Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa
File:                     326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa (raw, json)
Hash identifier:          1HdM5g1rCJBQRmbDATqqRD00iYhLB9eofpBYlYT31mg=
Subject key identifier:   56:68:91:74:CF:62:13:EB:D6:49:A2:86:52:F4:BE:3C:02:C0:90:4D
Certificate issuer:       /CN=E48ABA5D969C9C557913482E3064E3BC626018E3
Certificate serial:       2EC895C4D2A3B93CFA48BDD90BCDD1679DE7290C
Authority key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa
Signing time:             Sat 24 Aug 2024 07:29:37 +0000
ROA not before:           Sat 24 Aug 2024 07:24:37 +0000
ROA not after:            Sat 23 Aug 2025 07:29:37 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c8:95:c4:d2:a3:b9:3c:fa:48:bd:d9:0b:cd:d1:67:9d:e7:29:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48ABA5D969C9C557913482E3064E3BC626018E3
        Validity
            Not Before: Aug 24 07:24:37 2024 GMT
            Not After : Aug 23 07:29:37 2025 GMT
        Subject: CN=56689174CF6213EBD649A28652F4BE3C02C0904D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:11:2d:f6:81:d3:af:91:7f:6d:c4:3a:da:
                    d5:c1:f1:1f:7d:28:5b:8a:77:bd:07:a7:12:c2:4d:
                    51:a6:07:4c:0a:6a:47:a3:bb:6e:1b:05:ee:a7:25:
                    85:7f:d2:cb:7f:d1:d6:fb:39:f6:5e:c6:6d:0d:38:
                    67:35:13:7f:30:a4:20:9b:eb:9f:c0:9c:11:d1:c4:
                    72:4e:27:b7:b9:38:39:60:a4:87:76:43:86:04:fe:
                    ab:dd:15:50:2f:7d:d7:e5:36:e7:f2:6a:e0:ad:36:
                    89:e3:d2:bb:72:f8:d0:c4:b1:b8:78:04:15:b8:e6:
                    96:4a:c6:e6:6d:49:73:34:70:a4:2c:41:30:e5:ee:
                    1b:88:75:d2:56:51:dc:7e:32:11:44:75:a8:43:35:
                    6d:3b:54:07:e9:f6:ff:00:5e:d3:a8:97:04:a4:51:
                    2b:d4:cd:57:f3:0d:f2:2d:4a:99:d8:06:a0:fe:ed:
                    db:01:3b:97:f3:b0:c3:f1:41:56:f0:4e:0d:0c:07:
                    02:e4:75:f2:78:cf:b0:ed:dc:c7:80:79:1d:6b:1f:
                    3d:66:cf:a1:ad:ef:9b:a6:3b:53:69:45:32:cf:f7:
                    14:b5:48:98:cc:61:fb:03:02:a0:ca:ed:cd:22:48:
                    13:6e:ff:48:f2:8a:d0:d1:71:c2:41:2a:f8:33:73:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:68:91:74:CF:62:13:EB:D6:49:A2:86:52:F4:BE:3C:02:C0:90:4D
            X509v3 Authority Key Identifier:
                keyid:E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:27:3d:ba:3d:d9:fe:4d:96:9b:b4:64:f9:f0:a0:9d:a8:52:
         31:61:dd:63:3b:73:2e:3b:2e:6e:a1:17:e9:9b:e0:14:0a:b6:
         7c:f6:10:cd:ee:b7:45:c5:31:91:c3:82:e0:fd:f7:11:09:37:
