Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa
File:                     323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (raw, json)
Hash identifier:          Soj0jy7kE9LYD/JQGLcuZdgn7zlP6r+4PQS8VEXZL3E=
Subject key identifier:   DD:62:6E:DB:C9:F5:52:72:DC:80:B6:D5:C1:5E:8F:16:1D:1A:B1:99
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       2D7D1CE8A4E6284EC3FD244231BEA84C280A0E41
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa
Signing time:             Wed 21 Feb 2024 00:59:33 +0000
ROA not before:           Wed 21 Feb 2024 00:54:33 +0000
ROA not after:            Wed 19 Feb 2025 00:59:33 +0000
asID:                     63390
IP address blocks:        2602:f992:ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7d:1c:e8:a4:e6:28:4e:c3:fd:24:42:31:be:a8:4c:28:0a:0e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Feb 21 00:54:33 2024 GMT
            Not After : Feb 19 00:59:33 2025 GMT
        Subject: CN=DD626EDBC9F55272DC80B6D5C15E8F161D1AB199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:b4:e6:ab:d0:88:75:72:3c:8b:24:ec:8b:
                    78:9e:9f:2b:5c:44:b7:88:71:e7:b2:44:06:2a:b2:
                    93:56:1e:3b:08:11:77:d8:75:83:44:1b:ad:92:55:
                    00:0c:f1:2d:b0:1d:a4:a3:f3:30:9b:79:04:61:a4:
                    23:27:54:6c:9c:23:c2:13:27:04:e8:4f:95:80:29:
                    80:31:db:8c:7c:75:77:85:8a:35:35:37:dc:6c:b8:
                    6a:5e:79:ed:2b:8b:a9:e2:99:50:c2:2e:18:c2:57:
                    62:81:6f:71:b0:0f:db:2e:87:fa:f7:d2:28:5d:1d:
                    06:9d:89:f1:b9:0d:e2:ae:d6:d9:3e:51:db:73:90:
                    19:c2:65:f5:0f:53:54:f3:81:92:56:5a:1c:56:6e:
                    fc:6e:57:f6:2f:e8:1b:8b:86:ac:c5:56:43:89:53:
                    3c:b1:1c:70:a3:30:60:28:71:de:82:3b:78:62:a1:
                    f0:6a:08:65:96:71:65:d5:e4:0b:47:d0:df:1b:8b:
                    2e:fa:40:8f:25:bc:21:ce:3c:a8:cb:9c:4e:cd:30:
                    b8:29:bf:eb:fe:e7:5a:13:73:56:d9:84:ef:57:28:
                    6e:4b:88:0e:8f:d8:c3:3b:31:1a:98:d2:45:d1:9d:
                    8c:1a:3d:b1:64:34:fd:8b:f9:e3:bb:25:0a:65:d7:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:6E:DB:C9:F5:52:72:DC:80:B6:D5:C1:5E:8F:16:1D:1A:B1:99
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:ca:3a:ca:2a:22:6a:35:c9:24:57:a7:ae:91:3d:b1:cb:
         64:d8:6a:e0:c8:11:83:f6:20:4c:a9:65:5d:c0:33:cf:f4:37:
         a0:d2:56:ae:a1:9d:ec:9a:e5:7e:bc:ef:7e:cc:55:b3:c4:6a:
         a2:81:6c:dc:4f:2c:56:76:a3:8f:57:55:0d:6f:6f:b1:86:79:
         d6:a9:b3:58:8c:40:39:fc:67:8f:d4:a0:5e:d2:90:21:6f:36:
         ad:40:03:27:6b:41:a7:da:b9:10:76:1d:5e:37:db:c5:36:8a:
         dd:9a:98:f4:ff:09:e1:59:33:28:0f:6d:fe:a7:9f:74:9d:05:
         0a:d5:3d:f1:f3:5a:f1:bf:c0:0b:b0:b7:ac:f4:b7:29:f9:d9:
         21:82:13:7b:b9:f2:fe:b6:84:ce:e6:91:1a:1e:6b:81:10:4a:
         10:9c:64:03:f0:e9:15:89:8d:0a:90:a9:10:fd:89:e6:c3:93:
         79:25:ba:ad:6a:04:3a:a9:17:8c:ce:3a:00:20:80:6d:85:5c:
         57:4e:ba:62:be:49:75:69:8e:14:af:cb:a9:bb:f8:ba:aa:a3:
         fd:a1:2d:88:42:3a:1f:88:1f:00:ad:72:33:71:e8:fb:2c:61:
         98:d3:4f:4a:92:57:01:91:53:9b:f0:64:b7:88:d9:f2:9c:aa:
         57:03:15:ff
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIULX0c6KTmKE7D/SRCMb6oTCgKDkEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjQwMjIxMDA1NDMzWhcNMjUwMjE5MDA1OTMz
WjAzMTEwLwYDVQQDEyhERDYyNkVEQkM5RjU1MjcyREM4MEI2RDVDMTVFOEYxNjFE
MUFCMTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCO05qvQiHVy
PIsk7It4np8rXES3iHHnskQGKrKTVh47CBF32HWDRButklUADPEtsB2ko/Mwm3kE
YaQjJ1RsnCPCEycE6E+VgCmAMduMfHV3hYo1NTfcbLhqXnntK4up4plQwi4Ywldi
gW9xsA/bLof699IoXR0GnYnxuQ3irtbZPlHbc5AZwmX1D1NU84GSVlocVm78blf2
L+gbi4asxVZDiVM8sRxwozBgKHHegjt4YqHwaghllnFl1eQLR9DfG4su+kCPJbwh
zjyoy5xOzTC4Kb/r/udaE3NW2YTvVyhuS4gOj9jDOzEamNJF0Z2MGj2xZDT9i/nj
uyUKZdekrwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFN1ibtvJ9VJy3IC21cFejxYd
GrGZMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy
M2E2NjM5MzkzMjNhNjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzMzMzM5
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAmAvmSAP8wDQYJKoZIhvcNAQELBQADggEBAFH/yjrKKiJq
NckkV6eukT2xy2TYauDIEYP2IEypZV3AM8/0N6DSVq6hneya5X68737MVbPEaqKB
bNxPLFZ2o49XVQ1vb7GGedaps1iMQDn8Z4/UoF7SkCFvNq1AAydrQafauRB2HV43
28U2it2amPT/CeFZMygPbf6nn3SdBQrVPfHzWvG/wAuwt6z0tyn52SGCE3u58v62
hM7mkRoea4EQShCcZAPw6RWJjQqQqRD9iebDk3kluq1qBDqpF4zOOgAggG2FXFdO
umK+SXVpjhSvy6m7+Lqqo/2hLYhCOh+IHwCtcjNx6PssYZjTT0qSVwGRU5vwZLeI
2fKcqlcDFf8=
-----END CERTIFICATE-----
Generated at Tue Oct 22 16:58:19 2024 by rpki-client on console-ams.rpki-client.org