Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa
File:                     AS142164.roa (raw, json)
Hash identifier:          R+yRfG4qoC3w3YVkWkTvfQYBjyd41DnOSQ1VShuAr/s=
Subject key identifier:   4D:64:99:62:A0:CE:DD:B1:C9:11:E6:F5:35:A9:7F:78:D7:AF:AE:FA
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       32B24B8BE662509472EC065A4A8F4EDB4987B0B2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa
Signing time:             Tue 05 Dec 2023 02:44:17 +0000
ROA not before:           Tue 05 Dec 2023 02:39:17 +0000
ROA not after:            Tue 03 Dec 2024 02:44:17 +0000
asID:                     142164
IP address blocks:        2a06:a005:e80::/44 maxlen: 48
                          2a06:a005:e90::/44 maxlen: 48
                          2a06:a005:ea0::/44 maxlen: 48
                          2a06:a005:eb0::/44 maxlen: 48
                          2a06:a005:ec0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b2:4b:8b:e6:62:50:94:72:ec:06:5a:4a:8f:4e:db:49:87:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:17 2023 GMT
            Not After : Dec  3 02:44:17 2024 GMT
        Subject: CN=4D649962A0CEDDB1C911E6F535A97F78D7AFAEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:c0:08:eb:3b:cb:0a:89:c8:10:72:b6:61:
                    ae:41:f8:ea:e3:f1:68:16:59:c6:4f:bc:c3:6c:0c:
                    13:a1:da:80:53:01:78:4e:52:2f:5d:73:44:35:e6:
                    39:e3:41:4a:9e:3a:d8:c3:9d:f9:21:cf:3e:75:4b:
                    f7:2c:03:45:44:0c:81:6e:04:9e:ef:54:db:c9:79:
                    21:d8:a8:c9:3d:52:63:b2:47:f9:dc:d8:5e:0c:f1:
                    ea:ab:4b:35:2e:ca:46:cf:de:f0:a5:5a:17:01:a6:
                    2a:8e:f4:66:d8:72:73:80:7f:70:a3:a2:02:74:39:
                    06:25:3a:90:7d:80:ad:64:ad:8c:20:31:80:6d:e4:
                    bb:ca:a3:af:cd:66:78:b8:a7:ce:7c:28:28:78:16:
                    49:20:9a:4c:90:1a:44:6f:c4:ca:12:da:8e:7b:78:
                    d6:5b:5e:b7:4d:4f:25:10:c8:40:b0:cf:96:77:f0:
                    61:9f:65:33:6a:ce:0c:f1:cd:35:7d:6a:86:8f:6d:
                    fe:f2:c1:08:fb:1d:8f:9c:9b:37:da:2e:3f:90:39:
                    2b:dd:40:67:36:47:d4:ef:74:6d:c9:fd:f8:44:0c:
                    5a:17:de:5d:05:81:43:59:a7:31:36:b8:6c:e0:af:
                    ab:55:1b:e9:95:0c:48:56:6f:a7:9b:a7:04:be:4f:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:64:99:62:A0:CE:DD:B1:C9:11:E6:F5:35:A9:7F:78:D7:AF:AE:FA
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e80::-2a06:a005:ecf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:da:f7:db:28:c5:2b:97:b8:9a:48:49:28:be:b1:bb:ea:
         52:ae:c2:e0:b4:2c:54:ca:ac:e5:d3:ad:44:2c:2a:ef:68:b8:
         b9:98:b8:fe:d3:85:02:d9:2d:5a:6c:2c:b4:a1:c4:4a:c8:91:
         18:88:44:f1:b4:82:21:85:db:e4:04:f2:dc:9f:51:31:42:6b:
         52:0c:7a:ae:31:5c:63:e9:7e:eb:c6:2a:6f:44:b8:65:f9:0a:
         70:fc:11:a2:c0:27:37:4d:05:fe:47:bf:b3:1b:48:c7:7f:96:
         ae:99:b4:ad:6d:99:26:99:48:5f:20:20:65:88:b5:32:41:6b:
         03:b2:42:18:93:99:40:62:06:38:3a:54:c2:2c:d4:d8:68:09:
         a5:4e:ac:00:40:6a:41:ce:7f:fb:6f:6d:d8:a3:92:3f:02:6e:
         3e:2f:f3:a0:20:4e:33:52:94:dd:a9:1d:d4:f0:e8:1c:de:03:
         e5:21:c9:19:9a:82:26:6c:9a:7e:7b:6f:2b:e2:88:f2:f8:af:
         0e:32:de:4e:b2:5b:06:c9:80:45:41:6b:25:1e:fe:fa:62:5e:
         6a:29:ff:87:fe:ec:fb:01:d0:62:59:08:1a:80:6e:7b:97:75:
         ee:aa:6a:24:92:35:29:ca:a7:0e:84:33:2d:3b:29:10:69:a5:
         57:97:a7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:55 2024 by rpki-client on console-fra.rpki-client.org