Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200993.roa
File:                     AS200993.roa (raw, json)
Hash identifier:          98eDlCN1AWV2UQweV8CKgHOYNy/cnGf+06/EenIbgFg=
Subject key identifier:   9A:D3:B1:7B:B3:8D:D1:60:C8:55:96:72:58:E2:1A:6B:71:8B:FE:3E
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       74629AA4ECC51468E9AF8260F215E6AADC41D6FE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200993.roa
Signing time:             Wed 14 Feb 2024 20:44:24 +0000
ROA not before:           Wed 14 Feb 2024 20:39:24 +0000
ROA not after:            Wed 12 Feb 2025 20:44:24 +0000
asID:                     200993
IP address blocks:        2a06:a005:2d1::/48 maxlen: 48
                          2a06:a005:1943::/48 maxlen: 48
                          2a06:a005:1944::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:62:9a:a4:ec:c5:14:68:e9:af:82:60:f2:15:e6:aa:dc:41:d6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 14 20:39:24 2024 GMT
            Not After : Feb 12 20:44:24 2025 GMT
        Subject: CN=9AD3B17BB38DD160C855967258E21A6B718BFE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:7e:67:12:d9:c3:14:e3:d9:48:4e:21:69:
                    eb:ce:f3:80:40:4f:7c:8b:b8:0f:21:d7:65:01:bc:
                    44:0a:bd:55:28:dd:d9:65:bc:70:d4:55:c4:41:fc:
                    78:69:ca:de:ff:5e:9d:7c:f0:34:94:45:97:11:aa:
                    02:50:fb:51:f7:a7:03:98:69:94:c2:2d:e6:01:67:
                    cb:39:8a:31:51:97:e7:cf:7f:d8:7a:e4:3f:f8:5a:
                    c4:49:91:3f:1e:62:5e:87:e8:ec:86:18:c0:84:c0:
                    ae:b9:24:48:bf:c2:1f:d6:bf:12:45:29:01:a5:d4:
                    6a:1e:b5:08:a1:b1:a9:1a:09:25:50:fe:bc:54:fa:
                    81:55:63:ac:1f:40:18:94:a1:a5:09:21:28:ee:3f:
                    33:07:8b:52:53:0f:e8:ee:e6:2e:1c:72:43:f0:15:
                    75:5f:e2:34:2d:48:54:25:1c:63:dc:92:bf:02:07:
                    f9:25:7d:4d:52:1b:88:ef:6f:9b:62:2f:78:b6:a2:
                    5f:47:6e:82:fb:e9:bc:92:f0:c4:0a:76:ff:fd:0e:
                    6b:69:85:26:f3:60:89:d4:96:bc:d8:ac:d3:e8:0e:
                    da:ad:1a:16:76:43:5a:c9:31:a7:f6:fd:21:14:38:
                    b6:68:88:89:16:0f:6f:d9:ef:6c:1f:89:9b:bf:53:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D3:B1:7B:B3:8D:D1:60:C8:55:96:72:58:E2:1A:6B:71:8B:FE:3E
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200993.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d1::/48
                  2a06:a005:1943::-2a06:a005:1944:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         11:81:37:8e:09:66:d7:a7:eb:1f:de:5b:5c:5c:ee:89:fe:18:
         c3:46:ef:dc:eb:de:9c:60:43:b8:14:95:57:91:62:db:b6:47:
         f6:de:80:36:79:79:9e:3e:db:85:1e:28:b8:8b:ab:66:9e:1a:
         e5:83:46:f3:34:ee:72:f9:12:3e:9b:0c:26:42:b6:0c:79:61:
         89:d2:78:d7:6c:2f:b1:29:60:a9:21:5c:31:80:b2:4d:52:e6:
         ab:e2:20:e3:5a:1a:6e:5f:9c:cd:1b:5b:92:e3:54:d1:7e:c3:
         40:92:8a:d8:46:db:5f:ff:5e:df:e7:d8:2b:69:cb:27:21:dd:
         5f:ec:d6:ac:b3:46:3b:59:e2:24:c9:f6:1a:ad:55:e3:fb:bd:
         08:d5:fc:df:a4:08:d2:2a:82:2d:ec:d7:e3:b4:75:d3:e5:fd:
         ad:bc:4c:7b:16:12:06:fe:88:5f:30:f0:08:64:21:83:b7:54:
         85:ef:82:90:11:bd:37:b3:2b:0d:12:91:35:b9:41:b0:09:34:
         f5:a6:9a:f4:b1:bc:8c:0a:7f:c8:25:9e:8a:5a:07:78:c9:c6:
         5f:dd:6d:e9:11:0b:4b:ef:4f:7a:1a:fa:1c:85:12:02:60:88:
         01:da:b7:62:e6:e5:e8:df:42:96:d7:7c:6e:50:a9:af:e5:e7:
         d8:05:6d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org