Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa
File:                     323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (raw, json)
Hash identifier:          /YAYApCJNF3JzXK7UNmTzgA8PYTEBZq4QRiOdDAbz5A=
Subject key identifier:   27:E6:E5:04:A4:AA:A9:B0:F8:12:8F:2D:D6:25:79:D3:B1:E5:D4:79
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       0FA4F8BFDA6485C10A427AB3D1B6693E564F305B
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa
Signing time:             Sun 09 Jun 2024 22:39:18 +0000
ROA not before:           Sun 09 Jun 2024 22:34:18 +0000
ROA not after:            Sun 08 Jun 2025 22:39:18 +0000
asID:                     46766
IP address blocks:        2602:f9a2:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a4:f8:bf:da:64:85:c1:0a:42:7a:b3:d1:b6:69:3e:56:4f:30:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Jun  9 22:34:18 2024 GMT
            Not After : Jun  8 22:39:18 2025 GMT
        Subject: CN=27E6E504A4AAA9B0F8128F2DD62579D3B1E5D479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:e8:0d:b7:51:ba:5e:26:24:24:26:cc:69:
                    91:8a:dd:d6:c7:6e:a4:83:ed:e3:4c:6b:17:60:51:
                    13:dd:60:9c:de:35:80:c0:c0:46:81:41:1f:55:d7:
                    20:a0:c0:8f:b1:cd:87:f8:b7:e0:f9:e8:43:6f:ed:
                    ad:47:24:f3:ef:fd:e1:c8:00:85:dd:b4:d9:25:f1:
                    9d:28:9e:8a:ec:93:34:f8:c3:85:a6:26:8a:11:ee:
                    35:a4:6d:77:6d:c1:23:27:80:f9:3c:27:c9:32:17:
                    2d:d2:0c:f7:d5:f9:04:19:de:a3:1a:ed:59:a8:9c:
                    43:53:0e:e1:2e:2b:0a:82:e7:6c:ab:5f:02:5f:da:
                    f5:c1:0e:71:d9:00:00:d6:a9:cf:17:a5:ec:59:70:
                    e0:a3:f6:1e:d7:df:c9:66:7b:07:1e:77:ad:2e:82:
                    53:1b:54:b7:4a:77:9d:47:90:74:58:c2:ff:c0:8a:
                    3c:c6:c3:24:73:69:1a:45:36:7a:5b:40:fa:d4:5f:
                    59:02:4d:49:06:aa:e1:91:26:86:0c:d4:4d:db:56:
                    6d:5f:3f:c5:3f:4d:9b:94:43:15:06:e8:09:de:71:
                    9a:af:f0:89:2c:75:fc:96:18:6e:7e:95:0e:94:d3:
                    87:b8:84:80:79:fd:35:6f:15:df:8e:b7:c5:43:f4:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:E5:04:A4:AA:A9:B0:F8:12:8F:2D:D6:25:79:D3:B1:E5:D4:79
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a2:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:af:6d:4c:b0:49:ae:4c:fc:e6:49:22:99:ca:e1:13:18:1a:
         c0:18:40:0c:c4:50:d6:59:6a:4e:2d:51:4a:c0:6a:6c:20:28:
         45:75:52:b5:02:a8:cf:ac:e9:d7:38:87:a0:6c:c0:6f:a6:26:
         0d:9f:d7:c9:7e:36:c4:50:e5:15:f2:9b:2e:31:9a:f6:f8:b0:
         61:d8:10:4f:d4:65:5a:97:f5:4a:2d:01:9c:d5:ad:3f:7a:da:
         ee:0c:e7:86:e9:7b:b5:71:cf:d0:74:c6:c5:e6:45:30:84:d7:
         5d:8e:ea:27:41:f2:5f:84:17:ab:2d:df:ad:78:3d:98:e7:9e:
         13:d4:59:f0:61:48:ab:84:76:68:bb:c6:cb:a4:37:84:ec:0d:
         b1:8c:5f:0d:3f:c6:79:9a:4b:41:b4:f9:5a:50:ba:f0:fc:0d:
         08:96:f4:47:5e:95:08:17:df:cc:6f:11:4e:9d:d0:1e:8d:51:
         35:86:52:c9:88:a1:c0:26:87:e8:3e:7a:71:33:e6:77:47:09:
         45:fa:5f:7e:9d:ae:31:94:d3:19:8d:b0:cd:85:f8:bf:44:36:
         1e:b1:99:24:1f:3b:bf:d6:41:f9:f8:30:6a:20:a4:06:fb:eb:
         70:df:23:db:e2:6c:f0:7a:af:d0:14:24:a0:4d:b5:6b:ba:fb:
         23:fb:90:18
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUD6T4v9pkhcEKQnqz0bZpPlZPMFswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5
YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjQwNjA5MjIzNDE4WhcNMjUwNjA4MjIzOTE4
WjAzMTEwLwYDVQQDEygyN0U2RTUwNEE0QUFBOUIwRjgxMjhGMkRENjI1NzlEM0Ix
RTVENDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu/oDbdRul4m
JCQmzGmRit3Wx26kg+3jTGsXYFET3WCc3jWAwMBGgUEfVdcgoMCPsc2H+Lfg+ehD
b+2tRyTz7/3hyACF3bTZJfGdKJ6K7JM0+MOFpiaKEe41pG13bcEjJ4D5PCfJMhct
0gz31fkEGd6jGu1ZqJxDUw7hLisKgudsq18CX9r1wQ5x2QAA1qnPF6XsWXDgo/Ye
19/JZnsHHnetLoJTG1S3SnedR5B0WML/wIo8xsMkc2kaRTZ6W0D61F9ZAk1JBqrh
kSaGDNRN21ZtXz/FP02blEMVBugJ3nGar/CJLHX8lhhufpUOlNOHuISAef01bxXf
jrfFQ/Q7DQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFCfm5QSkqqmw+BKPLdYledOx
5dR5MB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3
LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB
QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k
YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw
Mzk1NTBmZWNjZjhkNjEuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC82LzMyMzYzMDMy
M2E2NjM5NjEzMjNhMzIzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzNzM2
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAmAvmiACAwDQYJKoZIhvcNAQELBQADggEBAAmvbUywSa5M
/OZJIpnK4RMYGsAYQAzEUNZZak4tUUrAamwgKEV1UrUCqM+s6dc4h6BswG+mJg2f
18l+NsRQ5RXymy4xmvb4sGHYEE/UZVqX9UotAZzVrT962u4M54bpe7Vxz9B0xsXm
RTCE112O6idB8l+EF6st3614PZjnnhPUWfBhSKuEdmi7xsukN4TsDbGMXw0/xnma
S0G0+VpQuvD8DQiW9EdelQgX38xvEU6d0B6NUTWGUsmIocAmh+g+enEz5ndHCUX6
X36drjGU0xmNsM2F+L9ENh6xmSQfO7/WQfn4MGogpAb763DfI9vibPB6r9AUJKBN
tWu6+yP7kBg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:46 2024 by rpki-client on console-fra.rpki-client.org