Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS206016.roa
File:                     AS206016.roa (raw, json)
Hash identifier:          sk7MARqGg3Vn/9Pg6BXLTuYOqQVv+fpoSKjJl0kXASU=
Subject key identifier:   5F:56:05:E2:56:74:20:76:C4:41:17:22:BA:41:AE:5B:2B:7B:57:CB
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       3B3BA46AA0D3630F88E6E8FD4B020A8EE7C25DFF
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS206016.roa
Signing time:             Tue 19 Sep 2023 02:14:57 +0000
ROA not before:           Tue 19 Sep 2023 02:09:57 +0000
ROA not after:            Tue 17 Sep 2024 02:14:57 +0000
asID:                     206016
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Jun 2024 13:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3b:a4:6a:a0:d3:63:0f:88:e6:e8:fd:4b:02:0a:8e:e7:c2:5d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 19 02:09:57 2023 GMT
            Not After : Sep 17 02:14:57 2024 GMT
        Subject: CN=5F5605E256742076C4411722BA41AE5B2B7B57CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:d1:ba:80:a3:5c:a7:b8:41:6a:4c:1b:5c:
                    91:34:bf:cb:1c:5e:26:72:cd:e2:cb:34:46:93:a3:
                    8b:27:f5:7c:45:94:50:82:0f:1a:a1:58:d6:1d:da:
                    b2:01:cb:7d:19:bd:7e:6f:9f:10:66:46:61:b0:8f:
                    19:67:98:4d:a8:4b:39:9d:2a:f0:ac:7e:32:69:da:
                    cd:7b:e0:13:e8:af:ef:41:57:6c:e4:73:78:2e:33:
                    87:84:1c:e7:00:89:e8:67:43:0b:53:de:82:2e:6b:
                    49:4d:5b:d1:65:11:7f:d1:c4:c7:81:7b:07:c6:79:
                    b4:94:6f:75:13:bb:3a:ed:de:fb:cd:7b:30:a1:e3:
                    7d:22:2e:02:d6:f1:bd:d1:33:5f:7f:db:45:62:da:
                    f5:4f:d4:88:fd:86:cc:ec:94:7d:28:10:3c:91:30:
                    90:cd:2e:dc:c5:ea:8d:06:f5:6e:bf:6f:e9:d9:2a:
                    ac:c6:98:33:bd:72:61:92:bb:41:fc:2c:b7:b1:cc:
                    4f:d2:18:1d:87:8b:f3:2f:91:81:c4:f4:32:f4:e0:
                    eb:d9:26:42:94:f8:c3:7a:53:16:c5:de:65:79:dc:
                    10:b6:98:cb:3f:00:af:39:62:ce:60:f8:6d:f9:a4:
                    00:a3:43:ba:dc:5c:13:33:37:fb:6d:37:d3:a8:88:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:56:05:E2:56:74:20:76:C4:41:17:22:BA:41:AE:5B:2B:7B:57:CB
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS206016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:fe:a0:51:40:aa:15:84:a5:e2:92:c5:c8:77:8f:8e:b2:
         3e:d0:d2:8c:c8:21:56:bd:c0:fc:5f:8d:89:b9:57:1f:28:c0:
         dc:1b:e9:42:62:fc:2b:94:9e:df:bc:78:e1:05:9a:fc:3a:11:
         9e:c1:74:e6:88:da:50:8d:2d:ec:6e:86:f3:0c:20:95:5d:05:
         5f:ce:0a:5d:6d:80:6a:cc:27:26:0b:e3:c4:41:38:4c:66:bc:
         5d:2d:20:f2:ab:6e:f8:7e:2f:70:22:c7:00:56:0a:4d:a0:cd:
         86:75:57:c6:77:5c:0d:4d:e4:7c:00:6d:27:64:19:a1:f4:a0:
         9f:68:d8:5d:b0:2e:8a:72:59:d2:b5:c2:a4:5a:15:0c:12:fc:
         56:63:6d:9a:43:b5:fc:d9:82:23:90:e0:81:d2:b0:f1:33:9d:
         64:f8:43:a1:95:b8:4f:28:a6:15:4c:46:09:79:a9:84:64:ce:
         69:f9:7d:1d:a7:28:e6:7a:a8:9b:e6:35:8d:0b:77:01:37:47:
         de:19:cb:de:1c:2b:45:83:08:47:bd:ff:a0:79:16:7c:59:3c:
         d2:7e:0b:8a:8d:e6:a9:27:7d:b7:00:fd:82:24:32:c8:34:3a:
         c9:a1:7b:0a:ec:05:6a:09:4a:0d:a9:dc:e7:da:f6:c4:eb:6d:
         f4:f8:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:19:26 2024 by rpki-client on console-fra.rpki-client.org