Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa
File:                     AS215280.roa (raw, json)
Hash identifier:          yCftr4mi6xiAbprH/+T19c9lVbQpU72Tnc6GimhFUog=
Subject key identifier:   E3:11:8F:DC:A6:AC:12:60:B6:B3:A4:70:C5:D3:DC:E1:67:B8:B6:EF
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       618203DA078C2FD23D3F3DEAA8C0DFFDED9FE3A9
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa
Signing time:             Wed 20 Mar 2024 23:20:40 +0000
ROA not before:           Wed 20 Mar 2024 23:15:40 +0000
ROA not after:            Wed 19 Mar 2025 23:20:40 +0000
asID:                     215280
IP address blocks:        2a07:54c1:3800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:82:03:da:07:8c:2f:d2:3d:3f:3d:ea:a8:c0:df:fd:ed:9f:e3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Mar 20 23:15:40 2024 GMT
            Not After : Mar 19 23:20:40 2025 GMT
        Subject: CN=E3118FDCA6AC1260B6B3A470C5D3DCE167B8B6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:58:df:36:30:22:fe:14:d7:6f:d7:5c:a3:
                    c9:4b:44:f0:35:cb:4e:f9:b3:f8:85:3f:58:fb:25:
                    ef:b0:59:88:b9:cd:62:28:7f:5d:64:e5:1d:d2:85:
                    36:fa:63:0d:8b:e8:a4:c2:40:02:1a:52:17:3c:46:
                    02:77:66:09:25:83:5c:ba:5a:89:aa:29:5c:3c:60:
                    32:38:65:38:55:c0:60:1e:62:66:b5:5d:39:41:f4:
                    ac:fc:59:50:a2:35:b4:8c:9e:7e:95:0f:67:42:f7:
                    81:78:d3:a4:e3:a8:a2:a3:33:47:e4:e4:71:ca:f5:
                    63:97:da:43:90:64:06:ee:90:0e:f8:05:0b:7a:2c:
                    37:5c:b8:e4:39:0a:18:94:5f:2a:d9:e7:cf:38:a2:
                    bb:1a:92:30:23:74:82:86:8b:e4:ce:2e:25:6b:57:
                    9a:a4:5f:98:51:9c:02:18:43:76:78:1f:ca:0d:88:
                    25:3a:c1:1b:91:4a:86:eb:6e:db:4a:d2:84:ad:62:
                    bb:0b:df:7d:12:dc:f1:bb:90:93:8c:3a:7c:1a:3e:
                    72:ed:a1:72:b1:07:50:ce:c4:1a:f3:93:ff:f7:3b:
                    b2:96:ff:4f:3c:11:be:28:9a:82:67:5f:af:3c:3f:
                    dd:fc:eb:32:f8:62:0d:6f:7b:2a:b6:52:da:57:d6:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:11:8F:DC:A6:AC:12:60:B6:B3:A4:70:C5:D3:DC:E1:67:B8:B6:EF
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:4f:14:8d:91:af:38:37:c1:eb:86:d3:a2:22:83:6b:c8:a9:
         ea:91:18:7b:c1:cc:45:3f:de:b5:93:8f:c8:a9:3b:b8:1b:8c:
         5d:7e:21:2d:88:67:b5:8f:c8:fb:48:f3:4f:30:15:1e:d6:72:
         0c:c3:53:d2:ba:fe:22:f6:12:f9:aa:c5:c1:55:16:3c:ec:a9:
         a2:3c:f1:92:82:be:2e:83:c2:7a:63:01:ac:9c:a3:28:0a:77:
         ac:e6:7a:3a:c3:d3:eb:c6:f5:de:ee:8c:d2:38:fe:e6:d1:40:
         80:c5:bb:39:22:34:39:32:ef:3e:fd:81:24:ed:8e:68:ad:79:
         b8:e3:9a:34:52:2d:4f:33:93:bc:9c:67:85:7f:42:f9:9e:33:
         93:8a:17:02:95:55:67:15:fb:26:ad:9b:f3:64:42:9d:7d:8c:
         a8:d1:2b:7f:2a:83:eb:1a:43:74:3c:af:dc:11:cc:2f:2a:d1:
         73:41:26:ff:06:21:e6:ac:fb:22:0b:9d:78:24:a1:2a:a6:15:
         4b:f4:fc:00:4e:f5:16:11:98:66:61:98:4a:9a:b4:21:3f:30:
         d7:ba:55:78:2b:d1:bc:b1:40:08:d4:19:bd:e9:29:db:6e:63:
         42:bf:ab:b8:d4:d6:51:8a:29:68:80:71:35:37:b0:32:c0:9f:
         62:cb:b3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:55:15 2024 by rpki-client on console-ams.rpki-client.org