Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3239303a3a2f34382d3438203d3e20323134343330.roa
File:                     323630323a666131313a3239303a3a2f34382d3438203d3e20323134343330.roa (raw, json)
Hash identifier:          +KrcbNwQG8I3TK8cv/nQ3VQrs4RlYMaZDy89JgLOc/E=
Subject key identifier:   E0:AA:50:D3:C6:F5:FD:0C:51:DF:68:4C:DB:7E:27:3D:F2:45:41:5C
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       4FC3374FE9A1B076FB52EDA52E87EC954AAD2C6F
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3239303a3a2f34382d3438203d3e20323134343330.roa
Signing time:             Thu 29 Aug 2024 19:38:17 +0000
ROA not before:           Thu 29 Aug 2024 19:33:17 +0000
ROA not after:            Thu 28 Aug 2025 19:38:17 +0000
asID:                     214430
IP address blocks:        2602:fa11:290::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c3:37:4f:e9:a1:b0:76:fb:52:ed:a5:2e:87:ec:95:4a:ad:2c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Aug 29 19:33:17 2024 GMT
            Not After : Aug 28 19:38:17 2025 GMT
        Subject: CN=E0AA50D3C6F5FD0C51DF684CDB7E273DF245415C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:6b:a2:3b:f7:e5:82:c9:ad:2c:80:86:08:
                    17:e1:65:53:48:c8:23:f6:07:d5:51:39:32:f8:69:
                    b3:f6:fe:a2:e4:8f:9f:2a:c4:b7:fc:ed:86:bd:db:
                    fc:71:a3:b7:39:a0:9d:80:e8:fd:29:1d:dc:c1:c4:
                    46:08:d6:73:37:07:c4:fd:0b:56:1d:7c:1f:4a:60:
                    7e:14:3e:f0:b7:a3:ed:2a:ab:ff:38:00:2a:a2:b5:
                    fd:20:fb:7b:a0:93:c8:9c:4a:c8:a1:65:02:aa:23:
                    ad:88:aa:c3:63:0c:35:0e:34:56:c4:17:e6:e1:ed:
                    d0:69:ac:f3:93:a2:3c:0f:99:9f:b2:f7:d2:f3:2a:
                    81:30:fb:67:18:91:6f:b5:62:2b:09:3b:1c:43:ee:
                    58:ad:d6:c1:e5:d0:b4:d7:53:6d:1e:c0:c1:81:ed:
                    ad:d9:b7:89:78:1f:1a:79:f9:f0:cc:f4:26:97:ba:
                    91:5c:11:60:ea:57:bd:9d:40:17:67:a1:ca:99:18:
                    77:88:e2:70:c0:6c:6b:61:ca:67:09:35:60:54:44:
                    f3:96:9a:a8:ee:4b:2d:28:c0:f6:1d:da:f0:92:e3:
                    46:7c:0c:13:b4:ce:ca:31:01:9e:53:b7:54:33:d8:
                    9a:c0:14:d1:62:be:63:ad:e7:2f:c2:26:b4:59:c4:
                    1c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AA:50:D3:C6:F5:FD:0C:51:DF:68:4C:DB:7E:27:3D:F2:45:41:5C
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3239303a3a2f34382d3438203d3e20323134343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:290::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:ef:3a:0d:57:cd:38:62:8e:22:da:61:8b:48:b3:ea:bb:a2:
         7f:ca:7e:31:da:9d:d0:4b:13:be:57:85:5c:f5:f3:12:14:67:
         45:de:23:0e:01:94:2a:02:c1:a5:8b:37:4a:da:d1:2a:6b:65:
         39:bb:55:f7:4a:95:b6:40:bc:94:e3:33:c2:e4:48:77:52:82:
         b2:49:57:7c:11:89:33:4f:cb:96:ed:0a:d3:d7:7e:91:99:35:
         d2:05:45:dc:fc:3e:98:43:fb:b4:8b:ee:e5:61:54:7e:0e:36:
         45:65:63:65:b1:c0:6e:d4:c7:a3:f5:59:7f:d9:51:fd:e6:99:
         d6:e2:cf:23:26:f8:11:39:f3:53:57:db:02:e1:40:d0:cd:56:
         8c:7b:41:00:81:46:8f:40:d6:7b:02:08:f1:03:36:08:3f:18:
         2a:3b:28:a6:b1:50:70:9c:1a:e6:2d:1a:c1:90:7e:af:0f:14:
         0b:71:eb:67:08:d2:99:95:44:6b:ba:9b:84:bc:2d:37:15:97:
         86:9f:a3:c1:d9:6e:38:04:89:8e:a6:33:89:54:ed:5c:cd:1b:
         ea:d6:32:f6:88:a6:e2:02:58:52:0d:d5:f6:57:ee:08:f6:c8:
         ff:e2:66:9f:ab:3d:5b:83:63:29:d9:61:2d:57:e0:c2:03:56:
         33:0d:70:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:59:51 2024 by rpki-client on console-fra.rpki-client.org