Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa
File:                     326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (raw, json)
Hash identifier:          lh1Ohfa3ToxmF5E1m7erqbdCbn0T+JzZxF0dzSFXjBU=
Subject key identifier:   60:23:64:EE:E0:9C:DD:7E:1A:9F:E2:BF:57:F9:8A:32:EA:F7:50:1B
Certificate issuer:       /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B
Certificate serial:       1D09CB9A6D305C7117B32E7171D8847ABE04323F
Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa
Signing time:             Fri 05 Apr 2024 15:52:38 +0000
ROA not before:           Fri 05 Apr 2024 15:47:38 +0000
ROA not after:            Fri 04 Apr 2025 15:52:38 +0000
asID:                     208453
IP address blocks:        2a07:54c1:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:cb:9a:6d:30:5c:71:17:b3:2e:71:71:d8:84:7a:be:04:32:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B
        Validity
            Not Before: Apr  5 15:47:38 2024 GMT
            Not After : Apr  4 15:52:38 2025 GMT
        Subject: CN=602364EEE09CDD7E1A9FE2BF57F98A32EAF7501B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:ad:66:b0:24:10:9a:7c:69:9b:98:2f:3a:
                    ba:a8:fb:31:f6:c3:9d:b9:7f:8c:aa:d7:5d:65:f5:
                    87:e9:19:d9:e3:25:61:52:cc:25:6e:23:63:17:99:
                    2a:74:66:f5:22:09:80:14:05:c1:17:40:f6:49:c9:
                    40:ca:89:83:7a:64:a3:b9:41:be:e5:38:9e:6d:02:
                    42:0b:8c:10:ee:39:72:6f:9d:e6:74:fe:18:1f:33:
                    9a:be:6f:a6:91:b7:36:f0:eb:00:28:ff:ad:9e:3b:
                    32:92:62:7d:dd:58:8f:6f:d1:23:73:62:6b:5e:73:
                    2b:36:64:d5:a5:cf:d9:ab:51:af:85:a3:3a:f2:ee:
                    a4:c9:2f:88:3d:b5:57:d1:16:db:64:79:fc:6b:5b:
                    c2:d4:ea:89:e1:0e:17:d0:35:c9:32:c9:2a:a9:3e:
                    56:b4:16:db:87:33:27:44:a7:49:5d:90:ac:61:1e:
                    1e:5f:26:1f:e9:2e:f2:2d:fa:49:98:ab:be:83:41:
                    64:21:6b:e9:32:a8:4c:b0:30:de:3b:02:2b:ba:31:
                    f4:a3:42:91:70:6b:db:69:3f:fb:d8:8d:67:e4:33:
                    a1:09:d6:a8:33:7b:65:ba:95:28:1b:75:87:e2:c2:
                    af:94:2b:05:f8:f2:b8:6a:52:3b:0b:5f:92:66:67:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:23:64:EE:E0:9C:DD:7E:1A:9F:E2:BF:57:F9:8A:32:EA:F7:50:1B
            X509v3 Authority Key Identifier:
                keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:30:65:89:57:e7:cb:ef:b1:ca:de:76:ec:ec:8c:58:78:6a:
         ce:8c:51:b7:5c:36:b1:40:6b:d1:dc:78:63:c6:55:18:be:77:
         9e:73:33:80:ca:f0:bf:4e:7d:5e:38:c3:ab:d7:9f:43:96:91:
         47:f1:d4:25:f4:9e:b4:33:00:b1:3f:6e:29:f8:39:8e:dc:7e:
         2c:1e:91:c0:7e:77:44:8c:02:c8:9e:7c:42:b0:76:a2:87:16:
         fa:2b:a3:41:8f:5c:0b:8f:92:89:e7:c6:fb:73:fd:b0:36:d3:
         05:65:55:20:40:e0:b7:7e:81:7a:b9:10:bd:ec:91:6a:e2:55:
         c7:eb:fe:84:6f:27:7d:9c:27:7e:ae:94:3f:14:a2:e0:5e:09:
         56:38:99:4f:4e:bd:77:25:33:49:84:72:ac:ab:72:51:57:33:
         f4:8a:72:a8:79:1e:57:8f:d8:f5:98:5c:90:ee:a1:2b:bf:48:
         b0:45:d3:6b:0e:83:ae:75:a9:09:33:20:a0:96:00:c0:eb:6e:
         21:bd:89:a4:d7:e1:69:ec:4d:69:f9:f6:10:5b:ab:86:f6:ca:
         e5:8c:d5:a9:d9:9c:5c:ac:c0:49:29:99:00:72:4f:a5:5b:bc:
         e8:ff:05:db:cf:46:d5:d9:da:03:82:0b:f8:2a:cf:a6:88:02:
         8e:81:18:5b
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUHQnLmm0wXHEXsy5xcdiEer4EMj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0
OUUwM0MwQjAeFw0yNDA0MDUxNTQ3MzhaFw0yNTA0MDQxNTUyMzhaMDMxMTAvBgNV
BAMTKDYwMjM2NEVFRTA5Q0REN0UxQTlGRTJCRjU3Rjk4QTMyRUFGNzUwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0K1msCQQmnxpm5gvOrqo+zH2
w525f4yq111l9YfpGdnjJWFSzCVuI2MXmSp0ZvUiCYAUBcEXQPZJyUDKiYN6ZKO5
Qb7lOJ5tAkILjBDuOXJvneZ0/hgfM5q+b6aRtzbw6wAo/62eOzKSYn3dWI9v0SNz
Ymtecys2ZNWlz9mrUa+Fozry7qTJL4g9tVfRFttkefxrW8LU6onhDhfQNckyySqp
Pla0FtuHMydEp0ldkKxhHh5fJh/pLvIt+kmYq76DQWQha+kyqEywMN47Aiu6MfSj
QpFwa9tpP/vYjWfkM6EJ1qgze2W6lSgbdYfiwq+UKwX48rhqUjsLX5JmZwW3AgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUYCNk7uCc3X4an+K/V/mKMur3UBswHwYDVR0j
BBgwFoAU+o8yoLId0neTFUIrWiGExkngPAswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzEvRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0OUUwM0MwQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1
QTIxODRDNjQ5RTAzQzBCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS83MTQ3NmQ2Mi05Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMS8zMjYxMzAz
NzNhMzUzNDYzMzEzYTY2MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz
MDM4MzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYEKgdUwfAwDQYJKoZIhvcNAQELBQADggEBADMw
ZYlX58vvscreduzsjFh4as6MUbdcNrFAa9HceGPGVRi+d55zM4DK8L9OfV44w6vX
n0OWkUfx1CX0nrQzALE/bin4OY7cfiwekcB+d0SMAsiefEKwdqKHFvoro0GPXAuP
konnxvtz/bA20wVlVSBA4Ld+gXq5EL3skWriVcfr/oRvJ32cJ36ulD8UouBeCVY4
mU9OvXclM0mEcqyrclFXM/SKcqh5HleP2PWYXJDuoSu/SLBF02sOg651qQkzIKCW
AMDrbiG9iaTX4WnsTWn59hBbq4b2yuWM1anZnFyswEkpmQByT6VbvOj/BdvPRtXZ
2gOCC/gqz6aIAo6BGFs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:13:49 2024 by rpki-client on console-ams.rpki-client.org