Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa
File:                     323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (raw, json)
Hash identifier:          izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=
Subject key identifier:   45:05:09:05:F4:46:BC:81:96:75:A3:43:7D:E6:51:8F:08:BA:65:B4
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       4098C0C421B752FED44C0E5A1DAD995FE9DAE59F
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa
Signing time:             Fri 13 Jun 2025 02:12:29 +0000
ROA not before:           Fri 13 Jun 2025 02:07:29 +0000
ROA not after:            Fri 12 Jun 2026 02:12:29 +0000
asID:                     40676
IP address blocks:        2602:f992:50::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 08:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:c0:c4:21:b7:52:fe:d4:4c:0e:5a:1d:ad:99:5f:e9:da:e5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jun 13 02:07:29 2025 GMT
            Not After : Jun 12 02:12:29 2026 GMT
        Subject: CN=45050905F446BC819675A3437DE6518F08BA65B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:30:8d:b2:4f:56:04:58:6f:cf:8b:d1:c0:
                    45:10:ed:0e:51:fe:ec:a4:af:d5:95:dc:ce:74:fb:
                    3d:3b:7f:32:f7:de:ff:03:f1:69:63:b5:8d:72:88:
                    90:9c:63:a1:20:00:c1:65:10:3b:68:ec:e8:32:48:
                    a1:3e:d4:66:5d:8b:f4:e8:7c:a2:d9:a6:c4:a8:4e:
                    be:70:fc:35:af:42:5f:26:5c:91:01:a8:42:5a:cb:
                    be:e5:68:c9:5f:0b:02:dc:bc:7e:84:2d:07:60:df:
                    77:ed:9d:c7:62:b0:43:fd:b7:ce:b6:64:8c:bc:1a:
                    1b:97:ee:ab:df:39:77:a2:f9:84:d0:2b:e7:c4:fe:
                    d4:73:f4:56:e4:bd:5a:2c:2c:c5:84:a3:61:70:1a:
                    a7:23:ed:48:b4:8b:86:2d:95:aa:7b:a4:a4:f5:6a:
                    43:8a:0d:76:39:09:36:16:c5:30:09:9b:fa:59:2e:
                    84:60:56:06:1a:5a:e4:da:2f:ac:f9:64:06:e4:73:
                    97:16:91:f5:9a:76:20:cb:96:ea:5c:9b:fd:64:22:
                    02:28:9c:1a:23:dd:8a:d3:f7:56:5a:ff:bd:69:c6:
                    b3:43:ac:19:40:a1:15:aa:13:10:dc:0a:48:01:c4:
                    9f:a0:f5:0f:b7:f2:9f:3d:c5:b4:6a:4a:f4:c0:db:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:05:09:05:F4:46:BC:81:96:75:A3:43:7D:E6:51:8F:08:BA:65:B4
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f992:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         85:00:6b:03:70:c1:2a:e8:02:b2:11:d1:2e:b2:8f:af:4e:fc:
         ba:0d:88:4a:3a:0f:e5:bf:dd:e8:7f:d4:ae:e2:67:81:97:26:
         34:dd:ec:32:ba:dd:2d:f4:47:42:b0:62:82:58:33:8f:f9:0d:
         c8:5c:b0:85:96:ee:cf:4d:a3:dd:72:66:92:f5:d9:c5:04:0a:
         b6:c0:95:27:06:2e:4e:dc:bf:03:62:3d:2a:75:9d:95:6c:f4:
         d4:cf:a4:d6:3a:71:85:cc:db:ec:9f:d5:b7:0a:f2:ce:07:1b:
         e8:83:19:ad:b8:2c:de:c0:aa:7b:1d:e0:04:95:94:43:91:a3:
         cb:1d:4a:5c:23:d9:ce:ac:08:f0:10:a5:11:7a:40:d8:61:14:
         50:30:b4:e5:68:e2:c1:15:c1:84:17:82:41:07:cc:b8:8a:11:
         0a:8c:89:53:70:06:a1:01:9e:10:54:97:1e:e9:f2:a4:3d:9a:
         64:8d:b5:29:49:6b:52:e9:83:2b:d1:39:6b:fc:09:e3:ca:2c:
         16:6c:93:84:05:41:16:35:87:28:59:2d:d6:77:ff:0d:d4:fa:
         3d:75:ee:63:5a:2f:a4:9a:a2:e7:4c:e1:06:ca:2b:10:84:da:
         d2:76:32:1e:00:10:a8:73:00:c0:31:25:49:c0:91:f7:33:88:
         7f:2a:c3:64
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIUQJjAxCG3Uv7UTA5aHa2ZX+na5Z8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNjEzMDIwNzI5WhcNMjYwNjEyMDIxMjI5
WjAzMTEwLwYDVQQDEyg0NTA1MDkwNUY0NDZCQzgxOTY3NUEzNDM3REU2NTE4RjA4
QkE2NUI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5gwjbJPVgRY
b8+L0cBFEO0OUf7spK/VldzOdPs9O38y997/A/FpY7WNcoiQnGOhIADBZRA7aOzo
MkihPtRmXYv06Hyi2abEqE6+cPw1r0JfJlyRAahCWsu+5WjJXwsC3Lx+hC0HYN93
7Z3HYrBD/bfOtmSMvBobl+6r3zl3ovmE0CvnxP7Uc/RW5L1aLCzFhKNhcBqnI+1I
tIuGLZWqe6Sk9WpDig12OQk2FsUwCZv6WS6EYFYGGlrk2i+s+WQG5HOXFpH1mnYg
y5bqXJv9ZCICKJwaI92K0/dWWv+9acazQ6wZQKEVqhMQ3ApIAcSfoPUPt/KfPcW0
akr0wNs/dwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFEUFCQX0RryBlnWjQ33mUY8I
umW0MB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy
M2E2NjM5MzkzMjNhMzUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM0MzAzNjM3
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQmAvmSAFAwDQYJKoZIhvcNAQELBQADggEBAIUAawNwwSro
ArIR0S6yj69O/LoNiEo6D+W/3eh/1K7iZ4GXJjTd7DK63S30R0KwYoJYM4/5Dchc
sIWW7s9No91yZpL12cUECrbAlScGLk7cvwNiPSp1nZVs9NTPpNY6cYXM2+yf1bcK
8s4HG+iDGa24LN7Aqnsd4ASVlEORo8sdSlwj2c6sCPAQpRF6QNhhFFAwtOVo4sEV
wYQXgkEHzLiKEQqMiVNwBqEBnhBUlx7p8qQ9mmSNtSlJa1LpgyvROWv8CePKLBZs
k4QFQRY1hyhZLdZ3/w3U+j117mNaL6SaoudM4QbKKxCE2tJ2Mh4AEKhzAMAxJUnA
kfcziH8qw2Q=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:54:52 2025 by rpki-client