Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS0.roa
File:                     AS0.roa (raw, json)
Hash identifier:          Rj1joJ7GwIf+AsZ8T971J1edQe4LW5SLf5WES4Vgh/c=
Subject key identifier:   28:B8:5B:3D:DD:D0:BC:58:7E:A1:57:A5:CA:41:83:56:28:59:E0:B8
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       709766D5A6C91E98222B794773B2B55B5E3FAE3B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS0.roa
Signing time:             Fri 31 May 2024 11:40:59 +0000
ROA not before:           Fri 31 May 2024 11:35:59 +0000
ROA not after:            Fri 30 May 2025 11:40:59 +0000
asID:                     0
IP address blocks:        195.184.247.0/24 maxlen: 24
                          2a06:1287::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:97:66:d5:a6:c9:1e:98:22:2b:79:47:73:b2:b5:5b:5e:3f:ae:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: May 31 11:35:59 2024 GMT
            Not After : May 30 11:40:59 2025 GMT
        Subject: CN=28B85B3DDDD0BC587EA157A5CA4183562859E0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:6d:87:ae:9a:97:ec:3a:3e:ed:87:c5:bb:
                    45:9f:4c:77:77:43:73:36:82:7f:60:8b:a5:41:de:
                    7e:81:a5:e1:98:cc:04:dd:5e:b9:25:6c:3e:8f:7d:
                    80:23:32:11:1b:ec:60:77:8f:47:96:ce:02:61:f9:
                    de:83:2a:cf:6d:87:24:9e:6f:73:03:98:f1:9b:bd:
                    3b:8e:35:46:48:9d:d3:90:f9:64:3f:49:77:1c:b8:
                    fa:3c:ac:60:02:44:18:e0:3c:c3:fe:91:91:36:2e:
                    bb:b7:8a:af:0b:11:c1:33:67:d5:a4:bf:0b:85:69:
                    77:b2:81:dd:95:2d:90:2a:dc:00:5c:66:82:7e:e7:
                    19:5b:8d:b9:20:5f:49:7e:30:19:72:1b:1b:0d:cb:
                    e4:b9:32:de:0e:fb:1a:36:3e:96:37:64:20:90:db:
                    b6:c8:24:52:c4:2c:8a:57:68:2b:d6:53:4b:1a:f6:
                    55:05:a6:34:2c:29:a7:c6:2f:dd:27:e3:8d:d3:3a:
                    e2:56:5f:9e:00:b6:c1:c2:2e:2b:0e:1e:c3:d8:9e:
                    f7:9d:81:88:34:07:35:0c:38:df:a2:ef:0e:b3:e3:
                    23:bc:8c:c6:47:78:b3:58:e3:ea:d0:cb:29:51:cb:
                    53:c2:77:57:ee:f5:21:73:76:a4:16:3d:be:9c:17:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B8:5B:3D:DD:D0:BC:58:7E:A1:57:A5:CA:41:83:56:28:59:E0:B8
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS0.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.184.247.0/24
                IPv6:
                  2a06:1287::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:72:eb:a7:0c:61:2f:36:01:a1:1a:d6:66:0d:9d:ea:6c:
         37:e7:f4:ba:b1:06:74:34:7a:64:57:f2:80:5e:fc:22:77:cb:
         07:75:e2:b0:bc:98:b4:5d:08:6c:1b:1a:d5:87:4b:38:fe:2d:
         c1:0a:46:23:f8:d7:c2:83:13:c8:4e:95:94:4b:8b:9d:14:88:
         e1:6d:66:9d:43:50:ea:70:eb:3d:4b:f6:f6:fe:eb:fe:55:cb:
         d9:5a:51:22:3c:a4:30:f3:f0:3e:29:5f:a1:d7:02:c9:86:fc:
         0c:b6:e7:2f:ac:38:2e:8e:62:78:4f:93:e5:7d:e7:90:94:fa:
         64:2a:8b:3f:3a:86:3e:88:81:bc:9a:1c:44:ee:58:bd:db:e0:
         29:ab:d0:ec:14:15:5e:6c:57:cb:6f:1a:f4:8e:25:55:47:88:
         ab:4f:89:36:55:2f:ff:8d:05:98:55:35:ed:c0:60:a3:79:1c:
         f5:4e:9b:6c:77:c8:ab:47:59:2c:e2:7f:ef:20:5a:c6:58:95:
         f2:72:ce:4c:b5:96:6d:58:43:ef:46:bf:f4:3c:98:6c:74:9d:
         99:ec:c6:c9:9f:3d:18:c7:17:09:f9:28:c1:fe:93:49:ad:1a:
         fe:e4:68:0f:ee:c9:e8:de:cc:e8:87:6a:4a:b9:91:ec:36:5d:
         b2:e8:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----