Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3136303a3a2f34382d3438203d3e20323135303834.roa
File:                     323630323a666131313a3136303a3a2f34382d3438203d3e20323135303834.roa (raw, json)
Hash identifier:          RhNsw5i7y9BE+t5/EVaVCz9wdL6avzOf0fibfaFeTYU=
Subject key identifier:   BB:DB:A0:7F:BD:D8:E6:DD:8C:A9:FF:FF:95:CA:35:F9:5A:9D:AD:41
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       7535D94E458A61E7F807AEB5E75D9A9B4CA0AA34
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3136303a3a2f34382d3438203d3e20323135303834.roa
Signing time:             Tue 25 Jun 2024 08:47:46 +0000
ROA not before:           Tue 25 Jun 2024 08:42:46 +0000
ROA not after:            Tue 24 Jun 2025 08:47:46 +0000
asID:                     215084
IP address blocks:        2602:fa11:160::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:35:d9:4e:45:8a:61:e7:f8:07:ae:b5:e7:5d:9a:9b:4c:a0:aa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jun 25 08:42:46 2024 GMT
            Not After : Jun 24 08:47:46 2025 GMT
        Subject: CN=BBDBA07FBDD8E6DD8CA9FFFF95CA35F95A9DAD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:f0:19:fb:4a:c6:cd:d4:79:7a:b7:c7:b0:
                    45:95:eb:9e:97:7c:44:3b:a6:f9:f2:c2:97:18:2c:
                    44:cb:42:6a:0d:dd:8d:28:af:a8:c6:65:94:38:37:
                    07:ec:c3:94:08:36:9c:5e:08:5d:a2:2a:ea:9f:5e:
                    85:01:55:45:72:2a:24:2d:28:48:10:92:79:78:98:
                    44:c0:61:1f:2d:e8:b2:80:6a:4b:57:24:77:2c:73:
                    3c:08:a2:6a:fd:76:2b:bf:3e:67:f8:a8:52:85:84:
                    71:7c:29:63:d6:9f:4a:d8:69:30:28:dc:e6:41:60:
                    58:eb:54:04:4d:bf:14:f3:7f:61:ed:d1:19:1b:11:
                    86:41:22:42:56:f7:2c:2d:89:df:a5:a4:9d:b9:be:
                    a8:a5:96:7f:5e:b8:b3:39:31:14:c5:1e:f3:9f:ba:
                    8b:66:25:aa:d0:9c:f3:57:42:56:b1:b2:98:a5:75:
                    93:69:91:89:7a:3d:23:0d:43:da:3f:ab:50:e1:41:
                    2f:e5:dd:87:58:83:ee:26:05:f7:b7:93:5f:7c:0a:
                    ca:4d:ca:cb:38:43:18:c6:c0:4e:fa:fd:4e:98:2b:
                    4a:db:5a:bf:cc:8f:40:a4:b6:9d:b2:01:05:29:70:
                    6f:2a:bd:cd:94:d6:96:4c:3b:cb:b2:ea:e7:1f:62:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DB:A0:7F:BD:D8:E6:DD:8C:A9:FF:FF:95:CA:35:F9:5A:9D:AD:41
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3136303a3a2f34382d3438203d3e20323135303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:99:8c:38:d1:18:6e:7f:14:45:d2:01:ec:95:ea:fe:07:
         ff:96:69:16:28:d9:6c:27:8d:20:21:88:82:ec:7f:a7:b4:65:
         dc:d1:22:24:ae:c0:eb:a8:6b:05:d2:11:cb:a7:d4:b9:f1:eb:
         95:e2:dd:35:33:92:0e:fd:c3:51:e5:69:86:b7:80:d3:1f:cd:
         12:8a:ce:f7:6d:24:c0:74:b7:23:e9:cf:3f:a2:d0:32:45:2f:
         a2:a0:a0:33:22:ac:bc:24:04:aa:19:45:9c:27:e2:fc:ae:02:
         63:fc:4e:dc:a5:c0:2e:71:01:2c:19:a9:22:b6:a9:6e:24:b3:
         03:2b:32:6a:2b:2a:3f:39:1e:a1:f9:83:4b:fa:14:47:16:d3:
         04:16:f0:43:bd:8a:0f:f3:6e:b3:42:81:71:f1:8f:37:46:1e:
         21:3a:93:b8:cf:29:5d:19:3b:43:bd:02:e3:b7:87:f8:0d:6a:
         73:39:70:6a:8e:7b:1a:af:d8:a5:59:0d:e0:fb:51:31:47:32:
         dd:b3:00:30:8c:ed:52:7e:a9:8a:f2:9b:ce:7e:29:fd:2a:59:
         a2:1c:15:53:48:58:4b:83:6f:9b:3a:d2:0a:77:73:02:c0:89:
         51:b5:41:41:6c:2b:6b:8c:be:07:3f:5f:b3:d4:be:48:c3:32:
         60:8c:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:13 2024 by rpki-client on console-ams.rpki-client.org