Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34302d3430203d3e203135333533.roa
File:                     323630323a666136653a3230303a3a2f34302d3430203d3e203135333533.roa (raw, json)
Hash identifier:          Wmv9SBIYP6ze/lfp+KEzWXaOQSZWjqmk2vpSxJBWWvo=
Subject key identifier:   ED:F3:49:21:27:D3:3E:A8:00:36:39:AF:13:75:60:68:36:75:C7:16
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       0633637F405D131DF1B8F5CB179E0D8E5FCE25BE
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34302d3430203d3e203135333533.roa
Signing time:             Thu 21 Mar 2024 06:25:31 +0000
ROA not before:           Thu 21 Mar 2024 06:20:31 +0000
ROA not after:            Thu 20 Mar 2025 06:25:31 +0000
asID:                     15353
IP address blocks:        2602:fa6e:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:33:63:7f:40:5d:13:1d:f1:b8:f5:cb:17:9e:0d:8e:5f:ce:25:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Mar 21 06:20:31 2024 GMT
            Not After : Mar 20 06:25:31 2025 GMT
        Subject: CN=EDF3492127D33EA8003639AF137560683675C716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:12:8a:c0:ce:6f:fd:cf:d6:de:65:e1:a3:
                    c1:a5:4d:f2:af:dc:1c:89:62:82:f7:c1:78:0e:6f:
                    64:70:74:b1:e8:19:03:28:a9:29:0e:e1:1b:ba:47:
                    72:6b:7c:52:65:81:af:f5:55:f8:4b:f2:1f:11:e4:
                    b7:a9:b6:41:8c:22:12:ca:aa:82:c0:85:c8:12:b0:
                    0d:10:cf:64:6c:3b:18:3c:98:7f:7d:37:0a:91:49:
                    2d:31:06:39:e0:23:4f:72:13:b7:44:a6:4c:6c:38:
                    db:fc:72:41:78:1c:83:2c:d4:32:96:20:bc:b0:e8:
                    7f:49:fc:e9:59:03:18:1b:b2:b9:12:86:ca:d2:27:
                    a3:a8:df:ca:1b:c4:0c:64:27:1a:11:8e:9d:9c:9a:
                    a7:a7:8e:db:ae:d0:02:16:33:dd:0f:b7:1b:ec:68:
                    50:e2:e1:4e:e6:8b:d1:c5:37:52:5e:68:36:fc:c0:
                    50:62:7f:87:ad:37:6a:93:19:76:e5:fa:10:41:1e:
                    aa:9d:6c:8b:5a:49:37:3f:49:5c:36:90:d8:92:48:
                    d3:06:91:77:41:f9:ab:f2:2e:2b:74:ec:f7:a6:a7:
                    f0:4b:44:89:ec:ca:a6:cc:fe:a8:fd:69:10:09:7f:
                    39:5c:97:03:e8:d4:06:dc:90:2d:8d:00:3e:58:b0:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F3:49:21:27:D3:3E:A8:00:36:39:AF:13:75:60:68:36:75:C7:16
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34302d3430203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:93:3b:ba:67:95:5d:48:47:ff:25:03:f3:f9:aa:9c:f6:
         20:10:67:c8:b6:da:81:e7:6b:97:ec:bb:b8:ab:57:7f:f9:e1:
         95:ff:65:bf:e3:71:d7:df:57:4d:78:02:d6:28:c8:8f:88:e0:
         89:7f:a0:14:0f:cb:d3:2f:01:4d:ca:12:f9:02:d2:7b:78:83:
         76:9a:a8:1d:85:bd:67:23:ac:f9:a3:4e:e8:25:69:79:71:68:
         86:ef:36:1e:5d:6c:68:03:31:c9:c2:e8:5d:b3:6a:90:56:79:
         5e:f0:b3:d9:76:6e:58:ad:29:94:75:61:70:a8:2d:12:fc:37:
         f6:47:78:0e:6c:5f:19:66:26:af:77:23:5c:5f:56:bd:e6:78:
         7b:94:da:6e:d8:73:d3:df:50:1c:1f:1c:d5:c1:ea:63:33:a6:
         08:2e:18:bb:58:a8:b4:d8:47:f0:96:ac:24:12:cb:6d:76:fb:
         b3:d5:72:5e:5f:01:05:fc:43:c8:77:77:82:03:a3:d5:8c:03:
         fc:8a:5d:87:81:8f:4d:9b:56:37:ed:31:54:2f:a6:2e:90:f9:
         14:42:37:5c:d9:4d:fa:91:33:11:3a:f2:08:9e:7c:35:ad:43:
         cd:2d:1e:0b:48:62:80:20:f1:ff:43:dd:cc:47:93:f3:2e:f2:
         73:f3:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:13 2024 by rpki-client on console-ams.rpki-client.org