Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e20323033343533.roa
File:                     323630323a666162383a3a2f33362d3336203d3e20323033343533.roa (raw, json)
Hash identifier:          J2sKfjACyurH+in0P1ps4ItvE1FbyKL+KntoacTxaIA=
Subject key identifier:   A4:D1:19:0B:2D:F2:08:D1:22:E4:D5:00:95:FB:BC:68:64:F4:55:55
Certificate issuer:       /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial:       0B89B4BC7E6E343DBB3E3135A7D83B443CFDF263
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e20323033343533.roa
Signing time:             Sun 12 Nov 2023 15:26:50 +0000
ROA not before:           Sun 12 Nov 2023 15:21:50 +0000
ROA not after:            Sun 10 Nov 2024 15:26:50 +0000
asID:                     203453
IP address blocks:        2602:fab8::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:89:b4:bc:7e:6e:34:3d:bb:3e:31:35:a7:d8:3b:44:3c:fd:f2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
        Validity
            Not Before: Nov 12 15:21:50 2023 GMT
            Not After : Nov 10 15:26:50 2024 GMT
        Subject: CN=A4D1190B2DF208D122E4D50095FBBC6864F45555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:e7:18:d4:d6:eb:16:4a:92:f0:6c:ea:a7:
                    64:45:90:8e:ed:79:b9:22:fb:26:5c:83:da:95:d9:
                    3d:09:29:4c:2d:1c:40:80:c6:79:32:bf:5b:87:ac:
                    07:0e:7c:3d:04:8b:c9:84:a5:5a:04:34:49:ff:0d:
                    97:c8:2e:cc:6b:6f:85:96:85:0f:73:82:f1:4d:fa:
                    40:2a:1d:fa:82:31:36:5c:bd:2a:c3:a9:59:22:b1:
                    44:55:f1:11:cc:19:78:4b:4b:55:42:20:6a:63:3a:
                    be:86:86:30:48:e5:43:05:cf:a7:63:52:41:9d:ec:
                    82:4a:ea:64:c2:c1:81:98:ac:dc:ea:8d:a8:2e:ad:
                    95:05:8b:33:99:bc:0f:5f:4a:b4:3d:53:9d:aa:c3:
                    21:ba:e7:81:6c:6b:fe:9d:48:7a:9e:d9:ed:6f:ff:
                    55:25:ca:7c:65:00:77:6c:b3:23:a9:93:7e:40:43:
                    0a:ad:64:6d:0c:cf:b3:28:78:cc:6a:b9:7d:f9:91:
                    84:25:f4:e8:f2:f3:e4:cb:08:99:d3:25:38:23:6a:
                    13:09:df:fe:a2:0f:80:06:8d:d5:75:df:c6:5f:e5:
                    4d:e7:d6:a8:72:50:ac:cd:44:3d:8e:58:3f:bd:69:
                    78:a0:1e:7d:2c:c5:c0:f4:e4:d0:bc:72:c1:e5:7c:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D1:19:0B:2D:F2:08:D1:22:E4:D5:00:95:FB:BC:68:64:F4:55:55
            X509v3 Authority Key Identifier:
                keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/323630323a666162383a3a2f33362d3336203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab8::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:5d:13:af:59:d7:6c:1c:21:1f:9b:1c:2f:0b:e2:35:a0:fe:
         4b:42:fc:2f:31:7a:b0:0c:a1:7f:6d:82:95:dd:a6:5f:bb:cc:
         74:49:4e:0f:6c:0b:5e:af:52:1f:ab:23:42:2d:1e:85:a1:c8:
         89:8a:b0:ca:4f:48:75:34:d6:90:8b:e3:f2:e5:42:b9:40:4d:
         21:00:04:ed:ec:68:ac:8e:12:e6:8c:9b:27:a6:5e:5c:ec:59:
         c6:8f:01:35:23:78:4c:c4:7f:27:44:2c:56:5c:f2:3d:86:77:
         81:3f:6b:c1:1c:91:56:6f:06:42:ad:fc:2a:69:6d:86:5b:63:
         73:a1:30:9e:d6:33:4b:7f:f9:49:09:37:2a:f5:03:3d:01:4d:
         e6:34:36:4e:54:45:9d:80:49:c6:45:77:7e:94:c7:1a:c9:15:
         ba:42:e0:b1:5b:8c:81:85:3d:d2:0c:71:af:96:30:5c:e8:83:
         6c:60:da:68:6e:19:91:ce:80:73:f6:79:74:57:30:42:ef:37:
         d9:62:5f:41:76:9a:44:28:0b:09:f3:1b:01:d3:e2:bb:33:43:
         0b:af:b0:66:2f:19:5a:1e:c2:0d:5d:d4:d1:89:e5:fd:94:18:
         36:fe:57:ea:80:1d:72:12:ce:71:c8:4d:5e:be:a0:9e:b6:ad:
         9a:f6:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 18:59:10 2024 by rpki-client on console-fra.rpki-client.org