Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131323a3a2f34382d3438203d3e20323135313437.roa
File:                     326130363a313238333a633131323a3a2f34382d3438203d3e20323135313437.roa (raw, json)
Hash identifier:          v9ANH+I0i7gt6799gTYm8rzUcGUNRAphWtMvbkwSLiI=
Subject key identifier:   0B:1F:DF:5A:81:65:0F:8D:0A:8A:61:80:E4:3D:BC:B9:3C:D6:3A:4A
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       33A8271C4D71D272C58F2901F5946B000EECEB2D
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131323a3a2f34382d3438203d3e20323135313437.roa
Signing time:             Mon 14 Oct 2024 08:59:33 +0000
ROA not before:           Mon 14 Oct 2024 08:54:33 +0000
ROA not after:            Mon 13 Oct 2025 08:59:33 +0000
asID:                     215147
IP address blocks:        2a06:1283:c112::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a8:27:1c:4d:71:d2:72:c5:8f:29:01:f5:94:6b:00:0e:ec:eb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Oct 14 08:54:33 2024 GMT
            Not After : Oct 13 08:59:33 2025 GMT
        Subject: CN=0B1FDF5A81650F8D0A8A6180E43DBCB93CD63A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:4c:43:fb:c3:59:4c:41:36:da:1b:bf:d1:
                    b5:60:75:81:94:3a:e7:c5:ba:b6:17:f8:d9:1c:bb:
                    66:46:ea:59:8f:e9:d3:68:ef:5c:5a:f3:50:e1:93:
                    27:e6:8f:5f:fd:34:16:bd:46:1c:64:9c:e0:c4:3e:
                    e1:fa:de:49:cd:a8:ec:a1:f7:d1:57:c6:fa:17:c7:
                    32:77:93:17:c2:08:7b:50:62:1f:94:51:14:98:c0:
                    ec:66:ff:c4:20:7c:74:56:fb:35:ad:28:a7:5d:1d:
                    68:f9:90:6b:73:5d:9e:f8:30:07:f5:0a:ce:3f:cb:
                    46:f3:51:d7:89:2c:10:f5:e8:63:a2:04:e2:d7:78:
                    ab:7c:3f:1c:0d:b0:37:9f:21:86:0f:41:ab:c5:7f:
                    51:67:53:21:d7:19:b5:a4:13:ad:35:87:90:91:0b:
                    f3:75:3a:e2:81:87:32:32:fc:74:3d:5a:f9:4a:7a:
                    8b:1b:2c:13:59:9f:0f:7c:96:8a:39:73:e1:ff:33:
                    f4:79:46:c9:53:84:a3:65:22:a0:19:e5:8c:0a:14:
                    5d:b8:e1:f4:a2:39:a4:ed:be:44:5a:18:3f:6e:03:
                    b0:25:23:38:d9:55:a3:ad:34:75:eb:36:e7:73:56:
                    62:78:59:95:a4:4a:8d:8f:dc:40:53:ea:55:97:36:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1F:DF:5A:81:65:0F:8D:0A:8A:61:80:E4:3D:BC:B9:3C:D6:3A:4A
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131323a3a2f34382d3438203d3e20323135313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c112::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:76:fc:7d:d0:8f:00:90:3e:00:19:ae:a2:bc:5c:26:06:f9:
         4e:24:08:a2:c6:2c:14:9f:3d:2c:3a:b2:0d:1c:2a:8f:97:87:
         0a:96:3c:89:64:af:a0:6e:f9:11:0c:c1:e2:d3:56:fc:d2:50:
         fd:94:6c:42:73:d4:00:03:15:a3:e4:17:50:71:1e:14:42:63:
         1c:34:5d:2b:dc:95:a8:96:f0:96:1f:fb:d7:fa:03:fc:b5:f1:
         61:86:ec:b3:ee:dc:63:0d:98:29:41:e2:33:a7:b3:14:3f:61:
         79:94:47:b6:9a:21:d4:fb:0e:5f:61:6e:28:7c:3d:81:c1:64:
         50:f6:1f:da:54:1d:a6:89:2e:24:d8:f3:2f:7b:82:e9:b8:9d:
         d7:23:b1:17:8b:a7:ac:49:29:49:a2:36:d7:22:73:e3:96:ac:
         17:fd:d0:ca:98:0c:e9:50:ff:96:ac:bf:f6:1a:94:b7:48:12:
         dd:48:18:0c:8c:6e:52:12:87:7f:46:5d:d2:74:b4:29:e6:ba:
         8f:45:39:60:87:68:6b:02:d8:0e:b1:bf:77:21:fd:01:8b:37:
         8a:e0:c6:b1:89:f0:a6:1c:7d:2d:b8:2f:52:b7:17:a0:2c:f5:
         2a:1e:33:49:41:6f:9f:14:73:dc:a6:c1:09:35:30:24:e2:77:
         42:24:69:e6
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUM6gnHE1x0nLFjykB9ZRrAA7s6y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3
OTg5MkM2QzAeFw0yNDEwMTQwODU0MzNaFw0yNTEwMTMwODU5MzNaMDMxMTAvBgNV
BAMTKDBCMUZERjVBODE2NTBGOEQwQThBNjE4MEU0M0RCQ0I5M0NENjNBNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxkxD+8NZTEE22hu/0bVgdYGU
OufFurYX+Nkcu2ZG6lmP6dNo71xa81Dhkyfmj1/9NBa9RhxknODEPuH63knNqOyh
99FXxvoXxzJ3kxfCCHtQYh+UURSYwOxm/8QgfHRW+zWtKKddHWj5kGtzXZ74MAf1
Cs4/y0bzUdeJLBD16GOiBOLXeKt8PxwNsDefIYYPQavFf1FnUyHXGbWkE601h5CR
C/N1OuKBhzIy/HQ9WvlKeosbLBNZnw98loo5c+H/M/R5RslThKNlIqAZ5YwKFF24
4fSiOaTtvkRaGD9uA7AlIzjZVaOtNHXrNudzVmJ4WZWkSo2P3EBT6lWXNmuVAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUCx/fWoFlD40KimGA5D28uTzWOkowHwYDVR0j
BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz
MDY0MkU2Nzc5ODkyQzZDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz
NjNhMzEzMjM4MzMzYTYzMzEzMTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg8ESMA0GCSqGSIb3DQEBCwUAA4IBAQBh
dvx90I8AkD4AGa6ivFwmBvlOJAiixiwUnz0sOrINHCqPl4cKljyJZK+gbvkRDMHi
01b80lD9lGxCc9QAAxWj5BdQcR4UQmMcNF0r3JWolvCWH/vX+gP8tfFhhuyz7txj
DZgpQeIzp7MUP2F5lEe2miHU+w5fYW4ofD2BwWRQ9h/aVB2miS4k2PMve4LpuJ3X
I7EXi6esSSlJojbXInPjlqwX/dDKmAzpUP+WrL/2GpS3SBLdSBgMjG5SEod/Rl3S
dLQp5rqPRTlgh2hrAtgOsb93If0BizeK4MaxifCmHH0tuC9StxegLPUqHjNJQW+f
FHPcpsEJNTAk4ndCJGnm
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:13:28 2024 by rpki-client on console-ams.rpki-client.org