Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200754.roa
File:                     AS200754.roa (raw, json)
Hash identifier:          cdvhPR6ElY7GvX9DYl1rsQJSX639ZSJFMaQZTfjBimc=
Subject key identifier:   76:95:71:23:C3:BB:47:9D:62:B3:46:31:AC:1D:3F:08:F4:A5:18:78
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       55F71C23EABB3FEBF0BA1C9A1E20D68A6DE32024
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200754.roa
Signing time:             Tue 05 Dec 2023 02:44:12 +0000
ROA not before:           Tue 05 Dec 2023 02:39:12 +0000
ROA not after:            Tue 03 Dec 2024 02:44:12 +0000
asID:                     200754
IP address blocks:        2a06:a005:1165::/48 maxlen: 48
                          2a06:a005:116d::/48 maxlen: 48
                          2a06:a005:116e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f7:1c:23:ea:bb:3f:eb:f0:ba:1c:9a:1e:20:d6:8a:6d:e3:20:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:12 2023 GMT
            Not After : Dec  3 02:44:12 2024 GMT
        Subject: CN=76957123C3BB479D62B34631AC1D3F08F4A51878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:95:b7:00:e9:fa:fa:eb:9d:10:3e:9b:f5:
                    5b:e8:38:d7:91:01:35:d5:1a:29:da:c3:7e:04:f6:
                    7f:ef:88:47:94:73:92:ba:f5:cd:41:18:01:d0:d3:
                    bc:d3:c7:83:6c:18:8c:8d:49:07:e5:ea:1a:56:09:
                    ba:d2:14:a7:03:04:ae:ee:7b:97:28:7b:34:91:6d:
                    50:62:cc:92:47:ec:31:c9:f8:b2:c9:d2:56:6d:41:
                    77:49:ee:22:15:55:26:5f:37:a8:56:21:4d:9c:b1:
                    f6:be:2d:74:ec:39:91:50:52:87:e2:68:86:74:4f:
                    6a:93:0d:68:ab:c8:20:d9:aa:e5:e3:98:8f:b9:d1:
                    a0:a3:4c:97:82:1a:c2:b5:1f:1f:a2:f9:7a:7f:88:
                    2b:5a:aa:e0:8c:23:19:8f:64:74:01:a9:a9:c9:a1:
                    14:c3:27:5a:7c:37:7c:e2:a6:52:75:cc:13:b4:d4:
                    86:9a:98:ac:1b:e0:54:e6:55:29:62:9f:7c:f3:fc:
                    59:95:87:8e:9d:b5:3a:80:49:89:2d:4e:b7:f5:5c:
                    ad:37:ac:0a:52:95:f2:fb:75:21:2b:4f:c0:a9:85:
                    04:e1:a1:e8:b7:5a:39:a0:f0:99:71:e6:cd:0a:ff:
                    57:de:aa:5d:a1:cc:ed:3c:22:1c:bb:54:19:49:84:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:71:23:C3:BB:47:9D:62:B3:46:31:AC:1D:3F:08:F4:A5:18:78
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200754.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1165::/48
                  2a06:a005:116d::-2a06:a005:116e:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b7:11:9d:43:f2:8a:2f:5d:c7:c7:7e:a2:ac:22:bf:77:de:a0:
         55:97:63:89:3d:2b:5d:b2:21:7f:62:7f:00:4e:d7:c7:53:f0:
         f3:0e:92:76:bc:a2:dc:6c:92:27:81:c3:13:4a:fe:d3:ad:c7:
         86:33:9a:e3:4e:c4:94:c9:7c:9d:74:e8:03:17:63:85:5b:75:
         e0:eb:0d:5b:eb:42:b1:b8:62:fb:64:b1:84:bf:8f:1d:1c:9e:
         9e:f8:90:33:38:96:a6:3f:fa:c4:a9:34:95:3a:4a:7b:ea:c7:
         46:d8:c9:5e:0b:26:84:12:7b:00:67:e2:5c:dd:59:99:5c:f3:
         1d:dc:f2:ac:2e:e3:01:a4:15:9b:f8:e2:2b:f4:1a:d0:77:da:
         40:68:d7:c4:f3:50:bb:87:08:3b:a6:cd:49:34:dd:e2:a5:5e:
         fc:63:6a:70:b5:6d:9a:13:ac:38:92:9b:a4:a4:35:1e:8e:c8:
         80:82:85:36:2e:ce:a6:d2:10:2b:45:97:c2:ad:fe:6b:47:d1:
         b3:62:18:f6:55:73:38:62:c1:37:5a:fc:08:90:dd:cd:12:5d:
         c6:d9:a8:e4:0d:f3:93:68:ec:89:83:cf:48:f5:fd:9d:75:c5:
         9d:b2:32:f6:11:c5:f2:4e:41:23:97:d4:44:74:73:55:01:55:
         be:d8:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org