Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa
File:                     323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa (raw, json)
Hash identifier:          CuuYc8MUpVSK565EQNYdg0n6ncQQoU1CMGYQB2DaFns=
Subject key identifier:   1C:56:81:43:62:9C:E2:6A:BF:92:11:5F:07:08:7A:57:3E:B1:D6:49
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       66504DB3B72313C072BD77173D75A039E290E5C3
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa
Signing time:             Mon 05 Aug 2024 15:57:01 +0000
ROA not before:           Mon 05 Aug 2024 15:52:01 +0000
ROA not after:            Mon 04 Aug 2025 15:57:01 +0000
asID:                     174
IP address blocks:        2602:f992:90::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 09:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:4d:b3:b7:23:13:c0:72:bd:77:17:3d:75:a0:39:e2:90:e5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Aug  5 15:52:01 2024 GMT
            Not After : Aug  4 15:57:01 2025 GMT
        Subject: CN=1C568143629CE26ABF92115F07087A573EB1D649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:a0:12:77:ae:80:ca:5c:5d:cd:1d:d8:85:
                    c1:35:7a:f8:21:cf:a2:2e:1b:98:71:3b:ee:0d:54:
                    34:69:57:a3:b4:df:3f:63:cd:d9:63:2e:63:c5:ad:
                    00:e4:b9:0b:06:89:8d:d4:e7:8b:da:bd:1e:4a:d7:
                    a0:aa:76:12:20:ff:e8:9e:d4:a9:38:50:4b:01:9e:
                    96:e4:08:95:5d:90:43:fc:0e:87:61:12:13:05:2f:
                    49:af:6c:f4:0c:4c:0e:b9:a5:ac:fc:41:98:33:e8:
                    1f:c3:f5:a2:7f:22:bd:ed:9d:72:8b:a7:3c:6e:ce:
                    8e:e6:c9:de:c5:87:ff:00:59:ad:6e:69:a6:ed:a7:
                    3b:d1:f9:a2:76:df:fd:ce:30:93:ff:7e:fe:6e:68:
                    a8:9d:d2:83:97:ca:53:11:91:cb:1c:e6:a0:5c:6f:
                    98:81:59:d4:c5:83:d0:98:19:fd:cd:e9:54:10:9e:
                    de:d4:8f:80:db:d8:0e:3c:45:b8:b8:db:0e:9c:fd:
                    44:9d:92:4f:04:61:55:8b:d7:2a:a9:c0:4b:68:b8:
                    b1:69:02:2c:26:42:51:09:52:bf:fd:46:98:4a:6b:
                    53:8a:b7:77:27:20:18:38:e2:ff:5a:19:f3:8b:ac:
                    03:c2:b7:2b:23:20:f5:4d:4b:79:46:a7:cb:16:c8:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:81:43:62:9C:E2:6A:BF:92:11:5F:07:08:7A:57:3E:B1:D6:49
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:90::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:6f:39:bb:6a:69:e2:2a:c8:cb:16:e6:0f:81:83:5c:c5:d8:
         22:63:6c:09:22:7b:34:07:78:c2:ba:ab:e7:78:40:1b:1d:c3:
         8e:a0:2d:8f:88:c1:f6:31:7a:3e:d8:51:e7:5f:fe:c3:bb:b1:
         1e:67:29:42:d8:1f:34:cc:ce:c7:81:59:99:4f:86:c3:d3:63:
         a0:4d:6f:38:57:7a:80:2e:7e:39:61:67:ac:cf:77:5d:14:eb:
         2c:63:15:19:ba:d0:16:bb:9a:69:89:cb:b6:df:ca:0a:fe:54:
         51:6f:9d:2c:cf:74:02:b0:76:93:8b:26:9a:ea:58:24:d4:c5:
         2f:b5:2c:90:73:2f:c9:79:46:87:50:eb:e6:a0:e4:7e:27:61:
         40:dd:8e:55:ff:27:5d:5f:3d:82:af:f1:e0:61:30:39:a4:c5:
         11:f5:d8:de:5a:8f:c9:6e:db:81:77:ee:f2:cb:84:bc:43:ed:
         57:96:ac:26:0c:43:c0:19:46:4b:4f:bb:ac:2e:9e:2f:9a:37:
         5e:3b:58:c1:0b:52:45:34:f5:01:4b:73:0a:01:c4:c8:85:8a:
         18:5f:5b:14:05:b6:ba:37:01:e9:b8:84:95:25:12:1a:db:d5:
         90:0d:ae:ec:1e:a1:7b:ca:5b:d4:c1:fe:a4:f1:22:c2:72:2a:
         db:61:e9:ca
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgIUZlBNs7cjE8ByvXcXPXWgOeKQ5cMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjQwODA1MTU1MjAxWhcNMjUwODA0MTU1NzAx
WjAzMTEwLwYDVQQDEygxQzU2ODE0MzYyOUNFMjZBQkY5MjExNUYwNzA4N0E1NzNF
QjFENjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+6gEneugMpc
Xc0d2IXBNXr4Ic+iLhuYcTvuDVQ0aVejtN8/Y83ZYy5jxa0A5LkLBomN1OeL2r0e
StegqnYSIP/ontSpOFBLAZ6W5AiVXZBD/A6HYRITBS9Jr2z0DEwOuaWs/EGYM+gf
w/WifyK97Z1yi6c8bs6O5snexYf/AFmtbmmm7ac70fmidt/9zjCT/37+bmiondKD
l8pTEZHLHOagXG+YgVnUxYPQmBn9zelUEJ7e1I+A29gOPEW4uNsOnP1EnZJPBGFV
i9cqqcBLaLixaQIsJkJRCVK//UaYSmtTird3JyAYOOL/Whnzi6wDwrcrIyD1TUt5
RqfLFsgg4wIDAQABo4IC0DCCAswwHQYDVR0OBBYEFBxWgUNinOJqv5IRXwcIelc+
sdZJMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy
M2E2NjM5MzkzMjNhMzkzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzczNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCYC+ZIAkDANBgkqhkiG9w0BAQsFAAOCAQEAOW85u2pp4irIyxbm
D4GDXMXYImNsCSJ7NAd4wrqr53hAGx3DjqAtj4jB9jF6PthR51/+w7uxHmcpQtgf
NMzOx4FZmU+Gw9NjoE1vOFd6gC5+OWFnrM93XRTrLGMVGbrQFruaaYnLtt/KCv5U
UW+dLM90ArB2k4smmupYJNTFL7UskHMvyXlGh1Dr5qDkfidhQN2OVf8nXV89gq/x
4GEwOaTFEfXY3lqPyW7bgXfu8suEvEPtV5asJgxDwBlGS0+7rC6eL5o3XjtYwQtS
RTT1AUtzCgHEyIWKGF9bFAW2ujcB6biElSUSGtvVkA2u7B6he8pb1MH+pPEiwnIq
22Hpyg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 11:56:51 2024 by rpki-client on console-ams.rpki-client.org