Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3a2f33362d3336203d3e203133363436.roa
File:                     323630323a666136653a3a2f33362d3336203d3e203133363436.roa (raw, json)
Hash identifier:          VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=
Subject key identifier:   F3:60:51:A6:6E:FE:C7:AD:CF:13:FE:A8:AB:B0:CF:FA:61:24:0A:D0
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       3AD5DF9063ED743A2F674169734C644ED80B19A4
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3a2f33362d3336203d3e203133363436.roa
Signing time:             Fri 13 Jun 2025 22:57:06 +0000
ROA not before:           Fri 13 Jun 2025 22:52:06 +0000
ROA not after:            Fri 12 Jun 2026 22:57:06 +0000
asID:                     13646
IP address blocks:        2602:fa6e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d5:df:90:63:ed:74:3a:2f:67:41:69:73:4c:64:4e:d8:0b:19:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Jun 13 22:52:06 2025 GMT
            Not After : Jun 12 22:57:06 2026 GMT
        Subject: CN=F36051A66EFEC7ADCF13FEA8ABB0CFFA61240AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:8c:34:17:3a:51:2e:f6:64:9c:5d:b3:ae:
                    7d:10:29:73:40:bb:20:83:16:b5:92:41:62:58:e3:
                    ee:1b:1e:0d:ed:cc:9b:ec:a1:af:bd:5c:37:c0:3e:
                    1e:e1:4b:32:01:5f:9e:2c:0b:19:fe:75:5b:20:95:
                    e3:ca:ad:b2:a4:c8:4a:43:11:68:ab:78:00:40:4f:
                    bc:45:ce:87:17:be:13:83:b8:94:1b:f1:24:3e:31:
                    88:6e:60:a1:09:fa:7d:88:da:fb:a0:6e:49:95:03:
                    fe:f4:f3:4f:a7:fe:9c:cd:08:e0:20:d6:bd:9a:cd:
                    5d:de:96:9a:87:bd:c5:e1:8c:32:fd:e9:9d:4c:e8:
                    61:86:01:18:db:2c:85:0d:26:68:bb:7b:70:32:52:
                    e6:6e:c0:b5:98:a6:e0:b8:5f:39:40:dc:9a:9d:65:
                    01:f9:20:0f:ab:a7:11:be:ac:5d:0d:3a:42:ab:7d:
                    7e:64:83:f4:3b:af:bc:7b:9e:3b:6c:17:0e:de:33:
                    4e:ee:20:d1:94:2d:96:58:78:89:0e:ec:f1:28:8d:
                    9f:0a:d7:42:b3:20:05:de:ab:c8:37:9c:e5:16:e3:
                    49:a7:a9:75:37:d8:0f:54:42:2a:d9:ae:7c:58:00:
                    94:f6:fd:71:01:d4:b5:b7:f7:6a:6a:bb:10:3c:d4:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:60:51:A6:6E:FE:C7:AD:CF:13:FE:A8:AB:B0:CF:FA:61:24:0A:D0
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3a2f33362d3336203d3e203133363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:44:67:87:65:83:ff:24:7f:fa:10:da:f1:a0:38:49:e3:
         1d:f2:6d:8c:10:a3:03:17:8e:60:d8:36:e5:dd:25:84:95:b7:
         42:4c:0f:bb:47:ed:28:c2:d3:0b:8b:f0:3f:b8:74:15:88:49:
         4d:13:52:d5:ed:9b:98:36:f3:40:5a:2b:b7:40:e3:35:a7:19:
         8c:a9:ed:3a:76:62:3d:f7:27:ca:f9:fd:ef:a6:61:aa:4c:2c:
         d9:f4:2e:0e:df:b3:92:06:54:c6:4f:8e:18:8f:27:5d:c5:53:
         5a:70:5a:fc:be:ef:cb:0e:73:25:49:48:d6:f8:7a:6d:69:3f:
         aa:f9:69:9f:10:dc:1f:e8:be:bd:64:76:30:16:4c:17:d5:17:
         50:2f:8f:e8:22:9e:ee:4e:6b:4b:da:58:4f:ca:f9:20:3c:c5:
         50:27:c2:c8:86:42:b7:47:02:c9:72:fb:2b:9c:54:dd:e2:81:
         3e:9a:a7:51:f7:a9:8d:50:07:8e:89:9b:92:57:98:aa:91:3d:
         77:4f:19:83:03:05:7f:d7:86:a6:17:82:b5:ee:87:46:29:fd:
         a3:7a:a7:8e:be:37:9e:8b:d0:7d:dc:d2:86:32:ba:5c:49:9e:
         7c:0d:d5:8a:4e:80:8e:04:77:7b:68:44:b8:e8:a4:0a:84:14:
         4c:c7:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:18:06 2025 by rpki-client