Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202255.roa
File:                     AS202255.roa (raw, json)
Hash identifier:          2QDrOkjh2OGI/nnOEnaP8Qr7qd0Xemn6tFPkdPKovY4=
Subject key identifier:   1A:B1:33:5B:43:8C:07:FD:AB:B3:6A:F7:4E:A4:4A:E4:C5:D6:8C:12
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       4B41ACB8E56E9E05F5ED86AF50423397268C6177
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202255.roa
Signing time:             Tue 05 Nov 2024 03:39:59 +0000
ROA not before:           Tue 05 Nov 2024 03:34:59 +0000
ROA not after:            Tue 04 Nov 2025 03:39:59 +0000
asID:                     202255
IP address blocks:        2a06:a005:1503::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:41:ac:b8:e5:6e:9e:05:f5:ed:86:af:50:42:33:97:26:8c:61:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:34:59 2024 GMT
            Not After : Nov  4 03:39:59 2025 GMT
        Subject: CN=1AB1335B438C07FDABB36AF74EA44AE4C5D68C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:c4:b6:ed:fa:7d:69:a3:89:9b:33:e4:42:
                    86:88:34:06:36:39:92:f2:08:02:60:2a:fb:9e:1e:
                    2e:bf:c4:0c:ba:6f:77:34:98:22:c1:93:bd:d6:9f:
                    fb:00:55:2e:cf:8c:a4:e5:ae:97:66:43:73:87:a5:
                    29:e8:17:fc:29:6f:5d:ca:67:38:f8:c5:c5:f9:9f:
                    6f:4f:85:d4:ec:aa:3b:d6:08:ff:7c:2a:f5:bd:28:
                    aa:e7:17:fa:a1:1d:53:83:5e:0e:a0:a7:b3:e1:44:
                    2e:80:77:c0:4b:84:16:6a:a6:91:e6:31:99:1c:4c:
                    b3:5b:12:2a:b4:67:9c:b4:25:33:c3:b6:f3:6a:2a:
                    45:b6:de:78:f8:b5:bc:c3:7f:6b:0e:88:eb:ca:bf:
                    19:b5:6c:71:9a:0f:d2:0d:8f:e0:62:a3:ff:93:94:
                    0b:6d:8e:25:4f:81:3a:23:01:d3:cd:a6:2d:ed:76:
                    2b:1b:46:fc:db:6b:d9:48:ae:34:d5:da:ec:36:b3:
                    1c:e0:18:c3:91:37:48:6a:27:37:fc:11:89:09:0e:
                    d6:91:35:32:48:eb:e1:92:ad:05:ee:f8:0c:02:06:
                    0e:84:7e:9c:b9:09:03:f9:88:fc:b5:0a:b1:13:22:
                    b9:81:3d:de:d7:e2:5e:62:4c:bb:cd:9c:b7:1c:d3:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B1:33:5B:43:8C:07:FD:AB:B3:6A:F7:4E:A4:4A:E4:C5:D6:8C:12
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202255.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1503::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:69:a6:83:d4:96:07:54:73:3c:aa:90:9c:0c:a7:c5:a2:aa:
         39:7b:2a:27:53:91:9a:fd:64:7e:9b:f7:2b:2a:17:07:58:b9:
         96:55:d0:0f:0f:ec:12:68:f3:7d:a6:02:7e:ac:e4:ba:b9:d7:
         a6:62:45:0e:90:f1:45:76:a8:09:72:38:a7:ba:2a:f2:86:06:
         dc:e2:7b:ce:86:c3:47:0a:31:d8:8e:27:14:90:be:38:35:a2:
         ed:e4:bc:fd:19:b2:ac:33:d1:39:f0:7e:bb:b9:1d:24:e0:23:
         8a:6c:fa:53:cb:10:0e:04:5d:6e:cc:49:f7:63:7c:3e:04:d0:
         19:3c:6b:be:fe:fc:d6:f7:05:9c:d0:28:9e:a9:87:15:7b:5b:
         fc:27:e8:ca:9f:1e:26:36:85:43:76:30:58:b5:10:20:85:f9:
         85:d0:b3:9a:b7:2b:1a:81:68:1d:db:a4:d3:2d:51:e2:14:f6:
         09:4a:e4:82:a1:8f:b3:aa:1a:0f:03:33:03:5d:8a:df:0e:eb:
         c9:c3:03:d3:76:50:1d:ff:3b:79:13:53:74:42:22:02:3f:a7:
         c3:77:6f:14:97:1f:47:36:0d:87:16:6f:41:22:38:35:fc:4a:
         c4:53:20:f8:ab:e3:19:a3:91:e8:e6:ed:3e:8f:0b:af:f6:d5:
         af:ac:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----