Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
File:                     323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa (raw, json)
Hash identifier:          EN0ZgtkGEyb1o+cFzy9n3gXTr8tl+nU4JniO6+ru/v0=
Subject key identifier:   F4:EC:16:15:A3:10:0A:4C:4F:AB:44:0C:5B:AB:70:BB:23:3C:4B:C8
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       6EF127FA9F69AA2FB1BE490B0DE2CFFAF7EDE13F
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
Signing time:             Mon 14 Oct 2024 10:50:16 +0000
ROA not before:           Mon 14 Oct 2024 10:45:16 +0000
ROA not after:            Mon 13 Oct 2025 10:50:16 +0000
asID:                     60900
IP address blocks:        2602:fa6e:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f1:27:fa:9f:69:aa:2f:b1:be:49:0b:0d:e2:cf:fa:f7:ed:e1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Oct 14 10:45:16 2024 GMT
            Not After : Oct 13 10:50:16 2025 GMT
        Subject: CN=F4EC1615A3100A4C4FAB440C5BAB70BB233C4BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:8e:c9:3c:07:24:5e:91:6a:7d:db:de:2b:
                    9e:fb:13:a7:0c:0c:a6:c3:dd:f1:d8:d0:81:0c:c9:
                    2a:72:e7:e1:7d:9c:5f:3a:cc:29:02:f9:7a:4e:a4:
                    34:6e:88:df:4f:94:59:00:35:1b:30:8f:de:a3:7c:
                    49:6d:58:31:ff:26:dc:0f:c7:2a:13:2c:27:be:4f:
                    e7:93:0c:d0:f4:75:3b:e4:45:0e:a8:27:31:a8:43:
                    9f:aa:73:af:73:56:67:5b:3f:de:86:24:08:88:34:
                    54:0d:9f:ff:1e:a9:a2:f8:3b:3b:d1:cd:7f:6f:dd:
                    74:e5:b0:7a:96:99:27:01:72:6d:be:75:29:21:04:
                    e9:b5:91:e7:ca:d7:94:e6:46:c8:8c:8c:be:1c:16:
                    ae:0e:49:07:3c:a2:d1:54:c7:1d:17:6e:ec:a1:ab:
                    22:6d:e2:8b:40:5b:1b:97:a9:2f:8b:bd:5e:06:7c:
                    f2:0e:39:ad:de:50:0f:c0:7e:74:e4:f5:ec:69:89:
                    43:ba:13:5f:7e:18:14:fa:f8:e2:e4:df:31:ba:77:
                    b7:d9:7c:f6:45:88:a2:a6:ec:4c:c9:c2:75:9b:12:
                    71:04:72:6f:55:ce:b2:46:e0:8b:0c:c5:6f:36:1a:
                    0d:f7:71:b8:93:fc:ff:61:70:c3:dd:4f:df:58:d0:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EC:16:15:A3:10:0A:4C:4F:AB:44:0C:5B:AB:70:BB:23:3C:4B:C8
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:29:e6:8c:15:e0:cf:b6:0e:dc:71:a5:38:98:f0:b7:ea:
         42:a5:48:1a:fa:00:e0:d0:7a:58:08:86:81:2a:06:bf:b8:bd:
         c0:97:d1:6a:a9:d0:91:0f:57:3b:dc:e3:24:76:72:ad:23:eb:
         40:1d:c2:ba:a9:1a:10:6c:50:88:2d:b3:cf:9c:cd:f1:a8:2d:
         62:06:04:60:44:e4:29:69:aa:9b:85:78:a8:44:49:cc:6b:d9:
         31:f5:ee:b8:78:03:4b:52:d6:c2:81:cc:f9:12:5a:81:d8:d7:
         47:32:c8:b8:49:29:e9:c8:6e:ef:bc:c5:6e:73:3b:8c:8a:dd:
         d7:29:e2:cf:67:7f:86:20:ce:68:a9:87:37:b4:f6:c7:db:d2:
         7b:ec:02:a4:c7:61:1b:d6:47:d4:b8:2f:94:51:b7:00:55:e8:
         d5:ac:d3:08:ab:2e:41:e8:2d:80:fa:d5:c1:b8:5c:a9:68:b4:
         8a:cf:f8:0e:01:d2:b3:d4:8c:fb:31:1a:ca:a6:d5:43:73:16:
         d9:12:2e:66:8e:7b:df:1e:bd:41:cc:8d:b5:d9:d5:f1:2d:35:
         4c:b7:92:54:3a:36:f7:f4:73:50:b9:2e:42:94:d5:2a:51:6c:
         02:e7:a8:87:cb:90:ab:da:0d:c2:dc:f8:93:62:67:d2:76:79:
         3f:a0:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:50 2024 by rpki-client on console-fra.rpki-client.org