Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa
File:                     323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa (raw, json)
Hash identifier:          7ThfoF/QMfEcgKSvvFyFSMu/rOCZDrPQyEfroqB224U=
Subject key identifier:   97:A5:AE:77:17:77:81:8E:58:BF:21:7D:B8:1A:51:5F:98:59:06:8F
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       06ECE6E641179FCA3525A13FEFE253010836FF40
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa
Signing time:             Sun 12 Nov 2023 15:26:49 +0000
ROA not before:           Sun 12 Nov 2023 15:21:49 +0000
ROA not after:            Sun 10 Nov 2024 15:26:49 +0000
asID:                     198585
IP address blocks:        2602:fa6e:200::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 11:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ec:e6:e6:41:17:9f:ca:35:25:a1:3f:ef:e2:53:01:08:36:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Nov 12 15:21:49 2023 GMT
            Not After : Nov 10 15:26:49 2024 GMT
        Subject: CN=97A5AE771777818E58BF217DB81A515F9859068F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:55:64:0a:89:85:31:3f:08:62:ee:74:79:
                    78:57:ae:70:de:f6:24:7b:3f:5e:0d:01:9e:9e:9b:
                    36:d6:8a:82:3e:ac:16:00:e1:ff:e0:0b:67:37:0c:
                    f0:87:96:cc:cb:e0:20:01:8c:55:91:31:90:f3:c2:
                    bf:8d:58:3b:09:72:3a:37:5f:10:ad:10:63:64:fa:
                    8a:38:2f:98:73:d8:3d:47:db:6e:21:2a:b5:e1:2a:
                    39:6e:df:ae:46:ca:ef:d7:f4:63:fe:1a:43:05:0d:
                    7a:fe:f3:3a:97:e7:4d:66:8b:c3:88:80:22:ba:01:
                    4b:29:9e:d6:d9:ac:df:48:69:fc:78:5a:34:8d:2f:
                    1c:52:6b:b4:d3:fc:07:58:e9:20:db:35:e4:3a:e9:
                    61:4a:83:e4:e2:07:a2:bd:0d:d9:f7:c2:4d:1f:0c:
                    06:f2:ab:fd:06:1c:5b:97:da:34:c5:2f:ce:cd:6f:
                    be:39:0c:d2:f0:74:09:33:41:0c:87:3f:dc:80:b4:
                    a9:a1:59:af:19:49:38:2b:a7:7b:23:6a:13:35:71:
                    a8:15:bb:d2:1f:6d:09:7c:27:07:17:12:b0:5a:d2:
                    55:a6:e3:fb:40:a5:4a:eb:a4:b2:05:bc:be:bf:a2:
                    d3:46:4b:2f:d8:f4:ed:6e:9b:36:88:cc:f9:69:b6:
                    99:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:AE:77:17:77:81:8E:58:BF:21:7D:B8:1A:51:5F:98:59:06:8F
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:23:c2:d6:c4:38:db:81:14:0a:e8:fe:8b:15:aa:e7:83:de:
         2d:b3:d6:35:2f:08:83:e7:6c:ac:e8:03:1e:48:2c:11:a3:11:
         d2:3d:a2:5a:25:92:30:a6:b7:c0:bd:c3:f3:0c:f0:48:0b:f4:
         a0:fe:91:ac:db:84:25:16:61:26:f4:35:a5:20:93:22:1d:35:
         a1:5a:af:a9:13:ab:ce:ee:95:48:76:64:a0:a8:dd:e5:9e:92:
         8b:fb:68:78:f9:7f:26:c2:26:17:60:c3:03:ee:c3:50:c8:cc:
         0e:f8:55:3d:c2:dc:ef:3b:39:43:9c:13:48:ac:c1:4f:31:12:
         50:52:60:60:a1:c2:f4:67:ea:37:64:45:10:9c:d7:e4:de:e7:
         8a:0a:58:99:d2:1b:3f:be:33:55:50:8c:b7:10:64:f9:b7:e1:
         fc:6e:b8:6e:e4:16:27:de:2f:4f:26:64:a3:71:6c:65:c0:6b:
         9b:d7:75:c5:d4:9a:e1:fd:c7:7a:3b:6c:41:32:04:77:c5:bf:
         20:31:d6:ff:ad:52:87:c2:cb:9c:36:ef:60:a0:0b:c0:c1:3a:
         ec:5d:56:2a:02:b1:df:39:f3:14:de:b9:ad:9d:7b:96:78:2f:
         89:f5:4b:99:01:db:4b:9d:cd:32:d9:b8:de:94:ce:7f:fe:f7:
         63:0e:cc:8b
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUBuzm5kEXn8o1JaE/7+JTAQg2/0AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw
MjY3OTY2MDExMmJlOWEyZDcwHhcNMjMxMTEyMTUyMTQ5WhcNMjQxMTEwMTUyNjQ5
WjAzMTEwLwYDVQQDEyg5N0E1QUU3NzE3Nzc4MThFNThCRjIxN0RCODFBNTE1Rjk4
NTkwNjhGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzlVZAqJhTE/
CGLudHl4V65w3vYkez9eDQGenps21oqCPqwWAOH/4AtnNwzwh5bMy+AgAYxVkTGQ
88K/jVg7CXI6N18QrRBjZPqKOC+Yc9g9R9tuISq14So5bt+uRsrv1/Rj/hpDBQ16
/vM6l+dNZovDiIAiugFLKZ7W2azfSGn8eFo0jS8cUmu00/wHWOkg2zXkOulhSoPk
4geivQ3Z98JNHwwG8qv9Bhxbl9o0xS/OzW++OQzS8HQJM0EMhz/cgLSpoVmvGUk4
K6d7I2oTNXGoFbvSH20JfCcHFxKwWtJVpuP7QKVK66SyBby+v6LTRksv2PTtbps2
iMz5abaZewIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFJelrncXd4GOWL8hfbgaUV+Y
WQaPMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF
OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt
NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y
NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3
OTY2MDExMmJlOWEyZDcuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH
MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC83LzMyMzYzMDMy
M2E2NjYxMzY2NTNhMzIzMDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzEzOTM4
MzUzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEJgL6bgIAMA0GCSqGSIb3DQEBCwUAA4IBAQAwI8LW
xDjbgRQK6P6LFarng94ts9Y1LwiD52ys6AMeSCwRoxHSPaJaJZIwprfAvcPzDPBI
C/Sg/pGs24QlFmEm9DWlIJMiHTWhWq+pE6vO7pVIdmSgqN3lnpKL+2h4+X8mwiYX
YMMD7sNQyMwO+FU9wtzvOzlDnBNIrMFPMRJQUmBgocL0Z+o3ZEUQnNfk3ueKCliZ
0hs/vjNVUIy3EGT5t+H8brhu5BYn3i9PJmSjcWxlwGub13XF1Jrh/cd6O2xBMgR3
xb8gMdb/rVKHwsucNu9goAvAwTrsXVYqArHfOfMU3rmtnXuWeC+J9UuZAdtLnc0y
2bjelM5//vdjDsyL
-----END CERTIFICATE-----
Generated at Tue Jun 25 13:07:25 2024 by rpki-client on console-ams.rpki-client.org