Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203438353831.roa
File:                     323630323a666131313a3a2f34342d3434203d3e203438353831.roa (raw, json)
Hash identifier:          VJSmsO9phvtu+8msY9R5WkGBceXfuVv8w8d4yo6j2PQ=
Subject key identifier:   90:B6:80:6F:C1:7D:B6:B7:78:56:9E:7A:F2:33:27:5F:83:A5:5A:BB
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       12E307E5963B26BD5F087E19E716230ACAD34157
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203438353831.roa
Signing time:             Tue 20 Feb 2024 07:01:20 +0000
ROA not before:           Tue 20 Feb 2024 06:56:20 +0000
ROA not after:            Tue 18 Feb 2025 07:01:20 +0000
asID:                     48581
IP address blocks:        2602:fa11::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e3:07:e5:96:3b:26:bd:5f:08:7e:19:e7:16:23:0a:ca:d3:41:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Feb 20 06:56:20 2024 GMT
            Not After : Feb 18 07:01:20 2025 GMT
        Subject: CN=90B6806FC17DB6B778569E7AF233275F83A55ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:0f:15:4e:7e:29:70:2f:c3:c6:3b:ab:7b:
                    37:f9:61:5f:2d:7b:06:10:75:e3:e2:3c:3a:38:10:
                    84:da:1e:e7:46:73:66:cf:9c:b1:9e:27:29:e8:91:
                    7d:1e:96:c2:52:92:6f:5b:d9:40:ba:71:6a:ed:1c:
                    63:ac:ac:2d:6e:dc:22:38:5c:f5:fc:16:bd:e9:1e:
                    0b:1b:37:0b:5e:3a:23:96:ee:05:dd:7a:e7:87:e5:
                    d6:ad:b6:f7:6e:c3:fe:41:37:d0:c1:a3:b3:71:49:
                    00:30:c2:c6:08:f0:7a:1c:cc:70:3b:05:5a:58:b6:
                    61:8a:8f:d5:61:e2:04:2c:c6:60:1a:31:96:44:ef:
                    e3:71:15:bb:93:c9:7e:f7:85:8d:9e:e5:62:13:b5:
                    c6:65:60:c4:8c:e0:9f:d0:e1:78:16:dc:75:df:a0:
                    83:04:59:48:36:6c:f1:9a:90:88:c4:99:7a:d8:1d:
                    58:09:af:78:b0:27:ff:f3:5b:41:49:b9:97:95:d3:
                    02:d1:57:6d:ce:d1:ca:ae:24:81:4e:97:1a:2d:4a:
                    b4:40:64:04:59:6e:60:89:38:01:a8:f6:76:a6:9a:
                    91:74:ba:cc:f0:ef:9e:da:10:d6:6d:be:02:ff:ba:
                    6c:0a:0a:ee:c6:79:77:9a:3d:07:d7:f4:ca:2c:79:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B6:80:6F:C1:7D:B6:B7:78:56:9E:7A:F2:33:27:5F:83:A5:5A:BB
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3a2f34342d3434203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:91:5a:f3:cc:ff:a8:3e:f2:b3:fd:fd:84:a0:61:ac:64:8a:
         c7:8d:ec:c2:40:a6:02:dc:5f:24:2c:8c:97:8b:e1:ed:2e:0d:
         29:28:d6:2a:04:35:7c:e3:35:27:fd:d6:53:52:6e:78:42:da:
         2d:04:5c:19:f0:dd:22:a7:08:49:cc:b5:6e:c6:aa:0a:72:45:
         f2:bc:85:69:72:19:fd:be:cb:38:09:09:fa:cd:99:d1:62:35:
         34:0f:59:5a:5f:70:2d:15:fd:d3:c0:73:95:d2:17:19:95:37:
         95:6c:c4:2a:78:e2:b6:45:32:78:59:de:cd:c3:3e:82:40:2a:
         05:e2:51:19:51:25:71:9b:2d:5d:65:8a:59:d0:16:f7:08:48:
         a8:5d:44:d7:b7:43:4a:0b:03:ae:23:56:de:35:e0:5a:bd:f4:
         94:23:d6:f3:87:c2:00:9c:c7:c0:33:0b:50:a0:3b:f6:ff:f6:
         43:0f:69:28:23:e1:0a:86:c3:a1:3c:42:6e:b6:c8:db:b2:f3:
         28:41:21:82:03:3a:2a:31:b9:e5:f3:12:57:17:a6:58:c2:77:
         f9:22:8b:69:b9:bc:91:bf:9b:9c:fc:34:b1:b6:26:f5:7b:f2:
         66:80:b0:f8:bf:47:17:f2:85:f9:40:6c:bd:fb:90:fc:a7:f3:
         31:93:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:36:08 2024 by rpki-client on console-fra.rpki-client.org