         94:2f:dc:77:78:42:35:33:f9:a0:d6:5b:2e:75:36:14:01:35:
         a2:4e:6a:e7:67:69:d1:31:a7:29:f4:93:4f:2f:fa:35:30:1d:
         da:9b:7a:3c:e3:8f:b6:06:ab:7f:c9:22:7b:1d:ec:e4:f8:86:
         f1:e2:79:44:a5:17:ad:93:10:db:e9:e1:ca:6f:e8:13:65:7b:
         a1:79:e4:61:06:af:62:5c:c0:08:38:05:ae:5b:cc:79:25:7f:
         dd:90:b7:0b:f0:6e:43:98:23:bb:cb:dc:a5:f3:f6:5a:65:ae:
         28:1a:34:9c:d5:3f:29:a7:68:3c:00:7f:3a:2e:9e:20:18:ec:
         31:6f:84:a1:c6:65:c8:ac:7c:2b:fb:dd:06:37:34:7f:20:c3:
         fe:c2:04:11:1e:6e:1c:44:bf:9f:f0:f4:51:86:5f:cd:ef:13:
         0b:47:36:f9:7b:cd:c1:22:8c:9b:21:75:eb:0c:05:d5:1f:23:
         68:e6:6a:b2:c3:83:29:e1:f5:f7:af:ba:6e:3e:20:f1:8f:14:
         99:59:fa:66
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIULsiVxNKjuTz6SL3ZC83RZ53nKQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ4QUJBNUQ5NjlDOUM1NTc5MTM0ODJFMzA2NEUzQkM2
MjYwMThFMzAeFw0yNDA4MjQwNzI0MzdaFw0yNTA4MjMwNzI5MzdaMDMxMTAvBgNV
BAMTKDU2Njg5MTc0Q0Y2MjEzRUJENjQ5QTI4NjUyRjRCRTNDMDJDMDkwNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NxEt9oHTr5F/bcQ62tXB8R99
KFuKd70HpxLCTVGmB0wKakeju24bBe6nJYV/0st/0db7OfZexm0NOGc1E38wpCCb
65/AnBHRxHJOJ7e5ODlgpId2Q4YE/qvdFVAvfdflNufyauCtNonj0rty+NDEsbh4
BBW45pZKxuZtSXM0cKQsQTDl7huIddJWUdx+MhFEdahDNW07VAfp9v8AXtOolwSk
USvUzVfzDfItSpnYBqD+7dsBO5fzsMPxQVbwTg0MBwLkdfJ4z7Dt3MeAeR1rHz1m
z6Gt75umO1NpRTLP9xS1SJjMYfsDAqDK7c0iSBNu/0jyitDRccJBKvgzc+fDAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUVmiRdM9iE+vWSaKGUvS+PALAkE0wHwYDVR0j
BBgwFoAU5Iq6XZacnFV5E0guMGTjvGJgGOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDdlMzAyZTYtODgxZS00ZDkzLWFlM2UtOWI3Yzk3YTli
OWQwLzEvRTQ4QUJBNUQ5NjlDOUM1NTc5MTM0ODJFMzA2NEUzQkM2MjYwMThFMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9FNDhBQkE1RDk2OUM5QzU1NzkxMzQ4MkUz
MDY0RTNCQzYyNjAxOEUzLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kN2UzMDJlNi04ODFlLTRkOTMtYWUzZS05YjdjOTdhOWI5ZDAvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM3NjQzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTM0MzUzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRH0wDQYJKoZIhvcNAQELBQADggEBAKIn
Pbo92f5Nlpu0ZPnwoJ2oUjFh3WM7cy47Lm6hF+mb4BQKtnz2EM3ut0XFMZHDguD9
9xEJN5Qv3Hd4QjUz+aDWWy51NhQBNaJOaudnadExpyn0k08v+jUwHdqbejzjj7YG
q3/JInsd7OT4hvHieUSlF62TENvp4cpv6BNle6F55GEGr2JcwAg4Ba5bzHklf92Q
twvwbkOYI7vL3KXz9lplrigaNJzVPymnaDwAfzouniAY7DFvhKHGZcisfCv73QY3
NH8gw/7CBBEebhxEv5/w9FGGX83vEwtHNvl7zcEijJshdesMBdUfI2jmarLDgynh
9fevum4+IPGPFJlZ+mY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:51 2024 by rpki-client on console-fra.rpki-client.org