Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a38303a3a2f34342d3434203d3e203133363436.roa
File:                     323630323a666131313a38303a3a2f34342d3434203d3e203133363436.roa (raw, json)
Hash identifier:          b/eW5vVvv+eXRevAE9VmoMVEn15sz8vZ7Fdb4aTCqdI=
Subject key identifier:   31:86:DC:51:43:AA:1B:55:C5:00:6E:96:A1:5F:12:61:DC:BD:5B:17
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       696169876C48315B6A780F472BB625F66A0A871A
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a38303a3a2f34342d3434203d3e203133363436.roa
Signing time:             Fri 03 Jan 2025 04:56:27 +0000
ROA not before:           Fri 03 Jan 2025 04:51:27 +0000
ROA not after:            Fri 02 Jan 2026 04:56:27 +0000
asID:                     13646
IP address blocks:        2602:fa11:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 21:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:61:69:87:6c:48:31:5b:6a:78:0f:47:2b:b6:25:f6:6a:0a:87:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jan  3 04:51:27 2025 GMT
            Not After : Jan  2 04:56:27 2026 GMT
        Subject: CN=3186DC5143AA1B55C5006E96A15F1261DCBD5B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:1c:c3:2f:39:1b:b0:7e:27:06:ea:e9:40:
                    33:ed:f4:ad:dd:77:85:7f:01:00:79:05:78:b9:5a:
                    0c:d5:ad:bc:51:db:ab:c2:95:bc:65:88:f1:d5:6c:
                    df:d7:01:00:e4:63:36:ab:3a:16:70:b9:7b:85:75:
                    07:c4:f6:c1:7e:78:55:86:ae:51:2b:15:a7:b5:20:
                    1e:fe:b4:87:d8:9c:08:3c:64:31:aa:ce:1a:49:29:
                    76:d5:da:fa:8f:74:3d:22:81:43:d7:e9:62:b3:a1:
                    02:e6:79:1a:68:dc:97:d3:24:d3:eb:49:0c:1b:73:
                    e9:d9:f5:f0:af:62:d6:93:6f:13:14:2f:17:8b:80:
                    7d:f3:f8:6c:70:33:1d:61:56:de:6d:10:2b:df:d6:
                    85:55:f1:eb:f2:84:7e:dd:90:f2:b9:26:ff:4f:10:
                    ec:ac:bf:8d:ab:b1:f1:4e:46:e1:b4:8d:f0:ad:63:
                    c5:68:7c:72:c8:62:11:f8:cd:e8:62:03:08:71:82:
                    10:e8:d7:b5:80:49:c6:75:b2:0b:56:44:dd:0d:a7:
                    b6:94:43:fe:6c:15:fd:b1:6f:81:f0:22:75:8a:b8:
                    e4:e8:9b:2e:d9:02:0b:34:32:14:80:19:25:ed:7e:
                    2e:6e:8e:3d:44:a4:3d:e1:85:26:0d:73:71:9c:19:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:DC:51:43:AA:1B:55:C5:00:6E:96:A1:5F:12:61:DC:BD:5B:17
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a38303a3a2f34342d3434203d3e203133363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:30:58:4f:ac:f5:f3:2b:eb:78:96:80:6b:a6:aa:87:0e:8a:
         4e:04:27:b3:70:01:22:6b:ca:94:28:4f:69:d5:67:6e:08:c1:
         d1:14:41:e6:87:02:a3:cb:c6:22:62:b7:74:a6:56:d4:b4:3a:
         29:a5:d2:86:ed:fe:21:34:2c:1c:f1:1a:38:41:b6:b8:d0:49:
         84:d9:fa:5f:52:3e:94:a0:b0:cc:61:11:94:92:74:af:78:a9:
         42:76:14:c3:b2:4a:03:0b:cd:98:b5:2a:e7:ed:ff:58:bc:7b:
         26:ff:0a:d4:1b:6c:da:08:3d:58:53:6c:71:e6:c0:a6:47:d6:
         ab:ad:5f:f3:0a:fd:f4:ad:d7:de:d8:21:7c:f8:ad:8b:8f:de:
         aa:17:b9:05:c4:23:4f:ab:c6:da:0d:e5:a6:93:9c:85:84:cd:
         56:3b:08:e0:76:62:ac:fc:37:4e:9b:11:23:db:ff:a4:53:86:
         00:ff:46:b8:80:4e:92:84:80:1d:cf:17:08:f4:c7:ee:ee:6b:
         97:fd:4b:79:1e:09:13:83:eb:c8:34:c7:82:bc:6e:e9:98:35:
         a7:7d:c2:bb:de:3e:38:74:24:f5:ca:f0:aa:cc:b1:23:12:5d:
         d9:52:f6:89:b2:df:06:51:a9:ed:c8:e1:ab:81:7e:77:79:f4:
         37:ee:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:56:16 2025 by rpki-client