Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200969.roa
File:                     AS200969.roa (raw, json)
Hash identifier:          CXIEDcE+CuBsudBY7tNU4p29aqRXHWwbN7YXoyFyL3M=
Subject key identifier:   4B:3B:49:06:C1:5E:4B:00:06:AB:74:F8:23:83:50:6C:90:43:8C:F5
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       52C55000A02F7238C4C4348F17C1A32A88F40269
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200969.roa
Signing time:             Tue 05 Dec 2023 02:44:18 +0000
ROA not before:           Tue 05 Dec 2023 02:39:18 +0000
ROA not after:            Tue 03 Dec 2024 02:44:18 +0000
asID:                     200969
IP address blocks:        2a06:a005:2740::/44 maxlen: 48
                          2a06:a005:2750::/44 maxlen: 48
                          2a06:a005:2760::/44 maxlen: 48
                          2a06:a005:2770::/44 maxlen: 48
                          2a06:a005:2780::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c5:50:00:a0:2f:72:38:c4:c4:34:8f:17:c1:a3:2a:88:f4:02:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:18 2023 GMT
            Not After : Dec  3 02:44:18 2024 GMT
        Subject: CN=4B3B4906C15E4B0006AB74F82383506C90438CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:0d:02:55:9e:a1:0a:5b:03:69:b4:2f:f0:
                    34:8c:d6:f3:46:b8:0c:e2:94:91:21:fd:9b:19:4c:
                    c5:07:90:01:06:e4:ae:ce:99:3f:97:04:65:e0:14:
                    f7:83:de:0f:1d:50:d3:e0:55:65:91:76:ed:f7:67:
                    1f:40:ba:ef:61:d0:4b:e2:2e:4c:76:08:de:a7:96:
                    89:ef:65:75:40:ee:e1:52:c8:44:29:d0:48:d0:85:
                    21:ac:31:e3:df:52:a9:cf:7b:80:86:ec:a7:a7:ed:
                    95:7e:53:7c:82:19:cd:b9:2f:ad:7e:36:32:dd:82:
                    9f:33:5b:e3:db:8c:6d:fa:be:92:d5:9d:66:6b:00:
                    da:13:8d:34:4c:6e:1e:27:c4:15:db:92:7d:7d:d2:
                    d4:cf:db:dc:e7:9c:e4:08:e6:3d:d2:b4:01:32:d6:
                    9b:f6:d5:2e:c4:3d:44:56:52:97:a5:53:23:0b:e6:
                    c1:60:2a:1c:74:f6:9b:6b:47:68:61:9c:e2:33:71:
                    08:8c:9f:ed:1f:1b:90:83:b6:31:76:4a:a9:1f:03:
                    4c:89:6a:0f:fd:79:6f:f9:08:ba:ce:48:7c:5f:e6:
                    c0:49:5b:3e:21:5d:99:d0:27:5b:1d:54:25:7a:80:
                    d8:ec:f6:f7:a5:9f:a3:18:9d:b1:0d:33:f3:ac:36:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3B:49:06:C1:5E:4B:00:06:AB:74:F8:23:83:50:6C:90:43:8C:F5
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200969.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2740::-2a06:a005:278f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c6:84:3e:62:5c:9a:07:7c:0e:b1:d8:5b:79:6a:ee:44:5b:a4:
         23:28:06:4b:64:90:fa:8b:54:c9:44:95:a8:20:72:a3:3f:90:
         ac:b9:39:a4:3b:18:36:04:ef:5a:1d:69:fd:97:08:74:79:70:
         61:b0:4d:19:a9:87:fb:a1:cb:9f:3e:3a:f3:74:f2:b5:48:d5:
         82:a4:b9:79:a9:e1:8e:7a:a9:50:40:99:0c:56:88:19:95:7a:
         5e:52:12:d6:18:e4:5e:ea:8a:dc:80:85:8c:6e:3a:2c:50:93:
         71:89:d6:3f:71:84:c6:d2:2f:25:58:82:8e:7c:6e:89:2b:9b:
         ce:15:35:c3:ca:54:d4:41:d2:58:17:7d:af:91:1c:2d:42:4f:
         87:16:71:58:0c:fe:0e:16:fb:bb:8a:31:d2:82:d5:c2:73:f6:
         07:c4:64:7d:a7:51:d0:f1:a8:04:8f:4a:eb:a4:73:aa:bb:bd:
         ca:0f:07:74:f7:6d:84:e1:fc:05:b0:a2:4b:0b:89:e3:f1:fd:
         78:8f:cc:a6:fc:f7:67:8c:c5:1d:cf:b5:d5:c1:e0:c3:42:a2:
         c2:f6:43:d4:21:dc:44:35:e4:60:14:c6:38:3f:d0:8f:08:a8:
         a2:a8:e4:42:fd:7f:8f:49:5c:52:4c:e5:be:ac:89:6c:27:78:
         69:97:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org