Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34302d3430203d3e20323132363138.roa
File:                     323630323a666136653a3230303a3a2f34302d3430203d3e20323132363138.roa (raw, json)
Hash identifier:          CslAOquJpWXXWqvS1oU66coaa29EIDZGeRZ3LfCexTs=
Subject key identifier:   27:F5:EE:43:2A:90:2B:20:50:BD:4F:CB:13:96:A1:C3:0A:99:3F:45
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       4F5C1EBDA416BD4BD7E8DA1909DB80C812B0C75C
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34302d3430203d3e20323132363138.roa
Signing time:             Sun 02 Jun 2024 03:31:11 +0000
ROA not before:           Sun 02 Jun 2024 03:26:11 +0000
ROA not after:            Sun 01 Jun 2025 03:31:11 +0000
asID:                     212618
IP address blocks:        2602:fa6e:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5c:1e:bd:a4:16:bd:4b:d7:e8:da:19:09:db:80:c8:12:b0:c7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Jun  2 03:26:11 2024 GMT
            Not After : Jun  1 03:31:11 2025 GMT
        Subject: CN=27F5EE432A902B2050BD4FCB1396A1C30A993F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:60:66:64:e1:94:73:13:94:1f:0a:17:bd:
                    88:58:f4:9c:7b:29:0e:91:50:f8:15:2d:bc:4f:00:
                    c5:b8:5c:92:55:39:fa:ee:1e:cf:51:ff:2f:d4:a9:
                    30:2c:f2:35:ed:86:d2:c9:d3:83:11:b1:3e:26:39:
                    44:b6:4d:15:c7:2a:c0:34:c5:d9:2c:33:1d:10:68:
                    83:ca:38:d7:15:80:7f:9b:1d:7e:1f:a2:f0:df:3a:
                    e2:34:00:62:6e:40:99:e1:7f:d3:f6:9c:ba:22:85:
                    eb:0e:14:77:cf:18:3e:81:22:1d:07:5f:6b:04:69:
                    8d:5a:c6:79:56:8e:0d:bd:fe:c0:88:15:2f:cc:bb:
                    00:74:dc:56:83:4f:f5:71:0a:ef:1a:bc:05:dc:6e:
                    00:9a:6a:1b:64:86:7e:99:a3:c7:1d:01:94:cf:00:
                    43:62:51:f4:ba:19:85:c7:89:80:fa:a8:d3:63:c4:
                    65:4a:95:35:e8:be:c3:d3:b6:db:ac:cd:d5:13:d0:
                    e1:01:3b:45:95:14:0e:87:03:09:d6:83:f5:47:30:
                    00:a4:26:6f:85:fe:c6:28:e5:da:dc:99:db:82:5e:
                    06:0f:f8:7e:6b:de:3b:d3:5e:54:d5:99:e2:46:c5:
                    ba:78:7e:d0:14:83:47:9d:fb:3d:37:b1:96:7c:ec:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:EE:43:2A:90:2B:20:50:BD:4F:CB:13:96:A1:C3:0A:99:3F:45
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34302d3430203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:4a:f3:4c:6c:69:21:29:ca:9e:c7:6c:30:6b:9c:88:38:
         70:0d:97:cf:c6:ca:7f:6b:ac:b1:4b:5b:58:34:f7:17:5e:c3:
         61:e4:1f:a8:83:1f:bb:53:1a:b8:6c:1e:de:3a:16:73:b7:4a:
         48:f0:c7:22:c4:bf:5f:6e:51:df:d3:aa:02:86:5d:f8:1e:35:
         8e:10:9f:71:3b:cb:07:a0:5f:75:89:e6:91:9a:7e:a2:e4:ea:
         36:47:a4:0c:24:ee:33:74:4d:2c:e1:e9:91:72:cc:ba:f6:eb:
         aa:b3:f8:99:ba:34:c6:17:95:be:47:fa:bc:ff:cd:16:f8:4e:
         fb:47:58:d1:2e:07:0c:ab:0f:70:88:62:cb:b2:ac:04:72:78:
         13:c5:24:78:b1:cd:df:a2:e2:21:7d:be:b5:c8:de:a8:85:24:
         db:5f:88:21:15:52:b3:20:88:df:1e:68:31:bc:76:b0:6e:29:
         01:d3:b7:cd:2a:6a:89:bd:cc:ad:42:5b:a1:e4:2f:48:34:4e:
         cc:1f:fc:30:0b:a2:e5:a2:f2:5a:8d:1f:20:b0:3c:fc:d0:cc:
         aa:02:fb:06:80:09:16:98:e0:bb:48:d2:b2:1e:d0:d2:a7:7e:
         c4:87:df:59:f4:b0:55:7d:33:70:a2:ed:ef:7c:bd:af:af:0d:
         3b:59:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:20 2024 by rpki-client on console-fra.rpki-client.org