Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa
File:                     326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa (raw, json)
Hash identifier:          ObW606lQaDERbAr1Jku+z8Hd36wvXxKH7PV6hqKvMXE=
Subject key identifier:   5F:D5:F8:5B:83:BA:F3:BD:14:8D:00:8F:C6:24:F0:F3:CD:8C:37:00
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       41A8EC889693134B0DDCD3192DFF8FEBC4778B94
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa
Signing time:             Mon 04 Mar 2024 01:05:40 +0000
ROA not before:           Mon 04 Mar 2024 01:00:40 +0000
ROA not after:            Mon 03 Mar 2025 01:05:40 +0000
asID:                     201938
IP address blocks:        2a07:54c7:6100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a8:ec:88:96:93:13:4b:0d:dc:d3:19:2d:ff:8f:eb:c4:77:8b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 01:00:40 2024 GMT
            Not After : Mar  3 01:05:40 2025 GMT
        Subject: CN=5FD5F85B83BAF3BD148D008FC624F0F3CD8C3700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:8f:4a:7f:f1:b3:9a:af:99:6b:f5:66:0b:
                    26:e5:a9:c6:bd:44:99:69:fa:af:5d:86:d2:19:0a:
                    11:16:65:e1:23:60:8d:2c:d5:82:42:11:00:dc:66:
                    5a:1f:09:b8:5b:d8:38:dc:2e:b8:20:f7:a9:98:3c:
                    af:5a:21:d0:81:26:bb:ec:c0:3c:52:26:dc:80:84:
                    81:d8:51:57:e4:67:54:65:b9:78:81:d0:ac:1d:dd:
                    6a:ca:d7:20:82:82:83:e8:1e:6e:f7:68:06:45:03:
                    ca:53:d4:db:7b:b6:4c:7f:52:5f:ec:ee:2d:20:43:
                    0c:cc:1e:d6:33:09:a3:5c:32:c4:1d:49:00:20:eb:
                    82:c9:82:41:30:80:ab:18:5c:6b:88:e9:f3:fb:17:
                    ac:68:9f:ce:89:62:53:ac:68:b1:20:1c:34:80:4f:
                    67:fd:70:31:08:aa:54:14:b1:aa:ca:fc:aa:b3:85:
                    36:bf:07:8a:3e:f2:2c:73:96:97:a7:d1:be:9e:1f:
                    b9:b4:21:c4:b8:ce:e8:d3:79:4e:9b:cd:7d:39:e8:
                    cc:d5:d5:6e:5d:15:31:c1:ce:c7:32:ed:65:da:ac:
                    73:88:87:97:04:66:16:37:67:bd:2c:43:a4:92:4f:
                    c2:91:a6:95:10:55:7e:81:bd:53:38:01:45:42:6b:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D5:F8:5B:83:BA:F3:BD:14:8D:00:8F:C6:24:F0:F3:CD:8C:37:00
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6100::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:64:35:95:32:14:40:db:4f:a7:29:8d:b6:68:0c:60:2a:76:
         ea:a2:ac:23:77:58:ab:bf:58:67:bb:07:8d:2c:3e:82:24:fc:
         67:89:5d:34:8e:8e:4d:a3:45:00:2d:e6:bb:a7:97:f2:55:a3:
         e3:bc:17:7f:05:ff:eb:ad:af:5e:71:00:f2:23:6c:a5:54:05:
         a1:d6:e6:ce:1f:2e:6b:29:d8:dd:47:f5:69:15:b9:ee:ed:ba:
         95:ca:59:e4:68:47:49:c7:2d:93:14:48:a6:85:4c:c8:95:ea:
         4f:cf:99:b7:07:ba:a7:6d:36:e2:2e:5e:61:f9:0b:b6:f7:38:
         55:01:fa:9a:2a:b8:98:6e:a0:96:65:2b:7e:7b:f5:8b:fd:6a:
         89:78:b1:fa:21:3d:bc:18:e3:d6:58:23:3e:ce:7b:bf:21:2d:
         00:91:c3:67:80:9f:6d:90:d0:da:23:6c:a6:c6:e1:c7:3c:4a:
         02:dc:4b:c1:46:01:57:73:2c:d7:f7:ab:fc:0a:c1:dc:5c:19:
         f0:32:96:e6:5c:5c:0f:f6:8b:1a:41:92:e7:2a:c2:2d:f6:48:
         5b:03:ed:18:b8:40:c5:0a:af:c4:78:26:8b:4f:e5:9c:99:e6:
         4c:c3:30:31:13:c8:c5:5a:e4:db:50:ee:6c:b7:f2:e2:6f:4a:
         40:93:35:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:01 2024 by rpki-client on console-ams.rpki-client.org