Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          xf+JDreiUsSa6YqSsGqOaAKs/GaUowTy47cmREGweUg=
Subject key identifier:   F8:0F:ED:29:59:5D:4C:E5:DE:AF:F7:1B:67:3B:B9:4D:54:D7:5F:E9
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       3870817BB6AA465ABBB765C4957D365CFD0EC9F2
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Fri 12 Jul 2024 15:08:00 +0000
ROA not before:           Fri 12 Jul 2024 15:03:00 +0000
ROA not after:            Fri 11 Jul 2025 15:08:00 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a51c::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:70:81:7b:b6:aa:46:5a:bb:b7:65:c4:95:7d:36:5c:fd:0e:c9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 12 15:03:00 2024 GMT
            Not After : Jul 11 15:08:00 2025 GMT
        Subject: CN=F80FED29595D4CE5DEAFF71B673BB94D54D75FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:78:9c:2a:83:7d:41:0f:fd:6e:2d:dc:d0:
                    d6:2e:5a:1f:51:9e:11:8b:e7:79:7c:67:ff:c3:b6:
                    fa:8e:3e:b2:7f:31:5c:ee:f7:c7:c4:72:6f:57:6e:
                    36:a4:c6:25:9a:b3:fb:a5:22:f7:76:72:cc:21:a2:
                    c5:3d:c0:18:9f:57:71:5c:5f:73:c8:b8:59:99:60:
                    4e:1b:2d:cb:fc:45:f2:56:18:a5:53:87:14:dd:55:
                    95:5c:0b:0e:7f:5e:78:8c:22:df:26:f8:4c:ac:7e:
                    02:6f:2f:77:4c:fa:98:62:cf:19:8d:32:6d:8a:f2:
                    7c:c3:39:b9:e2:5c:9d:2f:40:4c:96:7f:dc:48:46:
                    2e:7d:51:f5:70:9f:7b:ae:50:4d:88:ee:78:b6:26:
                    33:d4:a1:2c:39:ce:f8:33:bd:81:86:68:b4:6e:3c:
                    f2:ab:0b:fd:b8:48:c5:78:1c:9d:21:d1:90:53:03:
                    99:94:88:75:98:63:c5:6d:2a:44:2e:d4:65:5c:cf:
                    f6:9a:9e:fd:ee:1d:a7:ee:01:0a:23:b0:8e:8a:29:
                    3c:11:87:1d:42:85:8d:b3:f7:74:98:28:c0:e2:77:
                    2c:a0:ad:14:15:2f:f4:a0:57:1a:60:88:9f:bb:37:
                    8d:a4:3f:d3:9c:bf:97:8e:a1:59:96:aa:1a:6d:bf:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:ED:29:59:5D:4C:E5:DE:AF:F7:1B:67:3B:B9:4D:54:D7:5F:E9
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a51c::/46

    Signature Algorithm: sha256WithRSAEncryption
         e5:7f:03:79:54:8b:85:77:7f:18:cf:2a:2f:df:95:dd:43:c3:
         09:d2:52:a3:33:37:fc:e4:3b:08:ea:b4:89:34:d8:f3:39:e2:
         03:f6:ea:b5:8e:ac:c2:dc:db:ae:d3:cf:37:9c:b7:c1:fe:25:
         c3:60:b5:50:fd:dc:4c:f2:db:79:76:63:86:c6:d8:73:d6:9a:
         0c:72:fe:72:23:8a:df:27:0f:05:54:ee:7e:ad:b6:28:58:05:
         ca:de:bf:46:56:1c:1e:0a:e5:ee:16:cd:e1:07:bd:00:6f:3b:
         a2:f1:d8:f3:14:57:95:5e:9a:c8:85:2a:58:33:71:00:5b:e4:
         50:9d:88:b0:fb:fe:12:29:e4:ae:59:80:15:b2:e2:1d:5a:e8:
         85:0f:58:1d:e4:ef:ff:f4:ce:58:e4:9b:4b:14:aa:48:f3:65:
         14:7f:7a:5b:39:21:91:5e:c3:7c:04:f6:b9:36:77:36:fc:5c:
         64:32:1f:dc:ec:7f:82:52:a4:f1:0d:50:91:6b:1d:70:32:b7:
         22:8f:02:df:2b:51:32:d7:50:99:17:f9:b9:b0:a0:5d:be:de:
         26:aa:f5:df:b3:17:1d:38:70:78:03:5f:bf:c2:a7:02:67:86:
         7b:19:70:bc:91:38:e0:56:2c:a5:9c:eb:b8:c2:bd:0b:96:86:
         ba:56:1e:08
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUOHCBe7aqRlq7t2XElX02XP0OyfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4
QkNGRTk3RDAeFw0yNDA3MTIxNTAzMDBaFw0yNTA3MTExNTA4MDBaMDMxMTAvBgNV
BAMTKEY4MEZFRDI5NTk1RDRDRTVERUFGRjcxQjY3M0JCOTRENTRENzVGRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQg3icKoN9QQ/9bi3c0NYuWh9R
nhGL53l8Z//DtvqOPrJ/MVzu98fEcm9XbjakxiWas/ulIvd2cswhosU9wBifV3Fc
X3PIuFmZYE4bLcv8RfJWGKVThxTdVZVcCw5/XniMIt8m+EysfgJvL3dM+phizxmN
Mm2K8nzDObniXJ0vQEyWf9xIRi59UfVwn3uuUE2I7ni2JjPUoSw5zvgzvYGGaLRu
PPKrC/24SMV4HJ0h0ZBTA5mUiHWYY8VtKkQu1GVcz/aanv3uHafuAQojsI6KKTwR
hx1ChY2z93SYKMDidyygrRQVL/SgVxpgiJ+7N42kP9Ocv5eOoVmWqhptvzkBAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU+A/tKVldTOXer/cbZzu5TVTXX+kwHwYDVR0j
BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB
N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxMzUzMTYzM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUcMA0GCSqGSIb3DQEBCwUAA4IBAQDl
fwN5VIuFd38Yzyov35XdQ8MJ0lKjMzf85DsI6rSJNNjzOeID9uq1jqzC3Nuu0883
nLfB/iXDYLVQ/dxM8tt5dmOGxthz1poMcv5yI4rfJw8FVO5+rbYoWAXK3r9GVhwe
CuXuFs3hB70Abzui8djzFFeVXprIhSpYM3EAW+RQnYiw+/4SKeSuWYAVsuIdWuiF
D1gd5O//9M5Y5JtLFKpI82UUf3pbOSGRXsN8BPa5Nnc2/FxkMh/c7H+CUqTxDVCR
ax1wMrcijwLfK1Ey11CZF/m5sKBdvt4mqvXfsxcdOHB4A1+/wqcCZ4Z7GXC8kTjg
ViylnOu4wr0Lloa6Vh4I
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-fra.rpki-client.org