Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3332303a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666131313a3332303a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          TZi88qnYBdsqZ41VBinqoZd0gFe5bGDT4yFhydEvkY0=
Subject key identifier:   41:26:7E:BF:65:F8:94:79:BE:CA:13:42:90:C0:B3:EA:95:85:96:30
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       75942200AB9F34BDFC0D6AB445AF24C32D61F38C
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3332303a3a2f34382d3438203d3e203135333533.roa
Signing time:             Fri 20 Sep 2024 05:52:43 +0000
ROA not before:           Fri 20 Sep 2024 05:47:43 +0000
ROA not after:            Fri 19 Sep 2025 05:52:43 +0000
asID:                     15353
IP address blocks:        2602:fa11:320::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:94:22:00:ab:9f:34:bd:fc:0d:6a:b4:45:af:24:c3:2d:61:f3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Sep 20 05:47:43 2024 GMT
            Not After : Sep 19 05:52:43 2025 GMT
        Subject: CN=41267EBF65F89479BECA134290C0B3EA95859630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:c9:da:3d:af:f2:d8:b2:63:8a:bb:5a:7a:
                    c8:f8:ef:1e:6f:b2:64:79:21:c0:b0:7e:bb:aa:38:
                    25:c8:c0:18:a8:7a:98:70:ec:ba:6d:5e:dc:d6:e8:
                    67:d9:a0:d7:96:8f:e0:86:23:bb:e2:10:b9:a4:9e:
                    b5:71:9a:9b:1b:48:4b:7b:94:30:4e:a4:b0:e7:a3:
                    07:8b:f9:3a:1f:0e:25:a9:b2:b9:b1:eb:26:a6:12:
                    47:2f:b5:82:19:3a:98:21:7b:77:db:de:24:83:01:
                    6d:e4:38:ce:08:82:00:6e:d6:7a:bc:a4:b7:61:8d:
                    9f:65:7f:9a:60:39:93:74:5a:e1:07:71:d2:04:55:
                    4e:26:92:82:66:04:03:94:4d:9e:c3:cf:ec:60:4a:
                    c4:71:6e:82:28:83:76:59:34:09:e2:7b:93:77:bf:
                    af:b2:70:b5:52:1a:06:6f:3a:a9:36:ad:2b:fc:06:
                    c7:c8:95:a1:3f:b5:16:d2:c7:ed:8f:37:36:3e:fb:
                    46:d3:e0:10:1b:83:4a:0f:59:f6:61:8c:fd:6f:71:
                    d1:fb:99:d6:e2:f2:d6:85:53:86:fd:e9:3d:eb:29:
                    f5:1d:77:d6:ff:27:48:96:b1:c7:8e:da:3d:c6:f5:
                    01:fd:76:8b:c8:b1:08:2b:26:dc:30:2d:2b:10:0b:
                    ab:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:7E:BF:65:F8:94:79:BE:CA:13:42:90:C0:B3:EA:95:85:96:30
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3332303a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:320::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:73:89:a4:4e:33:93:06:bb:4a:3c:03:eb:4d:57:46:70:
         a6:7b:b1:c7:a6:81:b5:89:b4:43:76:22:e4:ad:d7:18:27:cc:
         35:f5:36:2c:08:00:b0:34:c8:b4:1a:35:b0:20:3c:54:16:18:
         dd:6b:41:78:77:56:b7:f4:a3:69:7d:c1:6d:7e:00:73:3d:d5:
         20:69:25:dc:f4:75:be:16:79:0f:9d:2f:f7:d5:a3:72:5b:2c:
         25:5b:b2:66:ec:e4:3f:5c:dd:3f:10:52:69:aa:cf:16:df:a0:
         e6:2c:15:e9:69:6d:be:96:ce:90:a0:90:d2:75:c9:86:ef:6a:
         cf:af:43:69:f6:09:1e:1b:23:36:e7:8f:fd:b6:34:66:a5:8f:
         87:5e:e8:18:8b:4a:80:fe:7a:0f:ee:87:6d:05:b1:c9:62:d7:
         86:e5:62:5d:b1:59:14:23:3e:86:74:06:d1:f6:08:4b:d3:c1:
         70:18:32:6f:4e:59:bd:36:61:b5:83:8c:d2:59:f7:08:2f:56:
         05:05:c5:97:8e:80:92:36:03:36:59:2e:e7:cd:50:2f:72:e1:
         74:16:6f:ef:19:fe:4b:b8:43:45:83:9e:7c:92:b5:83:9c:56:
         6f:06:c9:9e:4d:72:0f:2b:22:1e:eb:ea:03:6a:cf:20:37:77:
         bf:74:d4:c1
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUdZQiAKufNL38DWq0Ra8kwy1h84wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjQwOTIwMDU0NzQzWhcNMjUwOTE5MDU1MjQz
WjAzMTEwLwYDVQQDEyg0MTI2N0VCRjY1Rjg5NDc5QkVDQTEzNDI5MEMwQjNFQTk1
ODU5NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjLJ2j2v8tiy
Y4q7WnrI+O8eb7JkeSHAsH67qjglyMAYqHqYcOy6bV7c1uhn2aDXlo/ghiO74hC5
pJ61cZqbG0hLe5QwTqSw56MHi/k6Hw4lqbK5sesmphJHL7WCGTqYIXt3294kgwFt
5DjOCIIAbtZ6vKS3YY2fZX+aYDmTdFrhB3HSBFVOJpKCZgQDlE2ew8/sYErEcW6C
KIN2WTQJ4nuTd7+vsnC1UhoGbzqpNq0r/AbHyJWhP7UW0sftjzc2PvtG0+AQG4NK
D1n2YYz9b3HR+5nW4vLWhVOG/ek96yn1HXfW/ydIlrHHjto9xvUB/XaLyLEIKybc
MC0rEAur0wIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFEEmfr9l+JR5vsoTQpDAs+qV
hZYwMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUH
MAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMyMzYzMDMy
M2E2NjYxMzEzMTNhMzMzMjMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMz
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACYC+hEDIDANBgkqhkiG9w0BAQsFAAOCAQEAYatziaRO
M5MGu0o8A+tNV0Zwpnuxx6aBtYm0Q3Yi5K3XGCfMNfU2LAgAsDTItBo1sCA8VBYY
3WtBeHdWt/SjaX3BbX4Acz3VIGkl3PR1vhZ5D50v99WjclssJVuyZuzkP1zdPxBS
aarPFt+g5iwV6WltvpbOkKCQ0nXJhu9qz69DafYJHhsjNueP/bY0ZqWPh17oGItK
gP56D+6HbQWxyWLXhuViXbFZFCM+hnQG0fYIS9PBcBgyb05ZvTZhtYOM0ln3CC9W
BQXFl46AkjYDNlku581QL3LhdBZv7xn+S7hDRYOefJK1g5xWbwbJnk1yDysiHuvq
A2rPIDd3v3TUwQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:49:02 2024 by rpki-client on console-ams.rpki-client.org