Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa
File:                     323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa (raw, json)
Hash identifier:          v8VIz6Z4U1e+2MARLBqIZLipTale7VMSSo1MTqwjwX8=
Subject key identifier:   E3:F8:F9:17:D2:A5:1D:DB:83:F6:BC:98:1D:06:EC:FD:66:AC:14:D0
Certificate issuer:       /CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
Certificate serial:       2DB1D8093B31F8E7C94F57C86F6E6DBA0455E83C
Authority key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa
Signing time:             Fri 07 Feb 2025 11:41:53 +0000
ROA not before:           Fri 07 Feb 2025 11:36:53 +0000
ROA not after:            Fri 06 Feb 2026 11:41:53 +0000
asID:                     47272
IP address blocks:        2602:f96d:a00::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Apr 2025 18:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b1:d8:09:3b:31:f8:e7:c9:4f:57:c8:6f:6e:6d:ba:04:55:e8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7
        Validity
            Not Before: Feb  7 11:36:53 2025 GMT
            Not After : Feb  6 11:41:53 2026 GMT
        Subject: CN=E3F8F917D2A51DDB83F6BC981D06ECFD66AC14D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:89:bd:b7:41:74:cc:ea:17:1e:49:2e:b5:
                    83:c7:5c:12:1e:40:09:64:70:a0:50:fe:9f:12:19:
                    58:94:1a:df:fc:b6:64:bc:02:60:2d:88:9a:e7:81:
                    10:83:9d:4e:9a:68:89:5c:b6:d2:d3:ff:60:1f:65:
                    91:0d:a7:e9:12:61:04:8f:20:26:f3:0b:f1:3b:d6:
                    f0:26:64:a8:61:9d:b8:8f:de:89:32:2d:2b:b0:96:
                    db:cb:bb:c1:37:a8:73:4f:50:b2:62:53:da:15:2d:
                    75:84:c5:ca:64:b8:80:d6:6b:fe:f3:54:ce:a0:a9:
                    2e:7b:db:b9:bc:22:42:72:11:c5:34:c1:37:ae:2c:
                    e9:13:be:c8:06:00:63:5d:72:25:9a:cd:49:68:4a:
                    45:1e:d9:bb:3f:36:dc:48:1e:1a:e0:1f:4f:67:44:
                    de:d5:c3:19:88:8e:b6:43:d5:34:ff:77:d3:77:c9:
                    99:64:02:4d:bd:46:0c:9f:be:9d:05:64:d3:11:8a:
                    68:df:95:66:fc:c3:ae:21:8f:3d:e9:a1:fe:f9:31:
                    1b:76:95:d8:0c:82:f9:79:24:93:69:f7:d0:1a:a3:
                    35:ed:c7:ce:98:9a:68:be:e2:f2:c9:81:7f:cf:99:
                    6e:ac:97:b3:02:bc:a9:06:a7:02:25:8a:98:8a:67:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F8:F9:17:D2:A5:1D:DB:83:F6:BC:98:1D:06:EC:FD:66:AC:14:D0
            X509v3 Authority Key Identifier:
                keyid:24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/323630323a663936643a6130303a3a2f34302d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:55:7e:c0:47:1f:b4:b9:5c:19:f9:89:92:f4:90:17:cc:c1:
         83:e3:40:a5:be:95:55:1f:d9:f5:9f:d0:da:13:97:9b:2a:07:
         34:48:48:77:f0:67:1a:84:23:74:7a:ed:cc:d2:c0:ff:e0:75:
         80:39:2b:c7:04:1d:f4:80:86:01:64:69:74:96:22:ab:a3:19:
         f4:57:76:da:28:2c:32:57:1c:62:6e:cd:56:7d:2e:2b:5d:13:
         84:97:26:4b:24:c8:bb:58:c4:0e:bf:0d:9b:11:47:69:fc:84:
         c2:d7:3a:23:16:1c:7e:fc:74:cc:85:8f:30:30:36:ac:44:b9:
         95:6a:1b:7f:5b:b7:41:90:e8:ed:b6:5d:35:ef:f0:ac:92:ad:
         7a:cf:ea:6d:34:0d:7e:fe:98:e7:1b:61:08:81:51:f7:1a:d0:
         85:02:f3:e1:0f:a5:61:cd:8e:56:01:3c:75:cf:4d:88:de:2b:
         c2:90:88:c9:00:b2:e3:5c:0f:42:6f:39:87:52:3c:cf:e3:f5:
         9a:40:14:1d:62:52:76:28:4f:ec:ea:7e:08:b8:47:d7:fd:fb:
         e2:e9:9a:17:28:86:99:89:be:80:fe:f0:fe:31:de:32:3e:99:
         16:8d:34:18:77:9e:2d:78:be:72:93:a4:bd:15:9f:58:bc:e3:
         50:e9:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:27 2025 by rpki-client