Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS132282.roa
File:                     AS132282.roa (raw, json)
Hash identifier:          zdF6jTVB9TZ9AwAInbXNRfu6sFbS8rBAkpgoVlGOlu8=
Subject key identifier:   1D:9E:A3:AB:B6:BA:EF:48:29:43:49:BB:BE:76:23:C8:5C:3A:81:29
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5F4980E02447DB695D40BD1FBE2A5CD1806E8B18
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS132282.roa
Signing time:             Tue 05 Dec 2023 02:44:18 +0000
ROA not before:           Tue 05 Dec 2023 02:39:18 +0000
ROA not after:            Tue 03 Dec 2024 02:44:18 +0000
asID:                     132282
IP address blocks:        2a06:a005:bb0::/44 maxlen: 48
                          2a06:a005:c70::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:80:e0:24:47:db:69:5d:40:bd:1f:be:2a:5c:d1:80:6e:8b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:18 2023 GMT
            Not After : Dec  3 02:44:18 2024 GMT
        Subject: CN=1D9EA3ABB6BAEF48294349BBBE7623C85C3A8129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:4f:75:a5:42:18:1c:c4:fb:98:90:1d:6a:
                    76:e0:83:f4:18:ea:34:8b:94:d7:83:44:14:a9:13:
                    6a:50:a5:b3:f3:64:41:ae:e7:e9:4d:59:00:d1:34:
                    fb:70:28:e7:cb:a2:5d:d1:8a:16:03:60:b8:1b:00:
                    9e:7d:78:68:11:1c:ad:45:75:9d:dd:84:d5:c6:ef:
                    ab:df:91:c9:70:e1:98:28:d2:12:1d:06:ad:6f:c7:
                    f8:bc:bb:df:20:35:f9:75:1f:ee:76:7a:f0:78:fc:
                    74:66:5f:f6:cf:94:ed:11:b8:e2:7e:78:92:16:84:
                    b1:25:1f:b8:7a:75:cc:71:34:8e:04:97:84:50:98:
                    0c:24:fd:be:96:21:80:ca:f4:87:bb:4f:80:42:f9:
                    4f:c4:50:e5:86:e6:c4:3b:02:9b:05:71:a5:62:4f:
                    0a:63:a9:51:c4:f6:a8:c3:ca:f3:fe:1c:e9:6f:d2:
                    ee:20:50:2a:6a:86:9d:3e:55:54:9f:0e:bf:c7:db:
                    9d:37:32:15:66:83:e9:fe:3a:8c:f8:50:95:85:82:
                    87:cc:79:2d:34:2b:17:72:2e:01:3b:0d:25:57:9b:
                    f2:8e:d4:69:54:13:37:84:26:de:b8:2c:f5:a0:b4:
                    0b:a8:e9:d1:52:08:f5:5e:b0:70:0e:5d:45:a1:2b:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9E:A3:AB:B6:BA:EF:48:29:43:49:BB:BE:76:23:C8:5C:3A:81:29
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS132282.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:bb0::/44
                  2a06:a005:c70::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:22:25:f0:d1:bd:8d:49:4b:b0:0b:1c:f5:51:3f:bf:72:5d:
         60:5d:37:0b:48:86:4a:73:73:af:ad:a5:3a:4b:44:ec:7f:4c:
         4b:7f:25:b3:e6:51:07:c1:4f:f1:06:b6:fa:ca:c1:1f:7b:dc:
         cb:a1:8e:55:76:c1:1c:3d:0f:df:0d:62:98:e8:ab:94:07:76:
         48:84:8d:c5:52:9f:80:d6:05:ad:69:97:e8:65:c2:06:ad:af:
         0a:44:52:06:64:6d:6a:85:86:05:5a:fc:71:9f:7b:25:99:ba:
         1b:f2:98:30:8d:f2:fb:2c:e4:26:f4:c4:54:34:38:dd:6f:3a:
         79:60:71:a7:06:f3:5f:c1:d3:9a:fd:45:42:8a:d8:35:8c:74:
         f9:23:0e:5a:a4:0c:05:9b:13:b5:b4:c7:c7:3d:a9:da:fc:98:
         e1:66:6a:e8:a7:67:69:8c:0d:4f:30:e3:86:ad:a7:bd:98:5a:
         d4:cd:03:c4:03:ff:dc:86:ce:cd:62:82:c4:e6:ce:db:d6:54:
         af:15:77:00:9c:f1:f4:cb:87:68:a8:27:0e:10:81:e8:8a:a7:
         c6:5d:91:81:10:b0:8b:4a:cf:8e:6d:36:fb:7c:13:6a:07:40:
         1f:d3:44:d4:ad:e3:29:20:5b:62:ad:1f:37:bc:50:f6:fd:95:
         b4:b9:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:55 2024 by rpki-client on console-fra.rpki-client.org