Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa
File:                     323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (raw, json)
Hash identifier:          mMm7sIXO5/HOrFuCVxMLtUjUW7H7tIPfaYADdGLvndY=
Subject key identifier:   48:1B:BD:74:BD:0A:2F:98:90:82:1A:8E:F0:2B:CF:4B:96:87:E9:82
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       320B0D933DB3B1A6F0355FEC7A63632AD199AF60
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa
Signing time:             Thu 15 Aug 2024 00:25:12 +0000
ROA not before:           Thu 15 Aug 2024 00:20:12 +0000
ROA not after:            Thu 14 Aug 2025 00:25:12 +0000
asID:                     208699
IP address blocks:        2602:f992:f4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0b:0d:93:3d:b3:b1:a6:f0:35:5f:ec:7a:63:63:2a:d1:99:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Aug 15 00:20:12 2024 GMT
            Not After : Aug 14 00:25:12 2025 GMT
        Subject: CN=481BBD74BD0A2F9890821A8EF02BCF4B9687E982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:63:f7:b9:94:d1:3c:ad:96:d3:f3:6d:09:
                    a9:74:f2:4b:b3:b0:85:0c:7a:9c:2a:e7:a8:c2:c3:
                    80:a9:76:69:6b:87:89:f4:00:49:3a:5c:8f:4e:54:
                    03:09:66:3c:13:98:2a:0c:14:c5:46:c5:73:b6:0c:
                    2a:74:4f:29:06:67:bb:88:56:98:bc:06:e5:06:97:
                    e9:0a:90:d8:47:06:21:75:eb:cf:c1:19:0e:15:90:
                    df:0e:ac:3a:71:7c:ae:72:a2:f5:6d:66:a7:75:72:
                    71:fa:6e:5f:f6:c2:45:b4:dc:dd:b1:84:ae:a0:65:
                    31:77:e6:45:8f:fa:1c:fb:05:a0:f1:9b:e6:6e:8c:
                    14:63:eb:2b:a4:c4:c5:65:d0:5a:42:5c:b9:bf:3c:
                    fd:e4:62:56:5b:bb:71:50:5b:1b:13:b7:5c:ae:98:
                    fc:0d:66:74:3b:ee:a8:56:63:43:25:e2:47:28:da:
                    31:c6:30:c0:30:8f:e1:81:7a:45:05:fe:15:60:2b:
                    64:e0:d3:0f:27:c3:0f:ec:01:db:10:a6:60:e4:70:
                    e0:ee:fd:b2:9d:1f:1b:15:7c:cb:ef:21:ea:c0:96:
                    66:56:91:6a:90:e8:2f:f5:79:10:61:3e:e9:8e:9f:
                    64:e2:25:b5:bb:22:98:cd:ae:99:88:76:91:f9:f5:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1B:BD:74:BD:0A:2F:98:90:82:1A:8E:F0:2B:CF:4B:96:87:E9:82
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:50:ad:ac:ff:33:60:a8:a0:ab:95:3f:3c:b4:6e:e9:03:19:
         56:20:7f:ff:62:38:bc:6d:bf:f9:46:c8:0d:0c:97:e0:bb:ee:
         f7:9c:60:3d:e8:c1:e6:12:f8:7f:1d:90:f7:ba:7f:96:73:61:
         63:04:2c:76:58:45:e8:2c:f3:67:34:9f:97:23:c2:90:2f:4a:
         ac:9e:7c:de:2a:1f:ba:43:dc:01:42:31:6f:99:24:44:57:30:
         4f:14:0c:1d:77:21:29:45:5d:8c:55:ae:76:c5:9a:6a:76:56:
         e5:4c:0a:25:87:26:2b:ed:e6:1f:43:c6:e9:14:0f:cf:71:bc:
         d2:7e:35:80:04:51:9e:f3:02:68:3b:89:0f:7f:ee:24:3e:af:
         d1:d0:e9:8d:93:f2:3b:39:bf:c3:f8:20:30:2e:af:5f:15:14:
         89:b7:f4:62:df:1e:d4:a1:ad:bd:93:66:03:c7:e3:1e:89:60:
         fc:5a:f5:f6:83:97:0d:7b:5a:6a:1b:af:f0:dd:d3:a8:07:15:
         9b:ba:34:4d:a2:a9:6a:de:1a:26:40:60:e3:bc:b6:f4:d1:30:
         65:56:42:62:a4:06:06:46:74:e2:2c:bf:df:c1:b6:37:3c:6c:
         02:f5:95:95:2c:ca:1b:ec:2d:1c:3a:99:a4:ca:bd:7d:91:5d:
         a0:3b:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:10:16 2024 by rpki-client on console-fra.rpki-client.org