Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f33362d3438203d3e203135333533.roa
File:                     323630323a666131313a3a2f33362d3438203d3e203135333533.roa (raw, json)
Hash identifier:          Voltvvk2DZhQO5XuChWhr0+qI6bfXBW8URGAlTuaBRk=
Subject key identifier:   8D:57:EA:3B:77:7B:2D:DF:65:5A:C4:A6:0D:21:C2:90:67:9F:3B:27
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       5A2FBD8CAE3DD92A73DE813A1A3AA37C0683C4BC
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f33362d3438203d3e203135333533.roa
Signing time:             Sun 23 Jun 2024 23:01:33 +0000
ROA not before:           Sun 23 Jun 2024 22:56:33 +0000
ROA not after:            Sun 22 Jun 2025 23:01:33 +0000
asID:                     15353
IP address blocks:        2602:fa11::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 10:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2f:bd:8c:ae:3d:d9:2a:73:de:81:3a:1a:3a:a3:7c:06:83:c4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jun 23 22:56:33 2024 GMT
            Not After : Jun 22 23:01:33 2025 GMT
        Subject: CN=8D57EA3B777B2DDF655AC4A60D21C290679F3B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:74:56:90:1f:2a:13:31:32:50:51:9d:57:
                    8c:67:4f:29:92:55:41:16:49:20:58:8b:ee:fe:35:
                    45:2e:7b:a2:78:de:9d:86:e0:64:2b:93:8c:65:60:
                    9f:89:2a:12:52:ff:d6:09:b6:f8:69:df:1e:1c:c1:
                    4d:16:a2:0f:64:80:55:e6:04:d6:29:9a:c4:b9:01:
                    06:85:4b:4d:a2:c6:68:2d:d0:f2:3d:88:d4:7b:9a:
                    27:6d:5e:9f:91:36:7b:de:d0:09:8b:37:0a:6f:97:
                    de:8c:74:e0:e9:1b:97:91:60:1c:b2:d7:ed:fa:d0:
                    c5:b8:ca:7c:ae:eb:26:99:f6:cc:e8:bc:5c:51:92:
                    99:84:a3:27:53:27:4d:0a:22:66:0a:d7:8a:f9:85:
                    85:8d:15:14:93:82:bc:63:55:89:9a:43:e8:79:12:
                    61:09:0c:e9:5c:2e:34:1a:74:cb:c8:6c:bc:85:78:
                    5e:54:72:36:45:a4:59:96:d6:df:c0:c8:20:ba:6a:
                    73:cc:5f:16:7b:05:13:b8:ba:56:10:a0:ad:73:d9:
                    7d:9f:94:01:95:7a:29:1d:79:25:27:03:7c:1b:2e:
                    3b:a3:cd:67:2e:80:0b:fe:6b:b6:ff:82:0e:d3:65:
                    ca:95:3c:fa:42:1b:46:41:de:dd:87:ea:05:a7:d9:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:57:EA:3B:77:7B:2D:DF:65:5A:C4:A6:0D:21:C2:90:67:9F:3B:27
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f33362d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:26:c8:6e:b5:85:0b:46:a5:46:28:d9:ec:6d:d9:e0:85:f1:
         2a:a8:ab:cf:76:49:a3:0a:39:20:36:de:5e:6d:65:17:12:d7:
         e0:e2:90:af:78:c5:2f:eb:f8:a7:1e:03:95:c2:34:9a:34:36:
         b1:33:f4:dd:d2:fd:fa:3e:2e:4b:ad:7e:4b:cd:09:a2:95:56:
         1a:22:7b:7a:45:d7:0e:75:b8:20:db:b1:a4:9c:dd:89:ba:b4:
         2b:1e:a8:5a:71:02:74:9d:0b:93:fe:a6:a9:bc:6d:8c:a5:d4:
         21:48:5b:04:85:d5:bd:63:27:6f:8a:3b:b5:32:01:88:13:09:
         0f:a7:93:84:2a:6f:da:72:72:59:77:9a:87:b0:8b:3e:e5:94:
         a0:54:d8:48:34:fa:b8:a0:92:dd:09:93:a6:08:94:9e:86:7e:
         52:35:1f:b9:1e:a2:4c:b6:cc:c5:c5:40:3a:ae:5d:ad:1e:4f:
         ee:65:8f:90:da:66:79:09:0b:5a:83:3b:d7:df:0a:35:f6:14:
         98:79:0e:95:a2:5e:83:3a:67:50:52:66:66:70:cc:ff:a7:01:
         5b:24:7b:85:ed:e9:b1:98:9c:d7:4b:07:d7:bb:43:a1:46:1f:
         e1:86:51:7c:a2:0d:1e:c5:1f:71:ad:9f:f5:2f:2d:45:e1:49:
         05:d9:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:54 2025 by rpki-client