Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS147016.roa
File:                     AS147016.roa (raw, json)
Hash identifier:          jyMNYEbziCDcYTzbLhKatmm3bTeIvjuyqCb25J/PQGM=
Subject key identifier:   8C:A2:BC:D1:3E:93:35:20:1E:41:DF:87:6D:88:09:CC:95:85:6B:71
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       768491FA7B7F307F7C18EEE00DEA8987B3449697
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS147016.roa
Signing time:             Fri 16 Feb 2024 17:44:24 +0000
ROA not before:           Fri 16 Feb 2024 17:39:24 +0000
ROA not after:            Fri 14 Feb 2025 17:44:24 +0000
asID:                     147016
IP address blocks:        2a06:a005:5f0::/48 maxlen: 48
                          2a06:a005:5f1::/48 maxlen: 48
                          2a06:a005:baa::/48 maxlen: 48
                          2a06:a005:bab::/48 maxlen: 48
                          2a06:a005:1502::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:84:91:fa:7b:7f:30:7f:7c:18:ee:e0:0d:ea:89:87:b3:44:96:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 16 17:39:24 2024 GMT
            Not After : Feb 14 17:44:24 2025 GMT
        Subject: CN=8CA2BCD13E9335201E41DF876D8809CC95856B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:ea:55:ad:bf:f7:33:52:7f:cd:07:5a:88:
                    93:17:95:3c:85:81:5b:19:86:59:36:92:b8:87:1d:
                    7e:69:62:55:1e:ea:47:b1:b2:c5:9e:32:a1:a9:84:
                    bb:ef:1e:04:61:a4:93:3e:0f:4f:df:da:7f:fa:c7:
                    73:2e:23:ea:07:ea:a1:cf:76:79:ab:c3:c4:12:99:
                    bc:2a:84:5e:64:73:02:7a:65:41:67:5f:57:19:62:
                    b5:03:f7:e5:8d:d0:16:b2:14:5e:3a:ac:fa:e5:3a:
                    bb:a1:ca:6a:8d:77:2d:02:e0:09:72:a8:8a:30:98:
                    a5:a6:9d:fe:de:12:62:48:d7:8f:0a:fd:2e:ca:23:
                    98:b0:fc:bb:53:6d:75:00:d5:2b:25:c8:38:44:46:
                    9e:fa:92:df:e4:b5:9f:e3:4a:9a:70:9e:9d:4a:08:
                    25:67:47:05:7c:b1:4b:7c:96:cd:eb:6d:20:33:e6:
                    40:af:e2:02:e1:15:e6:23:39:86:52:c8:fc:5d:10:
                    b2:bc:5f:53:5a:9f:a4:ee:7e:c5:07:43:d5:69:06:
                    4d:a6:df:9a:db:33:92:fe:6f:e4:2f:66:f0:02:d4:
                    cd:91:77:fb:ef:5e:80:18:be:d5:af:59:41:e4:a7:
                    ab:6d:e6:75:44:f5:54:db:a1:43:7e:d7:c6:9c:c3:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A2:BC:D1:3E:93:35:20:1E:41:DF:87:6D:88:09:CC:95:85:6B:71
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS147016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f0::/47
                  2a06:a005:baa::/47
                  2a06:a005:1502::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:fd:0d:f0:c9:d5:c8:d2:9c:42:c2:76:d5:12:16:c1:32:7d:
         af:b7:74:05:1a:46:16:ea:53:31:5b:f9:9c:46:4b:60:f9:6c:
         1a:f2:80:49:89:11:0e:65:b6:d0:f3:ca:26:88:1e:2f:88:f1:
         41:73:1a:e9:ec:1b:eb:d1:75:d4:9a:50:e9:6d:f4:24:d1:2b:
         b4:ab:ad:ce:94:1e:7c:87:80:59:f7:ab:c1:aa:1e:21:69:11:
         53:ea:1b:ac:32:46:01:d8:d1:44:ba:21:12:f4:dc:11:ab:0f:
         87:d9:b2:67:34:59:e9:00:5f:7c:14:cc:54:38:30:88:83:01:
         bb:fa:72:88:e4:4b:f6:b5:49:d0:51:29:e2:dc:1e:3d:20:5b:
         ed:0a:c5:eb:32:bc:43:e9:3f:18:fe:a6:8f:54:a4:a5:5d:a1:
         a9:af:9a:f2:ea:f1:aa:23:32:60:63:e5:8a:6b:8e:1c:06:ba:
         e4:3c:1a:ce:5f:b4:d3:06:16:3e:9a:20:7c:8d:8b:b2:3a:ea:
         fd:aa:93:e1:0a:4a:18:6a:e3:da:47:30:97:9e:8a:db:1c:b1:
         84:4a:4c:f6:d1:f3:a3:e2:5f:37:48:14:7a:a9:48:26:40:71:
         8c:5c:41:bc:58:24:1a:19:5b:08:9e:9e:49:36:bf:05:10:24:
         9b:db:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:53 2024 by rpki-client on console-ams.rpki-client.org