Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa
File:                     AS142164.roa (raw, json)
Hash identifier:          J3AvabpXIh1iPcR9dtSWKO4DBEk7IWPSgw81chU8SkY=
Subject key identifier:   C0:0B:64:30:78:FC:ED:1E:DB:7A:60:EC:7E:B3:9F:B7:7C:34:6D:07
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0206855201C9A3B385E47C03ABA3A7152B0194D2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa
Signing time:             Tue 05 Nov 2024 03:40:04 +0000
ROA not before:           Tue 05 Nov 2024 03:35:04 +0000
ROA not after:            Tue 04 Nov 2025 03:40:04 +0000
asID:                     142164
IP address blocks:        2a06:a005:e80::/44 maxlen: 48
                          2a06:a005:e90::/44 maxlen: 48
                          2a06:a005:ea0::/44 maxlen: 48
                          2a06:a005:eb0::/44 maxlen: 48
                          2a06:a005:ec0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:06:85:52:01:c9:a3:b3:85:e4:7c:03:ab:a3:a7:15:2b:01:94:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:04 2024 GMT
            Not After : Nov  4 03:40:04 2025 GMT
        Subject: CN=C00B643078FCED1EDB7A60EC7EB39FB77C346D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:42:7f:0b:0e:2c:b7:24:78:05:67:a8:06:
                    cd:d0:a3:bf:1a:00:cb:26:0b:ee:4e:b0:ae:77:ba:
                    f4:d4:77:46:20:6c:e5:31:25:ec:58:de:59:20:81:
                    09:3b:d2:65:3c:44:21:f4:0f:dd:70:25:66:a8:e0:
                    ff:bb:10:6c:a4:5d:0b:ba:85:4c:87:e4:ef:c5:a8:
                    33:55:85:d1:d9:89:2f:33:9e:82:de:a0:f0:de:50:
                    e2:21:46:65:2b:96:96:b8:05:e3:46:75:7a:f2:aa:
                    a0:dc:25:5c:8f:1d:b9:0d:ba:df:28:00:f2:24:5c:
                    72:a1:8a:38:65:f0:78:d0:9a:c1:a5:d0:c3:e1:20:
                    75:ef:f8:9a:e4:1c:45:01:68:6d:c7:40:fb:62:55:
                    60:ec:3f:28:e2:ef:b3:87:d2:44:f7:5c:49:5c:12:
                    2f:ef:08:79:b1:96:cf:8f:f1:f8:40:6a:2c:e2:01:
                    cb:83:7a:98:c7:92:ee:f1:5b:a1:cd:eb:f6:0d:98:
                    4e:7b:d7:ec:09:d8:3b:27:ac:3b:1e:c8:0f:39:09:
                    30:da:b7:84:88:1a:8b:39:73:04:0a:99:2f:ea:f8:
                    5b:59:91:dc:10:48:a3:d3:2c:00:d1:40:84:ca:44:
                    38:d4:a3:fe:50:29:e1:7b:a6:cd:0f:1f:7c:37:2e:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0B:64:30:78:FC:ED:1E:DB:7A:60:EC:7E:B3:9F:B7:7C:34:6D:07
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142164.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e80::-2a06:a005:ecf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         38:1d:87:b8:66:37:64:b2:01:66:60:5c:4a:fd:36:9f:22:d2:
         74:6d:e7:85:73:0a:8c:4c:f8:94:4a:a8:a9:97:71:41:5b:96:
         21:8d:48:2e:a5:43:a0:c8:40:49:5c:9b:ec:8e:71:5a:f0:12:
         01:1e:97:1f:7a:1f:5c:f9:66:fa:21:95:42:d2:2f:bf:8f:11:
         54:81:16:df:54:13:ca:5d:aa:f4:38:89:31:ca:9d:f4:06:1a:
         2f:34:ce:e2:f3:b7:42:f6:3f:67:b0:4b:a0:46:36:28:52:59:
         92:86:34:7f:7c:c1:2d:ed:5f:d7:dd:6e:43:85:9a:7d:34:0d:
         d1:b4:e3:5e:57:03:9c:79:ca:22:ce:8b:f0:a1:48:39:ee:4d:
         22:f3:5d:36:2e:d2:b4:73:4a:0a:5e:3c:8c:55:ca:8a:55:4e:
         5f:96:83:cf:82:b8:c1:2b:14:44:26:59:3a:33:b3:ce:bb:5b:
         d7:d3:27:64:81:3b:54:ca:33:3a:75:2f:fb:32:f9:ac:dd:f2:
         91:2f:9f:12:f5:c5:74:d8:ee:8d:48:ca:81:9b:d3:e6:7e:34:
         ff:dd:f8:d7:60:b3:1f:ef:ff:40:e4:f7:20:be:79:5c:fb:24:
         dd:8f:eb:dc:92:1b:c7:71:9e:86:9c:a9:d0:ef:4b:ab:17:b9:
         1b:83:f1:43
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUAgaFUgHJo7OF5HwDq6OnFSsBlNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDRaFw0yNTExMDQwMzQwMDRaMDMxMTAvBgNV
BAMTKEMwMEI2NDMwNzhGQ0VEMUVEQjdBNjBFQzdFQjM5RkI3N0MzNDZEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OUJ/Cw4styR4BWeoBs3Qo78a
AMsmC+5OsK53uvTUd0YgbOUxJexY3lkggQk70mU8RCH0D91wJWao4P+7EGykXQu6
hUyH5O/FqDNVhdHZiS8znoLeoPDeUOIhRmUrlpa4BeNGdXryqqDcJVyPHbkNut8o
APIkXHKhijhl8HjQmsGl0MPhIHXv+JrkHEUBaG3HQPtiVWDsPyji77OH0kT3XElc
Ei/vCHmxls+P8fhAaiziAcuDepjHku7xW6HN6/YNmE571+wJ2DsnrDseyA85CTDa
t4SIGos5cwQKmS/q+FtZkdwQSKPTLADRQITKRDjUo/5QKeF7ps0PH3w3LoSNAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUwAtkMHj87R7bemDsfrOft3w0bQcwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTQyMTY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEH
AQH/BB4wHDAaBAIAAjAUMBIDBwcqBqAFDoADBwQqBqAFDsAwDQYJKoZIhvcNAQEL
BQADggEBADgdh7hmN2SyAWZgXEr9Np8i0nRt54VzCoxM+JRKqKmXcUFbliGNSC6l
Q6DIQElcm+yOcVrwEgEelx96H1z5ZvohlULSL7+PEVSBFt9UE8pdqvQ4iTHKnfQG
Gi80zuLzt0L2P2ewS6BGNihSWZKGNH98wS3tX9fdbkOFmn00DdG0415XA5x5yiLO
i/ChSDnuTSLzXTYu0rRzSgpePIxVyopVTl+Wg8+CuMErFEQmWTozs867W9fTJ2SB
O1TKMzp1L/sy+azd8pEvnxL1xXTY7o1IyoGb0+Z+NP/d+Ndgsx/v/0Dk9yC+eVz7
JN2P69ySG8dxnoacqdDvS6sXuRuD8UM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org