Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa
File:                     323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (raw, json)
Hash identifier:          fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=
Subject key identifier:   98:7C:B9:85:2D:CD:38:F9:2D:A0:98:83:F2:9E:E1:36:7D:7E:93:94
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       56DC1F5D4720245357BC558F3F5BC764F8E0BFDC
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa
Signing time:             Mon 23 Sep 2024 12:27:08 +0000
ROA not before:           Mon 23 Sep 2024 12:22:08 +0000
ROA not after:            Mon 22 Sep 2025 12:27:08 +0000
asID:                     214258
IP address blocks:        2602:f992:f5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:dc:1f:5d:47:20:24:53:57:bc:55:8f:3f:5b:c7:64:f8:e0:bf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Sep 23 12:22:08 2024 GMT
            Not After : Sep 22 12:27:08 2025 GMT
        Subject: CN=987CB9852DCD38F92DA09883F29EE1367D7E9394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:cc:42:72:01:88:20:b7:c9:f5:49:da:bc:
                    33:37:21:9f:17:f3:b3:6f:dd:e5:23:4d:1d:f2:42:
                    2d:74:95:32:dc:7b:b6:0f:c6:5c:dc:56:50:80:87:
                    a4:41:ef:bc:34:fb:86:69:77:c8:bb:0c:7f:fd:ef:
                    04:51:52:8a:e4:af:d7:4c:aa:d1:07:80:2a:98:b3:
                    c4:d1:5d:25:db:ff:01:e6:25:2e:0b:6f:5b:5e:47:
                    d4:b8:83:5b:fe:28:99:2c:1c:a3:f7:6d:30:e7:c6:
                    e1:ff:81:13:b8:ac:f9:a3:ac:c6:65:74:7e:c6:56:
                    dc:69:96:c6:e5:55:7d:aa:2c:dc:cb:97:c5:7f:e9:
                    0b:a4:3f:d9:1e:5d:ea:c8:f3:b2:73:e4:cc:fd:b9:
                    45:0b:f9:9e:30:71:0b:6e:0c:25:7f:2c:22:e3:4c:
                    53:55:3f:33:9e:c9:86:1b:20:fa:10:c7:17:4a:0f:
                    21:41:00:a2:33:47:5b:b6:62:cb:3f:71:ef:4c:af:
                    89:7f:5d:3e:3d:c9:30:b8:f3:e3:63:fb:3e:a0:24:
                    f8:a4:e4:5d:4c:e0:9c:1a:71:93:21:c5:94:e7:80:
                    e7:95:69:7d:c9:c1:73:86:1c:1d:2f:ef:b8:43:59:
                    2d:ec:68:b3:37:19:62:52:19:32:2c:66:09:bc:b1:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7C:B9:85:2D:CD:38:F9:2D:A0:98:83:F2:9E:E1:36:7D:7E:93:94
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:4b:93:8d:5a:6a:a1:f2:0f:50:f0:48:17:a3:91:bb:1f:
         f7:59:dc:68:1a:9b:c2:d8:55:b7:21:05:79:46:06:e9:9b:37:
         57:04:26:4b:04:c6:8c:c0:40:0f:c0:fd:0e:30:56:61:6d:26:
         46:c0:ef:c8:85:78:0e:f4:4e:85:19:5f:a3:56:13:33:d5:93:
         ee:cb:95:d2:a1:2c:7d:ad:41:f7:09:fc:1e:d3:f3:6a:4d:0a:
         4f:d2:27:29:95:b4:05:f3:4a:64:ac:d6:f5:f9:1a:3a:af:d6:
         a7:7f:01:cf:f8:30:56:9d:1a:3d:27:f1:03:b6:9b:1c:56:a0:
         f6:e5:47:69:ce:2e:0d:e8:b3:e3:3f:39:32:5f:e9:28:c2:1f:
         19:56:30:d1:7d:38:f8:99:b3:e7:69:19:b5:50:2d:85:e3:45:
         b8:57:b2:39:d7:7a:28:e7:a8:4e:c4:6c:3d:56:9d:cd:1e:3f:
         6f:b5:32:4f:b7:64:67:1e:b9:50:c7:19:68:18:d8:94:1f:70:
         fc:3e:49:ef:af:f9:2e:e6:63:ea:bf:a6:28:72:cb:43:2f:ad:
         86:4e:6d:b6:ac:72:ae:86:a9:39:bc:5b:85:71:06:6d:19:42:
         ca:48:92:26:54:db:11:8e:da:39:f6:c9:de:26:b2:65:85:b1:
         8b:22:b3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:50 2024 by rpki-client on console-fra.rpki-client.org