Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS57851.roa
File:                     AS57851.roa (raw, json)
Hash identifier:          8T1+JIuYZHMXaU9m9yOLqAnezXL4RcOLGkrbBVXZiZs=
Subject key identifier:   2A:EC:39:07:4B:44:5B:B4:0D:F6:86:EC:B9:FF:D4:C7:D9:44:F7:7C
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       16D45B7217B92383D5671B5E38029D705D7C665C
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS57851.roa
Signing time:             Tue 19 Sep 2023 02:14:57 +0000
ROA not before:           Tue 19 Sep 2023 02:09:57 +0000
ROA not after:            Tue 17 Sep 2024 02:14:57 +0000
asID:                     57851
IP address blocks:        2a07:54c2::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Jun 2024 13:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d4:5b:72:17:b9:23:83:d5:67:1b:5e:38:02:9d:70:5d:7c:66:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 19 02:09:57 2023 GMT
            Not After : Sep 17 02:14:57 2024 GMT
        Subject: CN=2AEC39074B445BB40DF686ECB9FFD4C7D944F77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:12:de:40:e5:13:b4:92:12:7b:a1:83:4b:
                    67:12:f8:27:f0:e3:a3:2a:d6:1b:98:21:04:41:fb:
                    f5:40:28:a5:46:5c:62:09:1d:cb:8b:84:47:5f:6e:
                    64:5e:38:57:ff:29:26:77:cf:6f:87:81:6c:8f:26:
                    63:15:9e:9f:10:c6:b8:b8:3e:c1:38:fa:32:9d:93:
                    5f:10:91:56:cb:ba:7a:b5:24:89:e6:8f:9a:43:92:
                    c0:60:bc:ca:5d:12:af:ea:2f:5f:f3:42:cd:97:f8:
                    74:97:1d:ff:f4:2e:f7:e4:9a:22:a6:d1:67:25:46:
                    43:08:36:2a:3b:0e:2d:aa:10:f7:5b:92:29:22:de:
                    97:13:e4:d2:27:bc:cd:4a:71:01:db:cb:6f:0f:e5:
                    e0:59:15:60:cd:cf:97:98:f1:fc:12:cd:82:92:8c:
                    c1:f8:79:3f:96:cc:c4:9f:b8:9f:53:3c:78:ea:21:
                    c4:fa:32:32:75:5a:6f:62:38:1b:3d:91:f7:27:45:
                    fa:6e:26:c2:37:84:82:3a:0f:78:ec:0f:91:bd:06:
                    c1:68:5b:90:49:57:2b:f0:66:ce:0a:63:9a:e1:d4:
                    3f:1e:47:7d:91:f6:4a:f8:96:06:3e:73:a2:8e:a8:
                    00:f2:cb:50:44:c3:67:49:e1:3d:a2:22:3a:7b:f1:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:39:07:4B:44:5B:B4:0D:F6:86:EC:B9:FF:D4:C7:D9:44:F7:7C
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS57851.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:93:61:cb:74:5e:0c:6e:2c:d7:f8:39:1e:ec:05:56:0f:6c:
         a0:a8:c1:d9:59:1b:b7:58:1d:a4:05:d9:be:0c:b9:82:3b:15:
         a4:f4:98:7f:50:af:10:ca:73:65:8b:60:4b:da:ea:7c:4d:47:
         05:e7:a7:5d:e6:81:cf:aa:d0:0a:d1:de:68:3e:c9:0b:09:12:
         a7:36:89:d5:62:df:5b:0c:41:14:58:e2:42:9a:90:83:a7:85:
         ce:15:1b:82:53:da:14:cf:61:96:46:87:b9:d3:87:11:17:69:
         6f:7c:d7:96:5f:6f:a0:9f:45:97:db:13:a0:bd:db:49:af:a0:
         f6:80:88:f5:35:8a:d8:a3:90:5a:db:3d:4b:19:74:63:9a:99:
         d9:82:32:69:a2:fb:45:58:f8:95:21:9d:9c:2b:e6:07:14:3e:
         14:c8:fb:f5:2f:d7:0f:ff:f3:36:8e:0e:26:41:b7:14:98:b1:
         39:83:77:9c:ba:18:28:a1:54:5c:ce:4b:85:96:12:60:f8:57:
         60:87:d9:6e:20:64:cc:a1:73:ee:01:fd:96:0f:fb:44:53:78:
         36:dd:44:7d:9b:9c:a6:ab:8d:01:18:28:11:f6:c2:57:20:d0:
         9f:4c:db:86:e3:6a:4f:95:70:fa:f0:1e:27:42:ac:bb:48:98:
         43:d6:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:19:26 2024 by rpki-client on console-fra.rpki-client.org