Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS15780.roa
File:                     AS15780.roa (raw, json)
Hash identifier:          d+o05TUXs57r6vsfv/w/gyyHnUlhWfxo03Ynw0aa1vw=
Subject key identifier:   F5:05:39:7A:F7:14:29:D7:5E:EB:B2:63:F3:06:DE:FE:CC:D3:79:A5
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       57D1512756E5A93544C7BF07F8023B2285738E69
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS15780.roa
Signing time:             Tue 05 Nov 2024 03:40:00 +0000
ROA not before:           Tue 05 Nov 2024 03:35:00 +0000
ROA not after:            Tue 04 Nov 2025 03:40:00 +0000
asID:                     15780
IP address blocks:        2a06:a005:dd0::/44 maxlen: 48
                          2a06:a005:de0::/44 maxlen: 48
                          2a06:a005:df0::/44 maxlen: 48
                          2a06:a005:e00::/44 maxlen: 48
                          2a06:a005:e10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d1:51:27:56:e5:a9:35:44:c7:bf:07:f8:02:3b:22:85:73:8e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:00 2024 GMT
            Not After : Nov  4 03:40:00 2025 GMT
        Subject: CN=F505397AF71429D75EEBB263F306DEFECCD379A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:e0:2f:51:e3:f7:92:f5:58:17:2e:13:5f:
                    6e:b1:04:82:47:cf:48:51:8d:67:40:c6:a2:ee:a5:
                    66:88:bb:bd:d4:ae:44:64:fd:2f:65:fe:3c:24:64:
                    5a:dd:81:1a:fa:91:8e:80:a5:df:d9:67:d9:c3:b0:
                    ed:53:f3:52:6b:b0:b2:3f:83:a3:37:fa:89:d4:2c:
                    e3:2c:4f:83:9c:3e:59:96:f4:93:e9:70:ee:ba:0f:
                    ca:3c:d3:8f:3b:a8:00:30:1f:57:4f:16:69:ba:3c:
                    cc:6e:36:7f:68:7c:85:71:d2:01:e0:51:e6:be:1a:
                    35:b4:1e:b9:bc:37:cb:3c:cf:64:2c:9f:d9:5d:3a:
                    49:54:70:de:2f:3c:a6:10:07:b7:fa:46:cf:e4:23:
                    77:1d:bc:56:d8:83:7f:f9:7b:b6:1c:88:8a:5f:b3:
                    53:d7:0b:74:a3:69:23:f3:4b:90:97:0f:8e:5e:52:
                    78:9b:95:33:d2:9a:3c:df:a5:d5:46:f0:82:d3:9e:
                    f0:b3:7f:eb:e6:aa:5d:d0:69:91:0d:3f:68:61:92:
                    e5:dc:a7:f0:b2:eb:c6:76:8c:2a:21:53:7f:93:28:
                    67:4c:82:63:39:26:cc:fd:d9:0a:a4:16:4e:f1:b3:
                    19:f5:a1:cf:a6:e4:57:20:cf:38:02:8c:f8:6f:d2:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:05:39:7A:F7:14:29:D7:5E:EB:B2:63:F3:06:DE:FE:CC:D3:79:A5
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS15780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:dd0::-2a06:a005:e1f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         79:59:da:91:b8:11:9d:4e:a8:c8:36:cc:8b:9e:da:ba:8b:df:
         b4:d7:12:cd:8a:c5:8b:40:46:34:5e:da:98:54:98:86:a0:14:
         7e:39:de:1f:14:14:30:4a:e7:58:5a:c5:3f:e7:a8:6a:17:e1:
         8a:2c:65:74:b3:c8:c7:7e:be:63:44:9d:ee:c5:c1:e5:f1:69:
         c6:18:ee:0b:f0:7f:ce:fe:96:54:e7:77:c6:cb:fd:db:51:7c:
         13:a5:6b:4d:ea:87:4b:59:83:18:10:c4:39:9d:36:98:44:ad:
         0f:62:ba:05:11:d5:c5:fa:f6:45:af:45:c2:c2:3e:ef:aa:5e:
         2e:65:9f:87:93:1e:a0:b5:c7:07:10:42:4c:84:42:9c:3c:d8:
         1c:b2:14:ff:b4:af:49:c9:4d:ea:4f:a3:d8:24:71:71:71:1d:
         14:f1:10:5c:94:a4:47:e4:0d:04:95:f6:32:57:6b:1f:1d:6c:
         e1:99:c5:65:39:86:99:84:80:53:d8:71:fd:a0:06:3c:dd:d3:
         56:e1:53:3c:c6:f0:fb:77:82:c8:6e:cf:7c:7c:0e:54:36:a5:
         dc:49:37:80:e5:25:6c:34:8c:c7:1f:f6:d3:05:b6:da:ce:cd:
         70:6e:fb:58:56:10:cc:7f:f0:3c:36:70:fe:21:8c:6a:49:ae:
         f3:63:a8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:52 2024 by rpki-client on console-ams.rpki-client.org