Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/323630323a663838323a3a2f33362d3438203d3e20343031323138.roa
File:                     323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (raw, json)
Hash identifier:          Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=
Subject key identifier:   9B:C0:B3:8B:FA:79:7F:9B:E7:E6:10:80:35:65:CB:93:FC:73:9B:54
Certificate issuer:       /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
Certificate serial:       759704BCAE069E30CCA37110C1A4A0FFE009A61B
Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/323630323a663838323a3a2f33362d3438203d3e20343031323138.roa
Signing time:             Tue 03 Jun 2025 10:10:24 +0000
ROA not before:           Tue 03 Jun 2025 10:05:24 +0000
ROA not after:            Tue 02 Jun 2026 10:10:24 +0000
asID:                     401218
IP address blocks:        2602:f882::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 13:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:97:04:bc:ae:06:9e:30:cc:a3:71:10:c1:a4:a0:ff:e0:09:a6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
        Validity
            Not Before: Jun  3 10:05:24 2025 GMT
            Not After : Jun  2 10:10:24 2026 GMT
        Subject: CN=9BC0B38BFA797F9BE7E610803565CB93FC739B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:51:ee:a3:36:ee:7b:dc:ba:fc:1f:d1:0a:
                    e4:43:c3:44:1c:c8:18:94:40:9d:27:0f:b1:56:47:
                    a4:f8:f4:f8:f0:9a:98:cf:4f:57:83:1a:ea:5f:fa:
                    52:f6:10:85:07:be:17:32:ab:8a:9f:24:64:fc:9f:
                    da:3c:2f:90:2c:3b:9f:ea:30:e3:3e:dc:60:ca:50:
                    eb:74:71:a0:75:5b:c2:46:79:fd:31:11:97:53:5e:
                    89:a5:bb:9e:a6:c4:80:e4:6b:16:8d:e9:d5:c7:23:
                    07:eb:fa:f8:2d:d6:42:f6:c9:41:dd:6f:ef:0f:bd:
                    d5:53:2e:56:1d:20:0e:1d:30:68:06:56:36:21:66:
                    8d:ac:f6:03:75:a0:34:c4:71:0b:18:93:90:25:28:
                    33:b0:a3:83:69:ec:53:db:7a:77:2d:cc:be:f4:ad:
                    74:1d:68:55:9b:a4:18:d5:9c:64:db:10:c5:c8:25:
                    f4:a7:38:fb:a8:65:1f:69:07:92:57:3e:0c:02:2c:
                    05:77:0f:f6:8e:6b:eb:ac:9b:76:59:ed:ea:3c:70:
                    8c:d3:69:27:ad:c6:f9:94:2b:af:a8:48:b7:5d:88:
                    0f:03:7f:cc:83:27:d9:e8:f1:ae:9f:db:7b:4b:76:
                    c5:d0:fb:98:0b:94:c1:80:27:2e:3b:68:74:b0:c7:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C0:B3:8B:FA:79:7F:9B:E7:E6:10:80:35:65:CB:93:FC:73:9B:54
            X509v3 Authority Key Identifier:
                keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/323630323a663838323a3a2f33362d3438203d3e20343031323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f882::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:66:c3:b9:d0:2c:26:19:18:27:bf:3c:49:65:75:2a:58:b3:
         b5:af:c1:66:78:4a:3d:9c:5a:ed:e9:8c:6b:11:a5:67:a9:ac:
         c8:5c:15:69:e2:c1:8b:63:fd:42:e5:40:8e:52:9f:3d:4b:e7:
         83:b1:4e:34:df:11:6c:d1:8f:9b:78:1b:28:ac:9c:53:bc:86:
         3f:3a:3b:cf:23:50:be:80:3a:34:a2:f6:33:c1:25:54:49:eb:
         21:6c:1e:49:e8:6e:46:6f:ac:c6:c7:14:01:8f:6c:3a:3f:10:
         cd:d7:72:de:68:d7:47:b1:45:b0:69:a8:a6:4e:f4:3c:2f:13:
         0f:8a:9b:cc:c0:ae:c0:73:34:71:08:e0:a1:5b:ee:eb:db:9a:
         bb:7b:78:1a:2e:6f:cc:fe:b0:c4:e0:37:0f:b8:a3:0d:6f:39:
         a0:fa:bf:73:1b:af:15:a2:3f:44:37:0e:51:1f:7e:4a:ac:eb:
         ae:82:b7:73:d3:99:87:c9:b9:6f:a6:97:e2:aa:c8:01:79:aa:
         58:ad:c1:b3:33:9d:8f:55:1b:d6:d2:d8:e7:c5:fe:dc:69:1f:
         b7:64:9a:ed:cf:13:72:69:6e:fa:c0:59:ca:58:bb:31:10:00:
         ec:e9:2c:9a:00:65:1a:28:cb:be:33:96:8c:f6:9f:97:8c:09:
         b2:b7:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:18:43 2025 by rpki-client