Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS52210.roa
File:                     AS52210.roa (raw, json)
Hash identifier:          7CVfBzkkNk781Kp30DBVvSoOj4q+8lxqSvC5E403pRE=
Subject key identifier:   18:0D:15:FB:72:A0:A6:83:78:F6:70:77:44:F2:86:18:58:41:0F:5A
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       559B49264D805F47A0C34EEF4E94542EA29B83D4
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS52210.roa
Signing time:             Tue 20 Aug 2024 02:31:54 +0000
ROA not before:           Tue 20 Aug 2024 02:26:54 +0000
ROA not after:            Tue 19 Aug 2025 02:31:54 +0000
asID:                     52210
IP address blocks:        2a07:54c4:174b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9b:49:26:4d:80:5f:47:a0:c3:4e:ef:4e:94:54:2e:a2:9b:83:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:54 2024 GMT
            Not After : Aug 19 02:31:54 2025 GMT
        Subject: CN=180D15FB72A0A68378F6707744F2861858410F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:62:d1:c7:3c:96:1b:1a:55:6d:98:30:d1:
                    0d:19:a8:f9:cf:92:d7:af:a7:dd:ea:98:70:16:65:
                    d5:a3:93:b5:11:0e:14:16:f7:19:f0:3d:7a:80:c6:
                    d4:34:f1:24:a8:db:5c:60:25:1e:eb:f3:f5:2e:1a:
                    4f:bb:0b:40:cc:9c:c4:53:39:49:b6:e3:25:91:48:
                    9a:72:7d:aa:54:34:50:8e:bb:fd:bb:2a:68:29:1b:
                    66:d9:b2:9b:9f:35:f2:a8:fd:c7:7a:a8:c4:05:96:
                    4a:f5:34:0b:03:fe:c5:5e:f5:3e:27:9e:a3:99:09:
                    23:fb:9e:a7:a5:f6:6d:36:dd:44:b9:c9:70:41:b7:
                    63:12:43:ef:82:73:8e:c5:d8:5d:0a:b6:ed:45:52:
                    ed:a8:06:1f:c9:14:af:e9:7b:15:54:08:ff:af:83:
                    9b:33:4d:72:82:c4:ca:62:52:73:13:af:d3:c6:bb:
                    24:ac:7b:62:f9:8f:0a:fe:f6:ba:5d:d5:03:27:77:
                    9a:cf:21:a3:2c:ff:83:d6:fa:ab:2e:c6:2d:1b:8e:
                    eb:28:5a:8c:78:e7:e1:2c:55:72:42:50:66:a5:0c:
                    16:01:95:35:dd:20:2f:48:39:e9:5b:6c:87:e2:f9:
                    69:3a:a8:c6:57:5f:fa:e6:b2:62:9a:2f:cf:26:b6:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:15:FB:72:A0:A6:83:78:F6:70:77:44:F2:86:18:58:41:0F:5A
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS52210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:174b::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:85:d6:e1:c5:5c:f3:bc:9f:41:b9:8b:7a:bc:33:04:49:3f:
         aa:00:99:24:c8:22:64:b8:e6:5b:ad:9d:80:75:de:a8:57:b1:
         87:64:8a:a7:e7:bb:6b:a0:e4:df:9e:6f:64:d8:ff:e6:8e:05:
         40:74:fc:c9:10:c5:21:a8:01:39:d8:11:77:98:92:55:6e:f2:
         70:12:bb:39:db:df:62:97:d8:84:ec:d6:3c:ea:ca:98:ee:a7:
         01:45:2d:95:f4:0c:85:8c:20:bc:1c:a3:67:ed:04:2b:cc:a2:
         de:f8:e5:4a:04:1f:5c:ca:4b:64:2c:9d:e4:ab:fb:cb:a3:45:
         52:8d:19:1c:97:c7:3b:9b:db:94:9c:85:9a:ef:02:48:e6:47:
         36:b5:f3:92:06:3b:ea:97:75:02:b7:c5:9c:28:36:c6:06:fb:
         d8:a4:3b:c0:d3:5e:43:bc:8a:e5:64:e5:3e:26:08:a2:a3:a7:
         5f:03:6c:09:de:77:a1:02:8a:1b:44:cf:ef:aa:d0:b1:20:c5:
         7e:82:1a:20:66:9b:80:00:a7:8b:cf:e4:ea:7c:d7:3d:d3:72:
         4f:08:a0:ac:d7:a5:46:3a:19:23:f5:da:24:0c:5d:4b:b8:2c:
         78:68:f6:d0:71:71:ce:8d:33:ff:f8:11:b8:9c:8c:bc:16:22:
         fc:c1:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org