Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          w7jGlBeudsxDuBybj2Z7foNpsZ2ejEKlrbT9NuMG4+A=
Subject key identifier:   59:45:C1:18:2E:B2:37:03:71:37:94:57:E0:BF:2D:A5:DC:0B:95:79
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       738790CFCAE55D35BB74F7897E405241C5779B18
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 04 May 2024 20:43:43 +0000
ROA not before:           Sat 04 May 2024 20:38:43 +0000
ROA not after:            Sat 03 May 2025 20:43:43 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a518::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 07:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:87:90:cf:ca:e5:5d:35:bb:74:f7:89:7e:40:52:41:c5:77:9b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: May  4 20:38:43 2024 GMT
            Not After : May  3 20:43:43 2025 GMT
        Subject: CN=5945C1182EB2370371379457E0BF2DA5DC0B9579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:55:23:d5:67:70:1b:47:81:cf:3d:e7:59:
                    bd:83:15:02:4f:b9:70:2b:3d:b8:28:35:62:12:dd:
                    28:d2:8d:d3:66:1f:65:c6:07:e5:dc:b9:ea:28:e0:
                    6f:38:5e:3b:da:9f:34:cb:6c:62:fd:6c:be:a3:43:
                    32:f1:e5:ac:a1:b1:65:49:c7:0e:d9:ca:2b:d5:a5:
                    a2:5c:72:df:e8:66:29:55:c5:10:28:cb:fd:df:a7:
                    7c:ad:29:cb:65:f3:cc:25:22:d2:8a:c3:b3:0b:43:
                    9d:38:c6:a4:1b:cd:a7:2b:9f:11:c6:90:58:5f:82:
                    69:b9:7a:28:d0:85:60:62:c4:e7:ae:22:52:4e:6b:
                    c7:a4:77:52:e7:58:23:88:c7:4e:d4:53:76:88:72:
                    85:24:5d:68:27:1f:f6:50:0a:04:6f:4b:27:4e:13:
                    15:16:bf:d0:6f:c2:76:fb:08:a1:8a:25:03:34:3d:
                    14:c3:76:1e:64:33:6b:9b:33:98:64:cd:fe:ec:d3:
                    0b:81:89:20:c4:93:84:74:f6:40:a4:92:7e:3d:ee:
                    fd:89:31:2f:02:6d:d8:33:ae:b3:aa:87:1a:86:79:
                    c1:79:c6:f2:00:f4:a8:f2:ce:f1:19:df:85:5a:96:
                    e5:67:bc:35:b5:64:1f:0b:2c:48:8f:6f:97:3d:99:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:45:C1:18:2E:B2:37:03:71:37:94:57:E0:BF:2D:A5:DC:0B:95:79
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a518::/46

    Signature Algorithm: sha256WithRSAEncryption
         89:80:63:60:f2:a3:81:a3:94:78:c6:8a:e9:28:2c:c4:db:15:
         40:1d:96:ed:42:5c:4c:d9:00:e4:2f:91:35:b1:90:3d:c1:a4:
         e0:84:00:8f:29:44:9d:bc:45:41:6b:41:f3:94:bd:1f:62:e5:
         de:65:52:2b:63:41:fc:7b:a3:c3:87:98:0f:ab:50:fa:12:d5:
         84:ab:39:38:6a:43:f9:66:41:69:7c:c7:36:72:11:63:a9:ee:
         c3:49:aa:b7:1b:76:1b:ff:d1:d2:12:55:32:30:54:36:d2:17:
         af:02:f9:84:32:9d:d2:bf:f7:65:4f:18:ab:8b:cc:04:78:c7:
         07:88:4f:4b:35:77:c1:3b:4f:2b:68:90:9b:f4:86:21:e4:5a:
         4f:a5:12:a6:4b:4b:cd:2a:3d:8b:5c:6e:d1:a0:c0:e3:2c:4f:
         4c:69:db:65:96:6e:bd:bd:c7:37:e6:35:45:f7:5d:19:11:75:
         9d:7b:ef:37:17:50:db:7c:4c:c1:8b:85:3e:70:1a:59:79:46:
         2d:79:6b:97:38:f8:7c:69:cf:12:ee:44:de:08:5b:22:4c:4d:
         59:86:f9:6f:f8:4c:53:48:25:f0:75:97:54:5f:1b:05:7d:42:
         bd:38:5f:14:8e:51:30:b0:96:6b:01:d9:ae:e2:98:53:e2:0b:
         3a:31:03:c7
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUc4eQz8rlXTW7dPeJfkBSQcV3mxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERD
MUIzODMwMTAeFw0yNDA1MDQyMDM4NDNaFw0yNTA1MDMyMDQzNDNaMDMxMTAvBgNV
BAMTKDU5NDVDMTE4MkVCMjM3MDM3MTM3OTQ1N0UwQkYyREE1REMwQjk1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsulUj1WdwG0eBzz3nWb2DFQJP
uXArPbgoNWIS3SjSjdNmH2XGB+Xcueoo4G84XjvanzTLbGL9bL6jQzLx5ayhsWVJ
xw7ZyivVpaJcct/oZilVxRAoy/3fp3ytKctl88wlItKKw7MLQ504xqQbzacrnxHG
kFhfgmm5eijQhWBixOeuIlJOa8ekd1LnWCOIx07UU3aIcoUkXWgnH/ZQCgRvSydO
ExUWv9Bvwnb7CKGKJQM0PRTDdh5kM2ubM5hkzf7s0wuBiSDEk4R09kCkkn497v2J
MS8CbdgzrrOqhxqGecF5xvIA9KjyzvEZ34ValuVnvDW1ZB8LLEiPb5c9mSptAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUWUXBGC6yNwNxN5RX4L8tpdwLlXkwHwYDVR0j
BBgwFoAU19g43thxd00uh1ycuZuBDcGzgwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZk
YzhjLzAvRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERDMUIzODMwMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNC
OTlCODEwREMxQjM4MzAxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mYzYxNWViZC01YzI4LTQzMzQtOGQyYy1lYzMxNThhZmRjOGMvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxMzUzMTM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKgpgRKUYMA0GCSqGSIb3DQEBCwUAA4IBAQCJ
gGNg8qOBo5R4xorpKCzE2xVAHZbtQlxM2QDkL5E1sZA9waTghACPKUSdvEVBa0Hz
lL0fYuXeZVIrY0H8e6PDh5gPq1D6EtWEqzk4akP5ZkFpfMc2chFjqe7DSaq3G3Yb
/9HSElUyMFQ20hevAvmEMp3Sv/dlTxiri8wEeMcHiE9LNXfBO08raJCb9IYh5FpP
pRKmS0vNKj2LXG7RoMDjLE9Madtllm69vcc35jVF910ZEXWde+83F1DbfEzBi4U+
cBpZeUYteWuXOPh8ac8S7kTeCFsiTE1Zhvlv+ExTSCXwdZdUXxsFfUK9OF8UjlEw
sJZrAdmu4phT4gs6MQPH
-----END CERTIFICATE-----
Generated at Sat Jun 1 19:28:59 2024 by rpki-client on console-fra.rpki-client.org