Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3135303a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666131313a3135303a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          lJIYCv8rQBjQXUBs71w7Pi2QoKxpAuaBFD1+3xeTLM8=
Subject key identifier:   35:99:58:3C:2E:54:72:93:33:65:92:B4:1A:07:74:44:86:17:1B:CB
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       49147C573DAC1937225A7879E81EFE3919744948
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3135303a3a2f34382d3438203d3e203135333533.roa
Signing time:             Sun 23 Jun 2024 07:01:54 +0000
ROA not before:           Sun 23 Jun 2024 06:56:54 +0000
ROA not after:            Sun 22 Jun 2025 07:01:54 +0000
asID:                     15353
IP address blocks:        2602:fa11:150::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:14:7c:57:3d:ac:19:37:22:5a:78:79:e8:1e:fe:39:19:74:49:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jun 23 06:56:54 2024 GMT
            Not After : Jun 22 07:01:54 2025 GMT
        Subject: CN=3599583C2E547293336592B41A07744486171BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:97:70:89:5d:03:6f:c0:07:d5:0c:15:0e:
                    c0:5f:d9:28:8a:1e:c0:c8:5b:c6:45:cd:c9:98:cd:
                    00:28:da:c1:f7:5b:78:14:d5:e2:29:a4:f3:b2:fd:
                    99:d7:77:3e:80:d6:24:4a:39:9a:94:8a:b2:7d:70:
                    12:d4:08:e5:11:1d:17:f5:20:e7:fb:45:2b:8f:a6:
                    68:79:5a:25:c1:5d:fc:86:35:c6:90:be:63:57:49:
                    68:fd:5d:83:86:5c:28:64:87:65:c5:86:ed:1e:20:
                    8c:20:3b:99:fb:15:73:60:7e:7e:eb:02:a1:83:d4:
                    f7:84:90:cf:24:bc:1a:40:c4:28:f1:ac:dd:30:28:
                    7a:71:41:c3:83:2b:42:17:b8:23:f4:0e:74:d0:08:
                    ba:62:64:90:4d:2a:50:86:24:3d:e7:91:4c:f6:21:
                    95:6b:9c:90:01:05:d0:fb:d3:d5:93:f6:15:18:78:
                    e9:4c:f0:b0:8f:a8:27:ba:e6:7e:a2:b5:0a:d7:19:
                    1b:b4:89:fe:07:76:1d:84:bf:ab:e7:fe:9b:e5:a1:
                    00:dd:a8:18:e6:59:9e:6d:f4:3f:d7:af:93:78:68:
                    fa:ab:95:e8:51:cb:8c:2d:5b:b6:e9:22:1c:a8:d5:
                    c4:15:f8:17:d2:76:41:a6:7a:9e:35:31:96:0b:5a:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:99:58:3C:2E:54:72:93:33:65:92:B4:1A:07:74:44:86:17:1B:CB
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3135303a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:150::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:5d:67:25:52:74:af:7c:58:56:ad:76:43:44:72:3f:a5:
         c0:fc:e9:8a:1a:3b:86:70:7f:69:fc:c2:6e:9a:4a:3b:fb:70:
         ea:2d:61:3f:68:bd:0a:b3:31:38:fa:64:3d:45:3d:56:6a:78:
         a6:68:74:99:97:d3:a9:66:7d:8f:43:30:88:c4:11:06:09:3c:
         ad:37:3d:d6:1f:2a:5f:c4:82:24:b2:8c:07:05:49:90:c6:20:
         6d:24:9e:d8:74:c1:2a:df:ed:2a:73:e2:5e:ba:f2:e0:22:a1:
         ae:0d:ab:bd:cc:92:20:fa:a8:75:69:d7:35:65:5e:34:59:34:
         2a:d3:7a:02:20:b0:e6:23:dd:89:8f:b6:c7:aa:65:ba:53:ca:
         71:c6:25:7e:b2:fa:52:a0:2e:89:e2:a6:24:da:ad:8a:7a:83:
         ec:84:30:9a:28:ef:ee:13:2e:d2:2c:45:b2:bb:b6:19:80:77:
         cc:4c:12:44:02:52:0c:31:db:39:bd:68:1a:16:cd:48:a9:78:
         9a:14:66:8f:68:41:08:81:ce:b3:fe:c4:81:e9:1f:05:d2:b5:
         81:10:e2:f9:1c:56:28:08:a2:e6:99:84:39:b4:79:55:7a:46:
         8c:0e:28:38:72:6f:e5:71:75:5b:1f:a0:2d:20:9e:47:d6:4a:
         b4:65:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:20 2024 by rpki-client on console-fra.rpki-client.org