Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa
File:                     AS202400.roa (raw, json)
Hash identifier:          BoEE4qjqlJNAiPyJC9q+OIzosnHMgNCj3Wmc9ihWkfU=
Subject key identifier:   C6:C7:89:EB:29:FA:37:13:12:5F:53:59:F2:70:7A:BE:74:F8:8B:7F
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       550E2B01CB8A92EE68ED6D5A1E58004AB4BD2001
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa
Signing time:             Thu 26 Jan 2023 04:40:19 +0000
ROA not before:           Thu 26 Jan 2023 04:35:19 +0000
ROA not after:            Thu 25 Jan 2024 04:40:19 +0000
asID:                     202400
IP address blocks:        2a06:a005:5a4::/48 maxlen: 48
                          2a06:a005:15d4::/46 maxlen: 48
                          2a06:a005:2c40::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jul 2023 12:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0e:2b:01:cb:8a:92:ee:68:ed:6d:5a:1e:58:00:4a:b4:bd:20:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 26 04:35:19 2023 GMT
            Not After : Jan 25 04:40:19 2024 GMT
        Subject: CN=C6C789EB29FA3713125F5359F2707ABE74F88B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:8c:0f:85:55:79:0d:6d:64:f1:6c:62:51:
                    6c:d3:56:17:56:cf:cd:9f:c9:bb:b4:93:40:89:f5:
                    83:c7:3a:68:9f:73:0a:c7:49:95:c0:fd:71:65:2b:
                    94:f6:c0:4c:ee:69:81:20:2d:c5:e7:9f:69:c1:93:
                    d2:05:49:ee:1b:e1:31:a7:0e:e5:20:12:2f:98:c5:
                    cb:8b:de:fd:c5:14:f9:76:a7:7d:08:0a:0e:63:58:
                    45:10:c4:f9:8a:56:e0:70:0a:1c:34:c5:80:33:f7:
                    47:97:b5:f8:d8:a7:75:f1:6d:92:5a:8b:a3:8c:9a:
                    3c:f0:45:d0:5b:aa:7f:4d:58:fc:49:bb:15:8c:6e:
                    a3:fe:ea:d3:70:12:6e:d1:cf:56:ac:3d:a8:52:bd:
                    60:bd:76:31:d3:55:91:8a:c2:46:23:ba:d0:5d:2e:
                    2f:65:10:c3:17:b3:44:05:03:ef:1d:e4:28:d1:e4:
                    29:18:52:a6:e5:a8:7b:33:f1:bf:45:63:98:7c:2c:
                    3a:92:a3:a8:35:b2:e0:99:1f:0c:7b:e0:80:83:ad:
                    fb:ab:a7:7c:e9:21:1e:ab:a9:25:28:c4:55:e2:ad:
                    10:20:f7:62:69:3e:7c:1f:07:d9:9c:bf:13:f7:bc:
                    7c:c2:f5:9b:47:e2:e5:e6:83:dc:d9:bd:f7:b6:a0:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C7:89:EB:29:FA:37:13:12:5F:53:59:F2:70:7A:BE:74:F8:8B:7F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a4::/48
                  2a06:a005:15d4::/46
                  2a06:a005:2c40::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:d6:2f:11:5f:24:ab:85:66:16:f1:4e:19:8d:fe:ca:93:
         48:cc:db:91:7b:69:2c:2d:ca:83:76:12:e3:39:41:48:aa:c1:
         de:ec:0b:9e:49:2c:7e:42:cd:df:e0:9c:75:b2:55:05:6a:35:
         20:1d:a7:b9:71:73:8b:dc:e6:70:2b:aa:10:70:0f:8e:ed:0b:
         47:79:7e:02:38:2b:e7:76:dd:9a:8f:f1:36:da:ff:82:28:59:
         4b:66:f7:ae:98:67:1f:7c:a6:7e:0b:50:d0:ec:c8:c0:67:c3:
         a0:cf:75:b7:c1:3a:ec:57:58:ae:6d:8a:12:29:1c:af:1d:32:
         c6:5f:f6:54:83:a1:7d:0a:2a:b9:be:5a:32:e0:9d:cb:8b:cf:
         3c:f3:7b:3e:d9:0a:8d:7c:da:da:09:11:7a:cb:f4:19:cc:23:
         ad:3f:b4:ed:d4:38:27:bd:95:db:8b:fe:02:d7:87:de:7e:cf:
         ca:ad:c3:79:97:40:52:b9:fa:5a:a5:ce:95:32:8c:db:93:17:
         ee:0b:f2:4f:39:6b:0e:8b:49:bc:8d:77:39:10:36:63:a5:40:
         20:5b:4c:cb:86:4e:a5:04:d1:01:32:4b:1c:0f:d1:3f:0c:d9:
         dd:a2:c0:5b:e9:16:d2:63:45:a0:ad:79:48:0d:e8:30:cd:dc:
         9a:6d:fa:8f
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUVQ4rAcuKku5o7W1aHlgASrS9IAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAxMjYwNDM1MTlaFw0yNDAxMjUwNDQwMTlaMDMxMTAvBgNV
BAMTKEM2Qzc4OUVCMjlGQTM3MTMxMjVGNTM1OUYyNzA3QUJFNzRGODhCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9y4wPhVV5DW1k8WxiUWzTVhdW
z82fybu0k0CJ9YPHOmifcwrHSZXA/XFlK5T2wEzuaYEgLcXnn2nBk9IFSe4b4TGn
DuUgEi+YxcuL3v3FFPl2p30ICg5jWEUQxPmKVuBwChw0xYAz90eXtfjYp3XxbZJa
i6OMmjzwRdBbqn9NWPxJuxWMbqP+6tNwEm7Rz1asPahSvWC9djHTVZGKwkYjutBd
Li9lEMMXs0QFA+8d5CjR5CkYUqblqHsz8b9FY5h8LDqSo6g1suCZHwx74ICDrfur
p3zpIR6rqSUoxFXirRAg92JpPnwfB9mcvxP3vHzC9ZtH4uXmg9zZvfe2oOzzAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUxseJ6yn6NxMSX1NZ8nB6vnT4i38wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAyNDAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzAhBAIAAjAbAwcAKgagBQWkAwcCKgagBRXUAwcEKgagBSxAMA0GCSqG
SIb3DQEBCwUAA4IBAQBxD9YvEV8kq4VmFvFOGY3+ypNIzNuRe2ksLcqDdhLjOUFI
qsHe7AueSSx+Qs3f4Jx1slUFajUgHae5cXOL3OZwK6oQcA+O7QtHeX4COCvndt2a
j/E22v+CKFlLZveumGcffKZ+C1DQ7MjAZ8Ogz3W3wTrsV1iubYoSKRyvHTLGX/ZU
g6F9Ciq5vloy4J3Li88883s+2QqNfNraCRF6y/QZzCOtP7Tt1DgnvZXbi/4C14fe
fs/KrcN5l0BSufpapc6VMozbkxfuC/JPOWsOi0m8jXc5EDZjpUAgW0zLhk6lBNEB
MkscD9E/DNndosBb6RbSY0WgrXlIDegwzdyabfqP
-----END CERTIFICATE-----