Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3137303a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666131313a3137303a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          mpclTM/iTBtvFMyWTnaMJa5X93HIxd40ki1UB4hy3xA=
Subject key identifier:   70:60:E3:44:37:46:C5:9E:B7:FE:DF:5D:85:F3:07:9C:6A:9E:76:BC
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       4A1D254E758A03B777BCDCEA8CE61F0F8C8E9876
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3137303a3a2f34382d3438203d3e203135333533.roa
Signing time:             Sun 23 Jun 2024 23:06:52 +0000
ROA not before:           Sun 23 Jun 2024 23:01:52 +0000
ROA not after:            Sun 22 Jun 2025 23:06:52 +0000
asID:                     15353
IP address blocks:        2602:fa11:170::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 10:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1d:25:4e:75:8a:03:b7:77:bc:dc:ea:8c:e6:1f:0f:8c:8e:98:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jun 23 23:01:52 2024 GMT
            Not After : Jun 22 23:06:52 2025 GMT
        Subject: CN=7060E3443746C59EB7FEDF5D85F3079C6A9E76BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:98:8d:88:6a:7f:44:d0:3f:f5:ca:a2:14:
                    9a:de:78:d5:0f:7a:c8:2d:09:49:c9:18:73:ea:90:
                    b6:65:51:63:25:43:1b:98:04:4a:77:b0:b7:4f:f4:
                    6e:68:66:31:85:f2:bf:63:f3:7e:4b:c4:34:0d:f5:
                    26:8b:5a:2e:8d:41:b5:20:f5:0f:16:fb:d9:05:df:
                    91:ef:ca:03:80:ad:d8:21:1f:06:8c:07:df:20:7c:
                    c2:68:a8:79:56:4b:d4:db:b9:c3:26:66:43:e6:b3:
                    66:88:13:5e:ec:6f:1a:50:d5:5c:df:b3:4d:64:78:
                    87:9a:bb:39:64:cc:9f:05:60:d5:cd:d6:eb:06:1a:
                    84:7e:f3:15:3d:27:fd:39:20:0c:80:96:44:bb:03:
                    11:37:15:76:4d:ec:0c:9a:fc:63:01:df:30:e0:f8:
                    90:2d:d0:20:69:a9:69:79:d3:c7:95:f7:49:38:ab:
                    cc:f5:13:53:b0:1e:b0:a3:7b:a9:79:e2:e4:c2:ad:
                    ce:ba:89:b7:19:ed:06:03:0b:1d:16:ae:9e:6f:59:
                    9a:5c:46:92:a1:3e:89:8c:0c:ff:ad:b3:a8:88:b2:
                    b2:4f:44:9a:8f:51:05:af:a5:a7:a6:81:1f:a4:b4:
                    8b:c0:4d:93:b9:73:8e:93:68:11:9a:d7:cc:a3:c1:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:E3:44:37:46:C5:9E:B7:FE:DF:5D:85:F3:07:9C:6A:9E:76:BC
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3137303a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:170::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:17:aa:01:86:c4:1a:67:5f:64:c8:a9:79:7b:66:10:4d:
         1f:e0:5b:55:9e:bf:56:a7:2a:5f:f0:b4:cb:4c:c7:50:06:96:
         30:8c:16:2e:a7:18:08:9f:6a:f7:05:7c:2b:af:a4:79:27:22:
         93:b9:cb:70:c3:24:3c:5e:69:9c:33:47:83:5b:7b:bd:c9:56:
         4c:8e:95:92:d1:84:11:75:81:3e:5b:62:c9:98:cb:87:de:24:
         ba:d2:d5:b2:b6:29:e9:e7:1a:fb:51:6a:bc:c6:85:72:78:7c:
         8e:9a:ef:85:cb:dc:6a:3c:70:29:4d:5f:79:17:d5:6a:77:f0:
         ec:a1:41:7d:27:5a:0b:92:9c:30:1d:e5:50:84:58:be:87:cf:
         45:41:1a:6b:a0:6e:4c:6f:f0:d0:a8:06:75:5e:a6:3f:4f:d0:
         f8:18:4c:d5:99:76:77:a9:3c:4c:fb:90:05:82:7e:80:2d:fd:
         37:2b:1b:70:37:8c:1a:66:fd:fd:45:55:12:9d:17:92:eb:38:
         98:6b:fa:6b:6c:59:6a:dc:43:41:9b:0d:23:80:b3:63:ed:b7:
         25:d5:31:f7:ae:7d:c9:00:f6:1d:21:34:b1:65:36:42:13:76:
         c3:38:f1:c2:f4:ba:18:d1:b8:75:f3:28:c4:2d:a2:5e:84:96:
         d6:ee:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:03 2025 by rpki-client