Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa
File:                     323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa (raw, json)
Hash identifier:          DdFqWMe8YjBRE58x7m8buJzeQzhGFoQV6Tdjk/UJm5A=
Subject key identifier:   67:46:1C:BE:EF:DA:91:6B:30:D6:88:86:31:B4:02:6F:A0:8D:09:48
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       6712D8B75B2A6D8A4B339515F5FDBC9186D49E27
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa
Signing time:             Fri 21 Jun 2024 17:39:49 +0000
ROA not before:           Fri 21 Jun 2024 17:34:49 +0000
ROA not after:            Fri 20 Jun 2025 17:39:49 +0000
asID:                     11351
IP address blocks:        2602:f992:a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:12:d8:b7:5b:2a:6d:8a:4b:33:95:15:f5:fd:bc:91:86:d4:9e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jun 21 17:34:49 2024 GMT
            Not After : Jun 20 17:39:49 2025 GMT
        Subject: CN=67461CBEEFDA916B30D6888631B4026FA08D0948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:d9:6c:3c:f0:e5:88:0a:f3:11:d5:3f:30:
                    6d:5c:10:bf:e7:bf:c1:94:e4:c0:fe:b2:09:3d:d1:
                    df:0d:a0:c4:b8:2f:6e:dc:56:49:e8:86:e7:fd:f1:
                    36:40:f1:e1:65:62:e0:40:db:9c:87:79:68:43:88:
                    eb:92:30:46:f0:e3:51:90:db:4c:0a:ef:04:ed:4c:
                    1d:e6:3f:e7:7d:6d:53:72:6c:ea:f1:8e:f5:34:ab:
                    be:05:3c:f8:74:f8:a4:e8:a0:75:a6:17:cb:eb:2b:
                    f3:fa:49:7e:a9:da:3a:e6:94:69:62:70:2f:a0:88:
                    e6:f1:c7:2e:20:d4:24:c7:e8:6d:b3:78:bb:2b:15:
                    b4:14:cf:dc:e0:21:ca:6d:56:42:60:9e:a6:64:52:
                    58:cd:00:3a:6a:9f:6d:52:43:e6:29:61:dd:51:6c:
                    cb:96:85:bd:d2:18:f7:32:93:e8:2c:d0:35:f9:30:
                    9e:8e:52:1e:19:0f:58:0c:bd:78:57:a7:bc:70:0e:
                    e3:5f:5a:d7:b7:07:d8:37:a1:6b:74:ca:30:6b:92:
                    6f:b0:c7:da:cc:8f:1c:6f:3d:8b:fb:b6:83:2f:60:
                    d7:c0:7f:39:50:2b:cb:bc:4a:14:92:d0:41:72:f3:
                    10:5a:09:0c:d4:1d:4b:0a:94:01:ac:52:3a:cf:c3:
                    22:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:46:1C:BE:EF:DA:91:6B:30:D6:88:86:31:B4:02:6F:A0:8D:09:48
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:40:56:41:73:88:fa:77:3c:dc:41:a3:34:2d:9c:6a:46:17:
         eb:7c:88:fb:62:d1:66:86:92:01:e2:07:70:84:b0:41:20:a6:
         b0:0c:ac:dd:b3:e6:e7:2c:dd:ec:f4:4a:76:e7:3d:c0:d4:54:
         df:0b:00:a2:98:c2:20:43:93:9a:87:c4:35:62:bf:33:2a:04:
         1d:e1:41:10:df:91:fc:4a:78:d6:52:25:2e:23:74:15:4d:d3:
         2b:46:83:a2:4b:92:6b:1a:05:61:7d:c5:3e:2e:ee:61:49:7f:
         33:17:57:fc:8c:c0:94:71:53:59:d3:86:91:57:e7:15:9a:1f:
         98:e6:70:ad:d3:65:83:9c:08:3b:0c:f6:c6:17:f4:03:c2:77:
         3f:4c:19:ea:37:0b:a4:24:2b:37:2c:8a:28:dd:46:23:25:14:
         4a:95:3c:fc:c1:fa:ef:f6:82:fc:16:cc:49:d4:6c:98:92:7b:
         37:f9:7d:63:0a:bf:dc:b3:17:8c:fd:9e:79:b9:c7:55:0f:f4:
         74:ca:74:e0:24:5b:1d:b7:c7:75:2b:31:64:26:72:cf:fe:b4:
         9b:1a:99:a8:2d:2f:c2:33:c0:48:91:0b:6e:24:0c:a2:83:d4:
         e0:da:e4:54:c1:43:2a:35:78:f4:9a:b9:20:06:73:ef:c7:04:
         88:ea:6a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:00 2024 by rpki-client on console-ams.rpki-client.org