Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa
File:                     323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (raw, json)
Hash identifier:          sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=
Subject key identifier:   15:1E:A2:77:9B:36:8F:3B:B5:B9:2F:AE:A5:13:87:DF:9D:B3:79:84
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       1F47BA7693B7BBB6CC39BB54A1921606785816BB
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa
Signing time:             Wed 25 Sep 2024 03:50:29 +0000
ROA not before:           Wed 25 Sep 2024 03:45:29 +0000
ROA not after:            Wed 24 Sep 2025 03:50:29 +0000
asID:                     53667
IP address blocks:        2602:f992:f6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:47:ba:76:93:b7:bb:b6:cc:39:bb:54:a1:92:16:06:78:58:16:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Sep 25 03:45:29 2024 GMT
            Not After : Sep 24 03:50:29 2025 GMT
        Subject: CN=151EA2779B368F3BB5B92FAEA51387DF9DB37984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:89:81:a6:b2:a3:d1:65:d0:78:d8:23:4f:
                    c6:21:da:7a:0d:75:f3:10:43:c9:00:ae:23:97:40:
                    19:b3:0f:d2:9d:03:e7:3a:1a:39:fe:a0:05:46:91:
                    9d:44:61:03:9d:bf:4d:1f:34:a7:f7:50:49:13:dc:
                    8f:cc:fa:36:02:cd:e1:01:73:25:49:b4:45:7d:92:
                    b0:d2:05:4e:b3:e6:1c:0f:d7:53:c7:2c:53:5e:01:
                    2b:6d:cf:57:0f:98:19:82:7d:05:57:6c:38:a0:f0:
                    7a:94:64:9f:77:7d:5a:12:87:be:3c:13:39:1e:3e:
                    d9:6c:41:e1:f9:1d:98:7a:bb:61:7a:16:bf:17:bd:
                    34:dd:6a:27:6b:32:e3:e5:80:5e:c6:5a:40:17:2b:
                    af:45:f3:33:bc:6d:f1:04:87:db:fa:d0:fc:a4:4d:
                    7a:3e:47:63:4b:d0:89:b2:cb:e4:ea:ef:77:2d:9b:
                    c2:3e:c5:97:4b:cd:65:fc:b3:bd:3b:95:dc:55:93:
                    0f:12:a9:ae:46:05:29:5d:7a:87:53:d8:82:41:04:
                    53:f3:d5:7d:85:de:19:df:66:24:97:20:f9:0d:2c:
                    bf:16:d9:b8:0e:1e:7a:c5:f5:c2:80:9d:eb:71:c7:
                    9f:a1:b7:82:a1:48:7b:38:a9:8f:64:a2:ce:83:ab:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1E:A2:77:9B:36:8F:3B:B5:B9:2F:AE:A5:13:87:DF:9D:B3:79:84
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:b1:43:0b:25:0d:71:0f:3c:9d:42:21:dd:05:d9:11:cd:9e:
         51:6f:cb:6e:c8:a9:d9:be:62:82:9f:19:b7:6d:df:41:52:0f:
         ad:bc:07:f1:2e:72:10:b4:92:c4:31:06:68:0a:44:2e:43:2c:
         5c:78:0a:bf:b1:45:71:c2:72:2f:ec:1b:0e:3c:39:d2:cc:5c:
         12:98:a4:7e:76:f2:51:2c:f7:f8:4a:1e:d7:e3:87:6b:0b:a3:
         05:fc:18:c1:cc:05:b9:8c:01:d9:91:ff:20:1a:9c:83:b1:31:
         64:5e:82:7f:9f:21:3c:0c:6f:50:ee:20:b4:21:08:a9:3d:0f:
         76:1c:4d:43:00:95:e8:fa:a8:9e:4f:ce:38:b5:d1:97:d8:e8:
         34:c8:0e:74:90:8b:43:bf:26:49:58:ec:03:e0:0e:9e:59:40:
         0c:e6:ab:f8:16:b3:77:2a:13:71:4b:03:ed:dd:08:df:9d:c7:
         cd:fe:5a:8b:f6:75:fe:6d:9d:b2:64:c7:a5:ab:68:f2:e4:c4:
         8c:3a:c0:a6:64:6e:cf:e2:67:c6:a0:40:e4:9f:46:f2:67:4c:
         56:9d:de:0a:35:c8:e1:11:e3:83:fc:a1:d8:63:e9:59:d5:5e:
         5b:39:54:fc:ac:9c:b4:2e:7e:80:22:bc:75:af:71:70:a3:61:
         db:17:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:33:34 2024 by rpki-client on console-ams.rpki-client.org