Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a36303a3a2f34342d3434203d3e20323134383632.roa
File:                     323630323a666136653a36303a3a2f34342d3434203d3e20323134383632.roa (raw, json)
Hash identifier:          jR+mAHPOYwiS3oxkHKADCgDIkaeURTbcGOhGT5PCPpw=
Subject key identifier:   DD:39:39:2D:72:E3:27:62:7D:62:E2:5E:51:E2:30:BB:A8:F8:3E:F2
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       37B26B693F98D6799CADD1EC016AA74C1C80B57F
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a36303a3a2f34342d3434203d3e20323134383632.roa
Signing time:             Fri 31 May 2024 22:21:18 +0000
ROA not before:           Fri 31 May 2024 22:16:18 +0000
ROA not after:            Fri 30 May 2025 22:21:18 +0000
asID:                     214862
IP address blocks:        2602:fa6e:60::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 11:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b2:6b:69:3f:98:d6:79:9c:ad:d1:ec:01:6a:a7:4c:1c:80:b5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: May 31 22:16:18 2024 GMT
            Not After : May 30 22:21:18 2025 GMT
        Subject: CN=DD39392D72E327627D62E25E51E230BBA8F83EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:33:d6:03:0c:79:8a:41:d2:13:3f:6b:2a:
                    b7:54:6d:db:dd:3a:81:f4:12:26:76:ed:fc:bb:0c:
                    c7:17:4a:0b:9a:fd:d9:cf:ee:18:de:a6:28:42:fc:
                    4c:2c:0a:ca:2e:1b:bd:99:bb:89:98:50:02:46:5b:
                    fc:e4:8b:1b:03:20:3e:bf:04:d6:c0:08:09:ed:4e:
                    7c:61:41:9c:c8:46:e9:d8:85:db:63:fb:3a:f7:00:
                    de:d1:46:37:ca:08:9f:ed:f2:72:a1:f4:52:e4:ac:
                    38:08:46:07:49:ee:ca:ee:5a:a4:b5:d9:46:65:4c:
                    2d:67:3f:01:a8:46:1e:88:e3:18:d2:99:a6:d6:b7:
                    76:1f:d5:18:67:3a:c5:78:82:09:66:d6:e4:fc:0d:
                    ab:48:73:d9:bc:53:b8:ec:72:12:41:92:90:28:d4:
                    84:b3:58:21:fc:0d:14:f7:a1:69:aa:99:81:78:13:
                    99:f8:8a:da:40:a1:96:a1:9b:da:a6:d6:72:1b:7d:
                    91:ff:6d:7f:a4:9f:c9:78:f9:2b:f7:b2:13:37:74:
                    f5:eb:47:07:4e:c2:43:c0:da:1f:c8:5e:07:e7:c4:
                    cf:e7:21:ef:6c:9e:d0:2c:85:8e:9d:b7:b2:1b:a3:
                    4c:32:2c:83:71:97:d0:e8:d3:d1:42:17:f4:6d:bf:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:39:2D:72:E3:27:62:7D:62:E2:5E:51:E2:30:BB:A8:F8:3E:F2
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a36303a3a2f34342d3434203d3e20323134383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:54:e8:41:ed:ae:12:95:95:1c:c9:68:2e:b2:d9:32:02:
         f3:f3:51:bb:6a:ce:94:f0:4d:05:75:e2:ad:41:10:43:be:88:
         b4:ba:b1:1b:64:c7:85:dd:d2:83:b0:ee:f6:51:6e:97:d6:6b:
         8a:5e:0c:ee:5e:53:39:ab:30:43:9a:c8:9c:79:13:4e:80:f1:
         25:36:0a:77:04:23:be:02:66:4e:03:54:3a:8d:d0:a2:49:ec:
         00:ae:c9:ea:1d:af:97:3a:88:b6:71:98:8d:00:3b:2e:c4:f7:
         8e:f5:78:04:12:32:b2:55:ed:1c:e5:b7:5a:02:7a:06:d5:d3:
         6e:7c:03:2a:f0:ba:61:52:f6:d2:e5:ec:61:80:f3:74:21:f9:
         cc:71:8e:c1:ab:9d:7c:91:0f:5a:67:15:7f:03:8f:f2:d0:d2:
         f9:9c:a0:21:e3:42:82:de:7f:3a:8f:73:e2:80:0e:44:12:b8:
         c1:0a:f1:44:22:ce:dc:c1:39:0a:c6:20:0c:28:77:30:98:eb:
         29:1f:75:ba:4f:8d:6f:c5:28:5b:f4:91:51:cd:a1:f0:e8:65:
         44:8f:38:26:fd:22:21:e3:58:2d:b0:ff:1e:0a:5f:9a:2a:bd:
         22:86:5e:ec:21:f2:0f:6a:42:19:e8:f6:78:1c:fc:e8:0e:4c:
         d0:bb:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 13:07:25 2024 by rpki-client on console-ams.rpki-client.org