Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142419.roa
File:                     AS142419.roa (raw, json)
Hash identifier:          PRQqC/QwR4aZWAz6O+y2yfVdmisscAIKQ5++LPWzrf8=
Subject key identifier:   81:25:77:66:4C:13:B1:AA:AB:24:F1:1E:F1:04:FB:85:40:32:8C:75
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5950ED3B99A7226B42036B9E718915533E16A11F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142419.roa
Signing time:             Tue 05 Nov 2024 03:40:06 +0000
ROA not before:           Tue 05 Nov 2024 03:35:06 +0000
ROA not after:            Tue 04 Nov 2025 03:40:06 +0000
asID:                     142419
IP address blocks:        2a06:a005:1c10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:50:ed:3b:99:a7:22:6b:42:03:6b:9e:71:89:15:53:3e:16:a1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:06 2024 GMT
            Not After : Nov  4 03:40:06 2025 GMT
        Subject: CN=812577664C13B1AAAB24F11EF104FB8540328C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:f1:0f:54:66:9a:f7:1b:9f:81:3c:36:4c:
                    bd:7f:d6:05:eb:c9:d6:91:0f:99:98:a1:ba:39:1b:
                    58:ce:4d:9b:5d:86:5c:f0:9b:23:ef:db:c5:c5:89:
                    be:8d:2e:20:99:07:25:79:64:d2:62:b1:ed:8f:e2:
                    39:f9:f0:ca:5a:07:d6:da:72:54:77:3a:21:4b:3a:
                    e1:89:1b:f3:88:cb:4e:c4:45:49:b6:6f:c9:73:cf:
                    bf:7f:d6:22:96:83:b0:f6:f1:e3:3c:6d:31:71:39:
                    54:5b:88:60:16:db:af:7d:7a:13:7d:d0:69:4c:03:
                    4f:5a:a2:2e:75:8b:fc:e2:a0:2a:78:c4:48:b2:c5:
                    fc:c2:51:86:82:84:df:61:4b:83:d7:37:01:31:e9:
                    f8:6f:8e:f4:0e:94:2a:8f:87:c8:4a:81:fe:78:3f:
                    21:eb:d6:40:f7:a3:9a:e3:ba:24:4a:11:d0:7e:6d:
                    19:a9:6c:f1:10:91:58:9b:e8:76:25:0a:9c:94:07:
                    c3:ed:69:ca:77:0e:7f:10:13:e0:43:4c:db:59:64:
                    22:b3:ad:40:0b:31:34:62:91:2a:c5:3e:81:06:61:
                    ee:dd:fc:6f:99:78:b1:61:30:14:f7:2e:10:49:97:
                    7e:ef:0c:26:aa:e0:ef:fc:00:c6:ca:f5:7d:9d:a6:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:77:66:4C:13:B1:AA:AB:24:F1:1E:F1:04:FB:85:40:32:8C:75
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS142419.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c10::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:89:d0:ae:68:1b:12:47:8b:9f:56:ae:a2:b5:7e:df:64:
         b4:8b:d5:52:f3:1e:f8:bc:8e:dc:84:b8:0f:92:e0:47:c4:8b:
         a2:93:f8:39:10:7a:c7:90:b8:46:0c:f1:e1:ef:22:7e:f6:00:
         5c:f2:78:fa:c8:1d:f6:7c:67:05:95:e2:b1:0b:a1:28:2e:c6:
         ed:80:b0:43:0c:9e:b5:14:5b:2e:5a:3e:dc:44:eb:f9:48:42:
         e3:dc:af:41:81:77:9b:47:77:3e:42:ec:c3:38:89:32:57:fb:
         10:ec:7f:5b:9e:1f:07:8e:92:ef:69:ff:3b:8b:62:70:c7:6f:
         13:98:90:ce:7d:53:09:62:34:8b:f7:c7:9b:0a:0b:f2:00:d7:
         18:7f:f1:14:42:44:75:65:28:99:8e:69:3b:e8:ae:87:87:f7:
         fa:b8:aa:b2:3c:32:21:82:a1:73:9d:63:03:9c:b7:48:ca:6a:
         d8:73:c7:47:cb:30:71:16:80:22:4b:9a:3e:89:68:bb:2d:39:
         ca:08:ed:02:52:30:bd:b3:89:e2:c3:dd:04:d8:cc:05:90:5f:
         18:87:f2:78:3e:15:35:64:a5:d3:73:55:d6:4d:35:ad:f8:95:
         14:3e:a3:ca:80:66:7b:e5:1d:8b:5a:ef:b9:a7:2f:88:08:11:
         f8:76:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----