Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa
File:                     323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (raw, json)
Hash identifier:          yV2K/IEd2sKRHD6uZeHTXlHEpzfe7SHLCA4Af8rmGYE=
Subject key identifier:   E6:C3:8A:26:AE:8D:52:91:15:C0:1B:9E:C7:C8:CD:E7:3F:BC:2E:89
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       2FD1635D10F1402ACC9CD6661E56B4F48B52C7A9
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa
Signing time:             Fri 16 Feb 2024 19:19:01 +0000
ROA not before:           Fri 16 Feb 2024 19:14:01 +0000
ROA not after:            Fri 14 Feb 2025 19:19:01 +0000
asID:                     46766
IP address blocks:        2602:f9a2:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d1:63:5d:10:f1:40:2a:cc:9c:d6:66:1e:56:b4:f4:8b:52:c7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Feb 16 19:14:01 2024 GMT
            Not After : Feb 14 19:19:01 2025 GMT
        Subject: CN=E6C38A26AE8D529115C01B9EC7C8CDE73FBC2E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:76:1f:02:c8:c8:cb:6c:3e:c1:3a:cb:08:
                    c0:b7:39:9b:1c:97:c5:40:52:5b:41:65:e2:ff:81:
                    9b:30:aa:06:ee:ef:28:46:cc:73:99:40:81:99:bb:
                    c7:10:d5:8a:78:1d:f1:2b:0c:3d:79:98:30:df:9a:
                    cc:90:7c:70:1e:f0:0d:9a:b0:dc:f9:16:1d:0f:dc:
                    a3:fd:ef:2a:96:99:cc:51:18:32:55:53:ba:7a:81:
                    1b:15:5a:ed:26:52:68:50:7a:08:56:bd:e7:f6:f6:
                    72:9a:47:6a:dc:8d:26:20:74:48:ce:fa:de:61:55:
                    47:b3:fa:02:d7:68:90:a1:ad:73:62:00:2b:41:8d:
                    47:ba:1f:ba:fe:14:df:7f:02:fc:da:11:c3:99:88:
                    19:79:f5:38:69:af:97:8a:a6:92:4b:9e:2f:9f:03:
                    bf:99:e4:36:7e:82:85:d2:44:c2:fd:be:e8:aa:84:
                    ae:f6:ee:1f:f6:09:1a:c2:bd:33:4a:5b:c1:a8:9d:
                    91:4f:bd:aa:01:dd:cf:1a:e0:96:11:81:f9:25:9f:
                    36:bf:08:f3:be:93:fc:1b:8f:ff:e7:a4:c3:b3:ce:
                    58:77:10:45:c8:9e:20:8c:ca:39:72:d0:99:cc:14:
                    a9:e9:df:28:e9:f9:d6:dd:6f:1c:58:12:65:69:36:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:8A:26:AE:8D:52:91:15:C0:1B:9E:C7:C8:CD:E7:3F:BC:2E:89
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a2:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:e2:c9:b2:92:89:14:38:f9:62:ef:08:92:7c:b5:18:80:34:
         9a:48:65:89:6c:9c:18:78:3f:ae:2c:32:b4:65:60:6c:a0:ca:
         13:b7:ac:80:e5:4f:25:e7:be:ba:4c:e6:e0:83:34:72:bc:a5:
         b1:1f:35:cf:0d:fb:1c:b3:c3:5c:31:51:5f:fc:59:c0:b4:f5:
         27:fb:89:47:0e:56:d4:39:ed:4e:5f:33:29:48:7e:1e:db:7f:
         27:3e:db:7e:71:a0:2e:4e:23:06:bf:36:ab:6c:39:60:80:e9:
         1e:84:d7:c9:88:42:80:1f:a8:14:de:c1:be:8c:d2:27:90:d0:
         d3:09:c4:4b:9a:45:55:a0:7f:72:f9:e8:d0:9d:4c:ed:80:4c:
         6a:a9:d8:96:e3:2d:0b:ed:e2:8f:ad:0b:d5:1e:a6:c2:97:13:
         e2:93:4d:de:cc:6e:b8:80:be:0b:c1:17:d5:bb:d0:f5:02:33:
         bf:98:b8:fd:78:5e:2a:15:30:ec:af:55:cd:f4:70:cc:96:7c:
         8e:fb:6a:4d:44:d3:e6:27:b3:95:23:29:55:d8:de:6f:43:fc:
         03:e8:43:ad:44:aa:2e:bd:4a:25:6d:23:9e:c7:e9:9d:29:8f:
         ae:f1:da:f6:dc:f6:91:9b:fd:30:2a:dd:cd:fe:05:a9:61:43:
         2f:56:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:46 2024 by rpki-client on console-fra.rpki-client.org