dd:ce:8e:15:c5:68:98:18:06:7f:64:f1:3b:68:d2:4b:f1:
         83:65:0c:0f:5d:de:e6:e1:b3:2f:fc:1a:4d:e7:7a:5c:9b:55:
         51:6d:64:e3:f6:62:3e:b0:63:e8:b9:4d:9f:b6:a0:a7:f9:b8:
         ac:df:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:59:51 2024 by rpki-client on console-fra.rpki-client.org