Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200866.roa
File:                     AS200866.roa (raw, json)
Hash identifier:          yjZaDQaq8i9i2ds1lNG8yU/LFjKTz/Ad90qQ/6l+eM0=
Subject key identifier:   66:2E:BD:51:F3:06:CB:FD:B5:76:50:BF:2F:D5:98:AF:43:9B:91:38
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       6EECD4353CBB5079559F0C92029AC4CA1AE873D2
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200866.roa
Signing time:             Tue 20 Aug 2024 02:31:54 +0000
ROA not before:           Tue 20 Aug 2024 02:26:54 +0000
ROA not after:            Tue 19 Aug 2025 02:31:54 +0000
asID:                     200866
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ec:d4:35:3c:bb:50:79:55:9f:0c:92:02:9a:c4:ca:1a:e8:73:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:54 2024 GMT
            Not After : Aug 19 02:31:54 2025 GMT
        Subject: CN=662EBD51F306CBFDB57650BF2FD598AF439B9138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:75:48:12:ae:b7:ae:d2:68:89:c5:8b:30:
                    b5:36:3c:af:8c:ef:3e:5b:0e:80:3d:32:13:09:a0:
                    98:9b:3c:ca:be:46:56:29:96:fb:dd:da:90:3d:f6:
                    bf:31:a5:72:74:7b:7a:99:1e:47:96:55:ee:4d:1e:
                    e2:3f:d2:b0:bd:2c:26:4d:20:8f:3c:c1:c0:53:51:
                    81:69:1b:9c:0e:32:13:2d:ec:c8:df:63:64:dd:14:
                    f9:f0:8a:e5:ad:04:a4:e2:d1:15:3b:5c:67:2f:c5:
                    ef:d3:de:6b:0e:4e:1c:58:80:76:0f:d1:38:a4:ad:
                    b6:15:97:20:d0:98:92:93:b3:04:20:9c:5e:dd:6b:
                    02:d8:10:56:80:fb:aa:4b:99:3f:a7:63:37:64:47:
                    d8:a7:c1:c6:5e:2e:63:f2:53:7b:a1:74:63:38:2c:
                    33:d4:3e:19:b7:e1:45:91:2c:04:86:8a:1a:2b:52:
                    20:ce:e1:81:79:b4:9a:ff:af:d9:eb:65:ca:ed:f4:
                    18:ac:b1:94:89:2a:7f:0f:00:d0:49:e7:74:33:51:
                    57:72:e0:22:dc:cd:ce:38:4b:57:fa:38:e3:84:7b:
                    bc:53:ad:6a:56:cb:df:82:79:5b:77:be:a2:97:10:
                    10:d4:cd:87:e1:75:a1:63:a0:6e:3b:f2:ba:43:f5:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2E:BD:51:F3:06:CB:FD:B5:76:50:BF:2F:D5:98:AF:43:9B:91:38
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:a7:1a:0a:65:e6:3a:44:4f:5b:fd:ab:5f:ab:29:0a:49:2e:
         a4:d3:cb:18:ef:1e:0d:79:db:49:83:0d:3a:de:13:73:0c:f2:
         64:dd:cc:ce:6d:60:0c:23:c8:19:be:d5:c3:c4:f0:b8:ef:cf:
         96:6c:10:d8:8f:fd:e7:b6:95:dc:4b:29:d8:38:af:5a:69:27:
         75:38:ab:5d:5f:58:03:09:32:b7:4d:02:84:fe:7f:d0:33:11:
         ea:17:2b:ac:2f:e0:79:c3:24:78:2d:46:7d:d8:a1:89:1b:30:
         56:50:86:c7:d6:66:9b:4b:63:b1:68:14:ba:87:a1:02:d5:f2:
         ff:3e:77:fc:00:9a:65:48:81:01:b4:bf:cb:92:4d:57:e9:a3:
         64:fe:f7:20:91:99:cd:1a:be:90:21:e8:e5:06:9b:90:6e:18:
         aa:1c:41:fb:1d:56:67:c7:8a:29:51:f1:cb:14:f9:6f:98:75:
         99:60:be:eb:70:d0:cf:50:b0:f4:a2:0b:3f:8a:10:ca:91:66:
         b5:47:e1:3e:80:7f:63:e9:1d:4e:c2:d2:ef:49:4f:6a:49:3a:
         a7:4f:26:c7:54:20:3d:71:94:d4:2a:8e:1e:34:6b:9c:49:20:
         3c:b6:22:5a:93:d3:2e:e0:a7:6a:ab:07:48:b2:8d:3d:f4:75:
         75:c9:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org