Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a35303a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666131313a35303a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          At8BX0vEjJ2/Tipz2aiwrLdkA00eCSzt8r1U9hFTa5M=
Subject key identifier:   BF:2B:9C:C7:FF:F6:F4:DD:65:4D:52:D7:7F:CF:9E:0D:82:24:71:92
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       26CC995FEA269F86503E054583E63041788D6D75
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a35303a3a2f34382d3438203d3e203135333533.roa
Signing time:             Thu 13 Jun 2024 04:51:00 +0000
ROA not before:           Thu 13 Jun 2024 04:46:00 +0000
ROA not after:            Thu 12 Jun 2025 04:51:00 +0000
asID:                     15353
IP address blocks:        2602:fa11:50::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cc:99:5f:ea:26:9f:86:50:3e:05:45:83:e6:30:41:78:8d:6d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jun 13 04:46:00 2024 GMT
            Not After : Jun 12 04:51:00 2025 GMT
        Subject: CN=BF2B9CC7FFF6F4DD654D52D77FCF9E0D82247192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:85:9e:e9:12:c3:dc:7d:48:e0:19:0e:d0:
                    65:f5:4f:35:8d:6b:06:2d:3f:70:3c:79:4d:aa:6c:
                    13:bc:f7:d8:4d:bf:a8:00:ec:00:e9:5d:9e:d9:f2:
                    2b:76:4f:b1:b6:e5:22:ed:c4:95:df:be:c2:c3:92:
                    05:2c:cf:9b:a1:f9:d9:e0:52:b6:f0:ee:82:2a:ac:
                    60:f9:fa:bb:1d:f2:fc:b4:8f:2a:ad:c4:2d:3e:01:
                    37:62:94:71:46:0c:60:ff:33:18:f3:d2:ef:d1:17:
                    5b:fc:e6:12:0c:d3:64:ca:6c:e2:a4:c9:69:96:b9:
                    06:94:cb:37:71:5a:58:9e:f2:db:0c:8f:58:1b:74:
                    b0:78:7a:8d:b1:0c:dc:36:ca:9f:29:b4:ac:bc:c3:
                    8a:c4:13:fc:30:ed:27:c5:d7:72:6a:31:03:ed:23:
                    87:d0:84:4e:b4:7f:4b:01:21:c6:7c:c8:5a:62:3d:
                    0b:20:c4:75:9e:3c:07:35:56:b5:80:5a:e3:f3:26:
                    d9:c4:41:99:2c:da:85:ba:a1:62:fd:5b:58:c6:75:
                    29:f9:1c:e2:42:33:b1:3a:1f:33:8b:74:06:62:86:
                    f7:0c:2b:9c:21:02:f6:fd:6c:7c:ca:40:ad:1c:90:
                    c0:8c:c4:12:e6:41:66:29:de:96:3d:42:a0:51:96:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2B:9C:C7:FF:F6:F4:DD:65:4D:52:D7:7F:CF:9E:0D:82:24:71:92
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a35303a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:df:aa:d9:1f:a0:b8:6a:60:25:c5:2e:66:58:12:2d:05:
         38:b2:7e:e8:c2:f4:d7:bc:df:de:11:a7:c5:00:08:f5:7c:02:
         6d:bf:a8:26:81:32:85:a1:c6:ed:ef:8f:54:ad:3b:87:ad:e8:
         09:09:7e:f0:80:29:1e:1b:f6:18:1b:c9:79:27:eb:12:57:58:
         f4:0a:9d:74:27:a4:ed:0f:ac:79:b4:f5:2d:0c:1d:d0:1a:6d:
         2b:a7:a7:25:b9:57:e1:46:f2:55:9e:4c:70:de:23:2e:8b:d2:
         79:46:61:d8:6c:17:4e:b4:af:c5:da:af:dc:c3:48:80:c0:dc:
         cd:84:1a:76:24:d9:12:29:39:0e:39:d5:a7:b8:c6:8c:a8:34:
         09:db:e0:39:bf:01:a0:5f:7b:d8:67:03:0d:5b:c9:28:29:ae:
         e6:62:69:32:6a:09:14:3d:22:68:24:6c:ae:a5:f8:36:a4:03:
         76:82:46:5f:0f:43:d2:f9:40:44:e8:e0:c4:5d:07:97:f2:91:
         7c:f4:2b:9e:df:ec:1d:a1:f2:11:8d:24:7e:ce:3f:d9:c0:f4:
         66:05:36:63:7b:25:57:1f:38:fd:3c:b3:e9:72:c2:a5:38:de:
         6d:83:16:64:51:0a:4f:71:46:9d:c2:8c:a2:b3:68:49:bc:6a:
         76:14:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:59:51 2024 by rpki-client on console-fra.rpki-client.org