Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS56762.roa
File:                     AS56762.roa (raw, json)
Hash identifier:          NjlVBbrrzktXKY/KUVJ9tKE2aZQP21pNOYMc/X2nPPQ=
Subject key identifier:   8B:A4:7F:6F:42:5F:BD:4A:92:85:49:3C:7A:2A:A9:9C:EE:88:85:B6
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       1A913852E17880EB6A6F82C697D35A2E290B3E65
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS56762.roa
Signing time:             Mon 30 Oct 2023 21:08:59 +0000
ROA not before:           Mon 30 Oct 2023 21:03:59 +0000
ROA not after:            Mon 28 Oct 2024 21:08:59 +0000
asID:                     56762
IP address blocks:        2a07:54c1:4100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Jun 2024 06:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:91:38:52:e1:78:80:eb:6a:6f:82:c6:97:d3:5a:2e:29:0b:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Oct 30 21:03:59 2023 GMT
            Not After : Oct 28 21:08:59 2024 GMT
        Subject: CN=8BA47F6F425FBD4A9285493C7A2AA99CEE8885B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:8b:e7:2b:2d:55:2e:f7:ec:85:d3:a8:78:
                    d4:a1:e6:d3:57:3d:5f:e4:30:63:29:e6:5e:4e:da:
                    28:e3:80:22:71:85:4b:45:0f:f9:c8:8d:b1:30:94:
                    f6:18:60:9a:66:89:8b:f9:69:38:85:73:5d:13:42:
                    f1:80:e6:75:eb:fc:5e:da:82:c7:e7:b4:1a:d1:86:
                    42:69:48:de:a7:0f:cf:b2:fd:6a:2d:89:d7:5a:aa:
                    7a:a5:87:c5:17:ca:bf:ea:e7:45:62:65:11:5d:ce:
                    52:3a:35:c8:5e:f1:94:e4:92:74:c2:0c:9c:e0:bb:
                    6a:a9:40:ea:84:5c:33:f4:84:29:7c:83:15:5d:b3:
                    f9:d1:c2:63:87:06:13:9b:72:90:7d:e4:97:91:cd:
                    8d:55:f2:a3:68:fe:62:f4:0a:67:1d:63:0f:86:bc:
                    9d:92:b9:87:f3:0e:d5:dc:5c:23:3a:d6:20:ff:0d:
                    6b:d2:15:16:d0:79:a3:23:42:4c:e1:53:d0:17:e2:
                    5d:1f:86:32:dc:37:d6:4b:d7:de:9a:03:2e:34:47:
                    86:90:aa:e8:97:bd:fc:5b:6a:f8:b2:13:a0:95:b6:
                    59:c8:13:08:7d:5e:f2:e2:17:5a:f1:70:ba:d2:c8:
                    6e:87:18:ed:cf:c7:cf:cb:c9:2c:4a:7f:51:c3:6b:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A4:7F:6F:42:5F:BD:4A:92:85:49:3C:7A:2A:A9:9C:EE:88:85:B6
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS56762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:14:2b:7e:93:7b:d1:d0:a1:17:ee:16:92:41:1f:01:c4:43:
         5f:e1:9b:08:fb:37:a8:2d:3d:ef:a0:e8:e6:9a:fa:0e:64:26:
         28:2d:3f:44:5c:54:7a:84:54:e2:78:c9:a2:85:71:16:28:30:
         36:7c:31:b6:33:50:e9:6d:e0:78:d6:8b:70:ae:07:ce:9e:ad:
         c9:50:38:42:77:79:76:32:dc:ce:09:1a:dc:1d:cc:ea:14:6c:
         d8:8b:19:86:28:a6:86:b2:8d:98:8e:71:f3:ce:b3:e5:14:33:
         01:de:86:9b:99:e2:f6:4b:22:f9:ce:51:fc:67:34:e0:fc:0e:
         55:82:ba:e3:76:f1:41:48:18:ab:fd:8c:2b:58:18:1b:62:61:
         f9:2c:03:f2:ea:47:bc:53:0c:18:06:01:c5:1b:d8:c9:af:a9:
         20:da:23:ba:a6:de:fb:92:40:7b:5a:74:c9:9e:c7:92:87:0e:
         39:5b:7b:f8:22:cb:06:35:b0:16:fb:78:95:ef:e0:0f:d0:1b:
         d9:10:c9:f3:96:46:a0:5d:b5:3b:0b:a4:68:c8:a8:b6:10:ba:
         7f:73:ad:e1:eb:de:4d:f0:51:6a:56:1a:41:71:9a:a3:85:5f:
         5a:d3:07:8f:bc:6a:d1:b0:72:9f:c1:3a:ee:99:5a:02:dc:e1:
         da:5c:ab:f2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGpE4UuF4gOtqb4LGl9NaLikLPmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw
RTFFMkY4RTAeFw0yMzEwMzAyMTAzNTlaFw0yNDEwMjgyMTA4NTlaMDMxMTAvBgNV
BAMTKDhCQTQ3RjZGNDI1RkJENEE5Mjg1NDkzQzdBMkFBOTlDRUU4ODg1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB54vnKy1VLvfshdOoeNSh5tNX
PV/kMGMp5l5O2ijjgCJxhUtFD/nIjbEwlPYYYJpmiYv5aTiFc10TQvGA5nXr/F7a
gsfntBrRhkJpSN6nD8+y/Wotiddaqnqlh8UXyr/q50ViZRFdzlI6Nche8ZTkknTC
DJzgu2qpQOqEXDP0hCl8gxVds/nRwmOHBhObcpB95JeRzY1V8qNo/mL0CmcdYw+G
vJ2SuYfzDtXcXCM61iD/DWvSFRbQeaMjQkzhU9AX4l0fhjLcN9ZL196aAy40R4aQ
quiXvfxbaviyE6CVtlnIEwh9XvLiF1rxcLrSyG6HGO3Px8/LySxKf1HDa2LFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUi6R/b0JfvUqShUk8eiqpnO6IhbYwHwYDVR0j
BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF
MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNTY3NjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqB1TB
QTANBgkqhkiG9w0BAQsFAAOCAQEAMhQrfpN70dChF+4WkkEfAcRDX+GbCPs3qC09
76Do5pr6DmQmKC0/RFxUeoRU4njJooVxFigwNnwxtjNQ6W3geNaLcK4Hzp6tyVA4
Qnd5djLczgka3B3M6hRs2IsZhiimhrKNmI5x886z5RQzAd6Gm5ni9ksi+c5R/Gc0
4PwOVYK643bxQUgYq/2MK1gYG2Jh+SwD8upHvFMMGAYBxRvYya+pINojuqbe+5JA
e1p0yZ7HkocOOVt7+CLLBjWwFvt4le/gD9Ab2RDJ85ZGoF21OwukaMiothC6f3Ot
4eveTfBRalYaQXGao4VfWtMHj7xq0bByn8E67plaAtzh2lyr8g==
-----END CERTIFICATE-----
Generated at Fri May 31 12:10:15 2024 by rpki-client on console-ams.rpki-client.org