Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa
File:                     323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (raw, json)
Hash identifier:          H4rlObELQ4x8lFTYx1O62Ru3wMsX/PzI3uR609UHR+0=
Subject key identifier:   B6:EE:65:53:8D:43:E9:6C:19:C1:71:90:A6:47:1F:C4:23:2B:AF:8A
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       1309EB01269EF608BEE9BFDB4C4646304EDEC610
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa
Signing time:             Tue 06 Aug 2024 09:07:59 +0000
ROA not before:           Tue 06 Aug 2024 09:02:59 +0000
ROA not after:            Tue 05 Aug 2025 09:07:59 +0000
asID:                     33387
IP address blocks:        2602:f992:f3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:09:eb:01:26:9e:f6:08:be:e9:bf:db:4c:46:46:30:4e:de:c6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Aug  6 09:02:59 2024 GMT
            Not After : Aug  5 09:07:59 2025 GMT
        Subject: CN=B6EE65538D43E96C19C17190A6471FC4232BAF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:ca:1a:17:ee:ee:5c:f5:17:15:35:ca:ab:
                    0a:3d:82:7c:f9:83:0b:c6:30:fc:01:56:a7:4e:69:
                    0a:45:1e:0a:e5:e1:c6:96:dc:42:b5:28:26:30:3f:
                    82:8a:fa:3b:5a:38:94:98:70:17:30:1c:1d:48:6a:
                    b9:f7:b2:72:6f:05:ad:ed:55:27:cd:8a:39:56:c6:
                    31:64:6a:ea:c1:ed:b6:4c:56:2d:eb:e6:f8:43:69:
                    93:fa:0f:3d:33:3d:47:f6:1e:ab:97:ec:18:38:8b:
                    08:80:d8:d6:5e:d8:71:3a:89:be:ef:61:b1:fe:20:
                    a5:5a:4a:c6:52:13:4b:46:54:66:a0:3c:70:da:85:
                    7a:8f:cb:f7:6d:a2:97:ff:c3:75:fc:05:75:0b:83:
                    b8:aa:5a:8b:b3:65:1d:05:9b:fc:81:ab:3a:a2:30:
                    8c:d0:97:64:de:f0:77:33:33:bb:4d:de:f1:dd:d7:
                    3f:64:8a:63:47:54:f2:8d:5f:05:20:4e:a8:9d:23:
                    9a:d7:ab:4c:a9:24:a7:c8:47:bd:09:84:57:e6:18:
                    bc:23:ba:b9:1b:65:82:09:c1:94:ce:75:62:4b:8e:
                    8e:80:74:79:dc:54:f1:9a:f1:91:43:bb:63:5c:78:
                    bf:b1:cd:b8:4d:bd:19:3e:33:28:95:3f:b9:4f:b1:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EE:65:53:8D:43:E9:6C:19:C1:71:90:A6:47:1F:C4:23:2B:AF:8A
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:40:aa:06:88:a4:5d:8d:c8:dd:03:fb:cb:d6:b3:80:fd:
         e1:1e:02:32:1b:3f:49:47:19:7e:13:8f:02:89:1b:fd:c6:0f:
         ea:da:c0:a3:a9:bf:ff:d1:1a:82:12:7c:d4:c8:11:a9:96:dd:
         eb:91:17:3e:24:62:57:e7:98:3f:9e:8f:10:9a:08:01:c7:70:
         00:7d:34:bd:f0:5b:d6:60:70:29:d1:38:d3:34:e4:0e:da:87:
         72:96:e0:b0:ca:db:ab:3d:20:ba:c0:f6:35:4d:f2:eb:0d:61:
         c1:f8:2e:59:5d:58:f3:ca:f3:b4:35:fd:c8:c1:5f:71:9b:eb:
         55:d6:62:e7:42:02:05:89:29:40:f4:a0:de:17:bc:e8:4a:f3:
         ba:70:da:e8:03:e1:26:fc:2c:1e:53:74:4c:9e:36:bc:c3:d6:
         86:be:58:f7:ce:fd:2b:cc:ed:86:af:cb:a5:22:0c:2a:93:77:
         2a:00:8b:52:8d:74:6a:d7:bf:42:a4:51:df:68:72:b4:71:97:
         33:6a:a8:47:ae:dc:63:3a:d3:d6:d1:4a:99:eb:02:cb:54:94:
         3c:df:b2:3e:2f:4c:7c:05:a4:5e:ea:3a:d4:9f:64:5a:09:a6:
         54:61:f5:cf:da:0c:58:f1:90:b6:14:58:14:a1:94:43:0c:1c:
         a2:9f:47:09
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUEwnrASae9gi+6b/bTEZGME7exhAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjQwODA2MDkwMjU5WhcNMjUwODA1MDkwNzU5
WjAzMTEwLwYDVQQDEyhCNkVFNjU1MzhENDNFOTZDMTlDMTcxOTBBNjQ3MUZDNDIz
MkJBRjhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTPKGhfu7lz1
FxU1yqsKPYJ8+YMLxjD8AVanTmkKRR4K5eHGltxCtSgmMD+Civo7WjiUmHAXMBwd
SGq597JybwWt7VUnzYo5VsYxZGrqwe22TFYt6+b4Q2mT+g89Mz1H9h6rl+wYOIsI
gNjWXthxOom+72Gx/iClWkrGUhNLRlRmoDxw2oV6j8v3baKX/8N1/AV1C4O4qlqL
s2UdBZv8gas6ojCM0Jdk3vB3MzO7Td7x3dc/ZIpjR1TyjV8FIE6onSOa16tMqSSn
yEe9CYRX5hi8I7q5G2WCCcGUznViS46OgHR53FTxmvGRQ7tjXHi/sc24Tb0ZPjMo
lT+5T7GNIwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFLbuZVONQ+lsGcFxkKZHH8Qj
K6+KMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy
M2E2NjM5MzkzMjNhNjYzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzMzMzM4
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAmAvmSAPMwDQYJKoZIhvcNAQELBQADggEBAA/SQKoGiKRd
jcjdA/vL1rOA/eEeAjIbP0lHGX4TjwKJG/3GD+rawKOpv//RGoISfNTIEamW3euR
Fz4kYlfnmD+ejxCaCAHHcAB9NL3wW9ZgcCnRONM05A7ah3KW4LDK26s9ILrA9jVN
8usNYcH4LlldWPPK87Q1/cjBX3Gb61XWYudCAgWJKUD0oN4XvOhK87pw2ugD4Sb8
LB5TdEyeNrzD1oa+WPfO/SvM7Yavy6UiDCqTdyoAi1KNdGrXv0KkUd9ocrRxlzNq
qEeu3GM609bRSpnrAstUlDzfsj4vTHwFpF7qOtSfZFoJplRh9c/aDFjxkLYUWBSh
lEMMHKKfRwk=
-----END CERTIFICATE-----
Generated at Tue Oct 22 16:10:16 2024 by rpki-client on console-fra.rpki-client.org