Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e203135333533.roa
File:                     3137302e33392e34392e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier:          AdYdBhtkzh2u2S96BfB4/z7dQVM0R6NO3U/fMgGAwTM=
Subject key identifier:   2A:CE:4A:CA:4C:60:B1:56:90:0A:53:7A:B4:6A:08:EF:4C:62:F9:24
Certificate issuer:       /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial:       74F187678441DF898191EF0D3DB9F533FEADFD01
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e203135333533.roa
Signing time:             Tue 19 Dec 2023 18:13:55 +0000
ROA not before:           Tue 19 Dec 2023 18:08:55 +0000
ROA not after:            Tue 17 Dec 2024 18:13:55 +0000
asID:                     15353
IP address blocks:        170.39.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 06:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f1:87:67:84:41:df:89:81:91:ef:0d:3d:b9:f5:33:fe:ad:fd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
        Validity
            Not Before: Dec 19 18:08:55 2023 GMT
            Not After : Dec 17 18:13:55 2024 GMT
        Subject: CN=2ACE4ACA4C60B156900A537AB46A08EF4C62F924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:85:7c:c3:3c:db:8a:49:fc:91:f2:9a:98:
                    91:a5:a8:db:40:90:94:88:2a:36:51:b1:41:11:c4:
                    00:c1:c8:7f:a8:b6:dc:87:4c:6f:98:c8:68:ee:5c:
                    fe:18:90:39:f3:14:88:c7:74:8c:fe:93:67:bc:49:
                    56:52:7a:28:32:aa:0a:39:9c:05:f9:9e:ae:ff:ae:
                    ad:9a:b7:27:77:fc:9f:fe:20:9e:1c:4b:80:0e:86:
                    ee:eb:fa:c4:23:38:16:f8:42:ec:ff:72:38:e1:36:
                    dd:f9:5a:4c:15:14:7b:46:c4:70:12:70:bd:88:b5:
                    17:80:f7:80:f2:04:3e:b0:40:0f:49:66:02:5e:b2:
                    df:ae:18:35:42:b1:9a:0a:8a:ed:80:46:fa:59:1f:
                    4d:1c:2e:93:64:99:1b:a2:63:82:24:19:8b:ba:fb:
                    13:0b:41:71:65:4a:60:b0:b6:32:51:7b:f1:4e:3e:
                    51:e1:fc:05:1b:2a:14:6e:db:37:28:b9:c0:7f:b8:
                    9e:2f:96:4b:9c:19:db:62:a9:fe:ab:37:36:b5:30:
                    b7:a9:db:5d:ff:c6:a3:52:b0:51:d9:5c:9c:28:27:
                    a9:d6:17:6f:80:9a:d6:e6:5c:74:d1:30:96:55:32:
                    d8:06:3f:7a:74:ff:c2:7c:71:58:a7:b5:1c:4b:18:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:4A:CA:4C:60:B1:56:90:0A:53:7A:B4:6A:08:EF:4C:62:F9:24
            X509v3 Authority Key Identifier:
                keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:93:b2:b4:06:04:53:50:68:ac:4f:0c:51:96:14:69:f4:
         a2:d7:9e:0e:72:0c:87:73:42:d0:7b:1d:eb:d1:a1:d2:fe:6e:
         64:07:fe:80:2c:d9:bd:eb:8d:2f:a3:79:b8:9c:63:9b:24:7f:
         aa:18:6f:03:36:c1:6b:1a:ed:bd:bd:bb:af:d4:b4:fe:a5:64:
         13:e5:7e:cb:7c:9a:ad:77:e8:7d:d6:9e:1c:6f:3c:64:1e:a9:
         9a:d5:17:5c:cd:86:b9:73:78:8e:d7:84:8e:af:51:8a:b4:a8:
         25:b4:0e:62:07:54:65:62:21:b6:13:db:c6:5f:5a:9f:ef:db:
         9c:52:fe:59:02:2a:58:c0:d9:ed:1d:38:10:dc:42:ea:aa:50:
         36:50:00:5f:91:1e:60:9d:e7:ec:6c:18:c0:03:58:99:2c:06:
         ab:4a:94:7b:27:42:c4:f1:89:fe:52:24:cf:01:32:c8:3f:02:
         12:17:ed:ba:28:a5:e7:47:d9:49:48:74:fe:2f:65:82:7c:f3:
         a1:9a:9d:ed:dd:4f:52:f6:82:a9:35:f8:a5:45:ab:c9:42:e1:
         4f:0c:c5:f8:74:fe:b7:f2:6c:27:1d:a4:e4:a6:f1:3a:98:28:
         17:b6:5b:d5:1e:12:e3:a7:82:63:ba:55:4e:90:65:7d:94:1d:
         78:68:72:d7
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUdPGHZ4RB34mBke8NPbn1M/6t/QEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4
Zjc5NGRmMzJiZmU5ZWQwNzEwHhcNMjMxMjE5MTgwODU1WhcNMjQxMjE3MTgxMzU1
WjAzMTEwLwYDVQQDEygyQUNFNEFDQTRDNjBCMTU2OTAwQTUzN0FCNDZBMDhFRjRD
NjJGOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8CFfMM824pJ
/JHympiRpajbQJCUiCo2UbFBEcQAwch/qLbch0xvmMho7lz+GJA58xSIx3SM/pNn
vElWUnooMqoKOZwF+Z6u/66tmrcnd/yf/iCeHEuADobu6/rEIzgW+ELs/3I44Tbd
+VpMFRR7RsRwEnC9iLUXgPeA8gQ+sEAPSWYCXrLfrhg1QrGaCortgEb6WR9NHC6T
ZJkbomOCJBmLuvsTC0FxZUpgsLYyUXvxTj5R4fwFGyoUbts3KLnAf7ieL5ZLnBnb
Yqn+qzc2tTC3qdtd/8ajUrBR2VycKCep1hdvgJrW5lx00TCWVTLYBj96dP/CfHFY
p7UcSxivvwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFCrOSspMYLFWkApTerRqCO9M
YvkkMB8GA1UdIwQYMBaAFJOwKWwxeHeA/oQTMY/Q0nCDg0zFMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC84LzkzQjAyOTZDMzE3ODc3ODBGRTg0MTMzMThGRDBEMjcw
ODM4MzRDQzUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1j
ZTcwNDVmZmQyM2EvMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4Zjc5
NGRmMzJiZmU5ZWQwNzEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH
MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC84LzMxMzczMDJl
MzMzOTJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMzM1MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACqJzEwDQYJKoZIhvcNAQELBQADggEBAEXXk7K0BgRTUGisTwxRlhRp
9KLXng5yDIdzQtB7HevRodL+bmQH/oAs2b3rjS+jebicY5skf6oYbwM2wWsa7b29
u6/UtP6lZBPlfst8mq136H3WnhxvPGQeqZrVF1zNhrlzeI7XhI6vUYq0qCW0DmIH
VGViIbYT28ZfWp/v25xS/lkCKljA2e0dOBDcQuqqUDZQAF+RHmCd5+xsGMADWJks
BqtKlHsnQsTxif5SJM8BMsg/AhIX7boopedH2UlIdP4vZYJ886Gane3dT1L2gqk1
+KVFq8lC4U8Mxfh0/rfybCcdpOSm8TqYKBe2W9UeEuOngmO6VU6QZX2UHXhoctc=
-----END CERTIFICATE-----
Generated at Sun Jun 2 04:20:44 2024 by rpki-client on console-fra.rpki-client.org