Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS15780.roa
File:                     AS15780.roa (raw, json)
Hash identifier:          HHXChNftdAAs5tyReSkn+lfxQTUxDdoJVjHY+uSlnsY=
Subject key identifier:   44:DF:3A:F5:1C:A6:AE:46:B3:F7:80:D1:FE:7F:E2:C8:8E:BB:C1:3D
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       62092AE8A3E248B346F6E5602AF6610D3DB30B3C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS15780.roa
Signing time:             Tue 05 Dec 2023 02:44:11 +0000
ROA not before:           Tue 05 Dec 2023 02:39:11 +0000
ROA not after:            Tue 03 Dec 2024 02:44:11 +0000
asID:                     15780
IP address blocks:        2a06:a005:dd0::/44 maxlen: 48
                          2a06:a005:de0::/44 maxlen: 48
                          2a06:a005:df0::/44 maxlen: 48
                          2a06:a005:e00::/44 maxlen: 48
                          2a06:a005:e10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:09:2a:e8:a3:e2:48:b3:46:f6:e5:60:2a:f6:61:0d:3d:b3:0b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:11 2023 GMT
            Not After : Dec  3 02:44:11 2024 GMT
        Subject: CN=44DF3AF51CA6AE46B3F780D1FE7FE2C88EBBC13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:bf:d4:dd:f8:d7:91:3f:0d:f9:ce:9e:4e:
                    dd:0f:a2:a1:1f:85:33:13:dc:29:7d:46:0f:03:5b:
                    a0:d8:75:7e:b9:c7:c0:01:99:30:e1:8d:50:6e:2c:
                    41:3d:77:55:5e:2a:10:0b:7a:df:e3:4f:78:88:3c:
                    6c:a0:93:ca:27:a8:fe:f1:3a:fd:58:18:50:64:8d:
                    b9:70:26:13:d0:1f:ec:ba:7c:7e:4a:72:cc:de:ed:
                    dc:93:87:ff:ec:b8:97:a8:c2:c1:4d:c3:62:ef:12:
                    d0:81:f0:26:5f:eb:dd:83:2f:89:cd:10:06:b7:d8:
                    b9:53:5d:0e:41:17:55:86:6b:84:fc:93:68:bf:6a:
                    bc:32:a8:71:5c:01:26:a1:4b:f6:9e:e6:81:4d:58:
                    88:53:a4:56:a5:8e:c6:a7:53:06:9f:6a:c4:6c:a2:
                    7e:04:01:9b:6e:4b:75:d6:a5:d0:f7:a1:21:df:81:
                    ac:59:4b:42:07:11:d4:76:bb:91:56:ac:b0:82:b5:
                    20:65:ef:66:2c:24:30:2b:32:4a:3c:7b:4f:a7:6c:
                    d9:9a:5c:05:59:aa:82:ce:88:62:3c:24:d6:a9:e7:
                    30:54:22:38:0d:4c:83:33:66:a6:4a:83:cd:64:a0:
                    f7:bf:99:b2:89:2a:32:b6:99:c7:0f:5f:35:af:b7:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DF:3A:F5:1C:A6:AE:46:B3:F7:80:D1:FE:7F:E2:C8:8E:BB:C1:3D
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS15780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:dd0::-2a06:a005:e1f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:df:65:6c:e3:ea:66:05:9f:12:c7:10:55:f1:8c:0f:36:
         3e:b2:8e:41:23:df:17:7b:25:d0:dc:c2:a7:fa:26:8c:69:22:
         16:e0:f8:33:7f:86:82:8b:4b:20:7b:91:a2:f9:4c:fd:08:59:
         36:d5:11:bf:f8:81:e1:3d:82:3c:1d:78:fd:24:3a:0b:af:94:
         e3:68:2d:5c:ce:a1:f4:96:ab:c2:64:ae:31:18:b7:38:2a:c2:
         2b:ea:14:ce:ee:55:6f:d1:4c:b8:fd:f9:33:d8:cc:8d:4c:bf:
         d5:b2:24:f3:f4:03:e7:5e:df:9b:20:89:c8:33:59:db:60:d0:
         57:38:9b:cb:01:8e:6f:81:bf:9b:8d:70:a5:da:b9:39:6e:62:
         83:6c:73:c5:fe:0d:30:fc:5b:78:41:51:39:6e:44:29:c1:7e:
         5f:b7:7b:f6:89:08:50:1a:91:95:0f:8f:0d:20:6e:95:0d:24:
         8c:49:39:a3:b0:61:0f:16:56:df:48:f7:d0:db:bb:9c:15:7b:
         c5:96:63:a1:3f:ae:81:de:a3:54:ca:12:dd:3b:f8:ca:04:1f:
         b2:6c:43:12:12:fb:08:a7:c0:29:d6:c0:f8:5c:09:5e:01:01:
         27:01:50:ee:3f:0a:2b:29:71:65:f7:7c:71:31:93:5f:62:dc:
         e1:a0:5a:ff
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUYgkq6KPiSLNG9uVgKvZhDT2zCzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTFaFw0yNDEyMDMwMjQ0MTFaMDMxMTAvBgNV
BAMTKDQ0REYzQUY1MUNBNkFFNDZCM0Y3ODBEMUZFN0ZFMkM4OEVCQkMxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3G7/U3fjXkT8N+c6eTt0PoqEf
hTMT3Cl9Rg8DW6DYdX65x8ABmTDhjVBuLEE9d1VeKhALet/jT3iIPGygk8onqP7x
Ov1YGFBkjblwJhPQH+y6fH5Kcsze7dyTh//suJeowsFNw2LvEtCB8CZf692DL4nN
EAa32LlTXQ5BF1WGa4T8k2i/arwyqHFcASahS/ae5oFNWIhTpFaljsanUwafasRs
on4EAZtuS3XWpdD3oSHfgaxZS0IHEdR2u5FWrLCCtSBl72YsJDArMko8e0+nbNma
XAVZqoLOiGI8JNap5zBUIjgNTIMzZqZKg81koPe/mbKJKjK2mccPXzWvt5NbAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQURN869Rymrkaz94DR/n/iyI67wT0wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTU3ODAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcB
Af8EHjAcMBoEAgACMBQwEgMHBCoGoAUN0AMHBSoGoAUOADANBgkqhkiG9w0BAQsF
AAOCAQEAPbzfZWzj6mYFnxLHEFXxjA82PrKOQSPfF3sl0NzCp/omjGkiFuD4M3+G
gotLIHuRovlM/QhZNtURv/iB4T2CPB14/SQ6C6+U42gtXM6h9JarwmSuMRi3OCrC
K+oUzu5Vb9FMuP35M9jMjUy/1bIk8/QD517fmyCJyDNZ22DQVzibywGOb4G/m41w
pdq5OW5ig2xzxf4NMPxbeEFROW5EKcF+X7d79okIUBqRlQ+PDSBulQ0kjEk5o7Bh
DxZW30j30Nu7nBV7xZZjoT+ugd6jVMoS3Tv4ygQfsmxDEhL7CKfAKdbA+FwJXgEB
JwFQ7j8KKylxZfd8cTGTX2Lc4aBa/w==
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:55 2024 by rpki-client on console-fra.rpki-client.org