Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3261303a3a2f34382d3438203d3e20323134343330.roa
File:                     323630323a666131313a3261303a3a2f34382d3438203d3e20323134343330.roa (raw, json)
Hash identifier:          m6g1anRmSQjM2vJ0ZKaLoEfZIAZNtZB+6OKlTm3G1o8=
Subject key identifier:   16:56:8A:C3:2D:74:B0:55:37:CA:F5:B6:2C:9F:DD:60:3D:18:D2:DD
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       1B62085F62C74A829BF3D6FB1231F565EC41AB33
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3261303a3a2f34382d3438203d3e20323134343330.roa
Signing time:             Thu 29 Aug 2024 19:38:32 +0000
ROA not before:           Thu 29 Aug 2024 19:33:32 +0000
ROA not after:            Thu 28 Aug 2025 19:38:32 +0000
asID:                     214430
IP address blocks:        2602:fa11:2a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:62:08:5f:62:c7:4a:82:9b:f3:d6:fb:12:31:f5:65:ec:41:ab:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Aug 29 19:33:32 2024 GMT
            Not After : Aug 28 19:38:32 2025 GMT
        Subject: CN=16568AC32D74B05537CAF5B62C9FDD603D18D2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:65:ef:c0:75:f1:d3:89:c0:a6:0f:dc:e7:
                    b5:a2:b9:c7:ec:8a:91:44:7d:ba:98:34:48:42:ff:
                    ea:a0:fc:39:5f:14:92:b9:f3:ac:79:6c:b8:7b:1b:
                    d2:a0:3b:17:47:42:a3:8a:24:e7:92:3e:18:84:fa:
                    1f:f4:08:d5:dd:5d:0f:fe:be:bd:2d:90:08:20:fb:
                    0b:2d:f7:43:67:bc:5a:14:1b:24:21:60:bb:83:ac:
                    cc:4c:cb:ce:c0:eb:6e:59:f8:6b:57:9c:b6:c1:ee:
                    f1:dd:60:99:44:f3:58:55:a7:ba:01:4e:e5:01:3b:
                    6a:0b:bc:c9:26:2b:74:f5:1c:c1:9f:fc:30:f7:c3:
                    c3:d6:e4:9d:31:44:2d:2e:68:9e:2d:fa:5a:1c:c0:
                    cd:06:c9:b8:66:78:8d:f5:57:e4:28:c7:c9:37:d5:
                    bd:c0:97:7f:7b:6c:a0:90:9f:93:7b:da:12:41:e4:
                    80:9a:03:bc:92:fc:ea:1f:fe:9a:72:7c:70:d5:a9:
                    e4:dc:18:79:a4:c7:cf:30:3a:c8:49:c3:d3:11:cb:
                    c0:86:eb:69:08:7b:5a:b4:0b:21:c5:44:07:bf:3c:
                    4c:cc:98:2e:b2:69:1c:85:5c:11:16:57:da:9e:37:
                    ca:8a:0c:f0:b7:4a:c3:aa:63:a3:ec:8c:4e:4b:3f:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:56:8A:C3:2D:74:B0:55:37:CA:F5:B6:2C:9F:DD:60:3D:18:D2:DD
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3261303a3a2f34382d3438203d3e20323134343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:2a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:f6:a8:19:79:a3:c2:8f:9c:3f:2a:1a:0b:42:bd:f9:0a:3d:
         1c:a4:fc:ef:52:0f:32:2c:27:ca:99:08:c2:1b:26:cf:9b:1d:
         bd:86:74:77:4b:bc:01:aa:6b:25:4b:d9:b9:97:62:ad:ce:d6:
         ea:ec:81:9a:c4:a9:3f:ea:b2:2b:ab:d0:46:40:30:d1:e7:ea:
         3b:20:df:32:b4:be:0d:ec:63:fd:13:90:85:98:00:17:f7:cf:
         34:7e:66:2c:bd:70:61:c8:8d:ca:d1:02:88:0e:d4:07:ac:6a:
         1c:b5:2b:21:c8:30:cd:43:71:d3:a4:a0:80:dc:f6:05:7e:a2:
         cc:5b:41:f7:27:63:b4:80:57:d4:c7:43:31:95:b3:64:9b:89:
         ac:60:97:fc:a5:74:02:fa:21:a4:c0:73:04:90:52:7a:ff:f4:
         d9:c9:20:b6:e6:b0:35:9c:9c:f9:6b:5c:60:2c:ea:b3:5f:fd:
         8b:cf:c3:d5:b1:5f:4e:94:a7:99:ab:60:21:14:03:c2:6d:05:
         3b:04:55:70:b2:d8:20:ef:6a:a0:33:7c:a9:bf:3e:b4:ad:18:
         b7:f5:c9:d6:88:e6:0c:10:ca:5b:7a:10:fa:f1:aa:f9:33:16:
         a0:90:e6:6c:36:8b:07:37:b6:ff:b8:9e:23:7c:d0:a9:d7:5e:
         bf:3c:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:59:51 2024 by rpki-client on console-fra.rpki-client.org