Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a33303a3a2f34342d3434203d3e203135333533.roa
File:                     323630323a666131313a33303a3a2f34342d3434203d3e203135333533.roa (raw, json)
Hash identifier:          wek0H80y221hidNLJcor3DboCBZOzwfpdhswTZZ7+6g=
Subject key identifier:   B5:B7:5D:D0:98:51:69:62:18:1D:2D:D2:64:09:3D:13:84:90:C8:D8
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       3895199ACFF06BC061049EE5AD64EF9B01472043
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a33303a3a2f34342d3434203d3e203135333533.roa
Signing time:             Fri 17 Nov 2023 22:28:57 +0000
ROA not before:           Fri 17 Nov 2023 22:23:57 +0000
ROA not after:            Fri 15 Nov 2024 22:28:57 +0000
asID:                     15353
IP address blocks:        2602:fa11:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 05:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:95:19:9a:cf:f0:6b:c0:61:04:9e:e5:ad:64:ef:9b:01:47:20:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Nov 17 22:23:57 2023 GMT
            Not After : Nov 15 22:28:57 2024 GMT
        Subject: CN=B5B75DD098516962181D2DD264093D138490C8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:52:d6:e1:22:6e:fc:3e:c7:dd:24:c0:47:
                    d5:82:82:fd:14:7e:ad:52:1b:4f:e4:59:7a:c0:be:
                    b2:b7:44:1c:26:46:96:53:b3:01:e3:25:62:83:4b:
                    4c:e2:7b:b0:fe:4d:a2:17:49:b3:60:2c:63:57:f0:
                    f1:19:e5:b0:08:3f:0d:12:1e:96:e0:d1:89:70:c5:
                    dd:56:27:8c:42:77:cd:b9:1c:3f:3f:bb:d2:24:ed:
                    15:3d:4a:59:f2:9f:5e:e0:90:eb:7b:9d:2c:45:cd:
                    52:43:58:e9:71:d9:6a:5e:e0:45:36:45:a8:d3:31:
                    d2:54:eb:e4:d3:7d:0a:f9:24:73:1a:eb:82:dd:41:
                    f9:d7:82:27:35:df:90:a4:dd:27:e6:c1:7b:3d:11:
                    56:1b:67:31:c7:f3:c6:4d:8d:c3:46:4f:b6:31:7d:
                    64:fa:8b:1c:a7:7e:ff:08:7e:2b:2a:48:a1:3f:fa:
                    29:99:42:66:f9:c3:dc:b1:5c:9a:f9:df:eb:3e:1b:
                    7a:79:69:3b:d8:fb:6f:2f:11:bb:c1:5c:fd:c3:61:
                    0f:78:b8:08:d5:47:4d:69:d2:13:a0:88:3c:f3:e8:
                    b8:10:fe:7f:87:fb:e6:ab:98:b7:7f:36:ff:59:5f:
                    9b:bf:ce:58:c3:89:e6:b6:d9:1b:91:4e:b9:1c:12:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B7:5D:D0:98:51:69:62:18:1D:2D:D2:64:09:3D:13:84:90:C8:D8
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a33303a3a2f34342d3434203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:86:b3:3c:00:3f:82:80:c9:e5:5c:59:b6:ca:1e:9e:04:3e:
         3d:44:5d:f4:42:40:77:86:51:ac:6f:69:52:8a:d9:ca:b1:d0:
         83:ff:91:41:8f:38:01:9e:96:5d:3f:c7:11:db:45:a3:fe:c7:
         8c:0b:53:3a:ca:32:eb:48:77:e0:2a:39:88:ac:0e:e1:d9:cf:
         e8:b9:32:8b:95:47:f2:96:15:e1:70:86:c1:ef:a4:cc:7e:e0:
         d3:06:80:bf:a0:2a:bb:9d:f7:ff:cd:bd:ff:0d:57:77:db:20:
         4f:5c:d8:ff:e0:18:21:71:3e:55:dd:19:d8:c3:26:dd:2f:e0:
         62:1d:b2:2f:ee:b9:2e:10:b5:53:cd:3f:d2:c9:dd:2a:da:48:
         7f:31:01:58:b0:f1:10:0d:ba:b7:88:9b:4f:b7:68:e5:c7:5e:
         8b:5e:e2:32:c7:34:20:28:6c:11:85:77:bc:48:5b:f0:f0:d5:
         98:eb:17:d6:15:7c:f9:76:3a:51:34:66:ef:37:6f:e8:96:3c:
         87:1b:98:a4:34:1b:57:14:8f:cc:ff:44:a9:cc:66:92:04:52:
         88:7c:a7:ba:b4:33:3c:bd:7f:f6:95:37:fb:ba:32:84:10:2b:
         99:e4:4b:62:cf:b2:ca:dc:c2:2f:5c:ef:87:2e:03:a9:36:1d:
         8a:9c:98:9c
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUOJUZms/wa8BhBJ7lrWTvmwFHIEMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjMxMTE3MjIyMzU3WhcNMjQxMTE1MjIyODU3
WjAzMTEwLwYDVQQDEyhCNUI3NUREMDk4NTE2OTYyMTgxRDJERDI2NDA5M0QxMzg0
OTBDOEQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzodS1uEibvw+
x90kwEfVgoL9FH6tUhtP5Fl6wL6yt0QcJkaWU7MB4yVig0tM4nuw/k2iF0mzYCxj
V/DxGeWwCD8NEh6W4NGJcMXdVieMQnfNuRw/P7vSJO0VPUpZ8p9e4JDre50sRc1S
Q1jpcdlqXuBFNkWo0zHSVOvk030K+SRzGuuC3UH514InNd+QpN0n5sF7PRFWG2cx
x/PGTY3DRk+2MX1k+oscp37/CH4rKkihP/opmUJm+cPcsVya+d/rPht6eWk72Ptv
LxG7wVz9w2EPeLgI1UdNadIToIg88+i4EP5/h/vmq5i3fzb/WV+bv85Yw4nmttkb
kU65HBIA6wIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFLW3XdCYUWliGB0t0mQJPROE
kMjYMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMyMzYzMDMy
M2E2NjYxMzEzMTNhMzMzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzUzMzM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQmAvoRADAwDQYJKoZIhvcNAQELBQADggEBAIaGszwAP4KA
yeVcWbbKHp4EPj1EXfRCQHeGUaxvaVKK2cqx0IP/kUGPOAGell0/xxHbRaP+x4wL
UzrKMutId+AqOYisDuHZz+i5MouVR/KWFeFwhsHvpMx+4NMGgL+gKrud9//Nvf8N
V3fbIE9c2P/gGCFxPlXdGdjDJt0v4GIdsi/uuS4QtVPNP9LJ3SraSH8xAViw8RAN
ureIm0+3aOXHXote4jLHNCAobBGFd7xIW/Dw1ZjrF9YVfPl2OlE0Zu83b+iWPIcb
mKQ0G1cUj8z/RKnMZpIEUoh8p7q0Mzy9f/aVN/u6MoQQK5nkS2LPssrcwi9c74cu
A6k2HYqcmJw=
-----END CERTIFICATE-----
Generated at Sun Jun 2 08:04:20 2024 by rpki-client on console-ams.rpki-client.org