Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa
File:                     AS202518.roa (raw, json)
Hash identifier:          4zmB/xHHv5veCEEsU4MPmzDCYOsTUnx1Quk+WQPQRfc=
Subject key identifier:   C6:C9:52:53:0F:26:8E:20:D4:CF:A7:24:41:AA:FB:79:8A:89:D7:05
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       57622DB876ADC3B3C2BF5A4CCA30186E7E3BFFB6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa
Signing time:             Tue 05 Dec 2023 02:44:19 +0000
ROA not before:           Tue 05 Dec 2023 02:39:19 +0000
ROA not after:            Tue 03 Dec 2024 02:44:19 +0000
asID:                     202518
IP address blocks:        2a06:a005:1504::/48 maxlen: 48
                          2a06:a005:1d50::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:62:2d:b8:76:ad:c3:b3:c2:bf:5a:4c:ca:30:18:6e:7e:3b:ff:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:19 2023 GMT
            Not After : Dec  3 02:44:19 2024 GMT
        Subject: CN=C6C952530F268E20D4CFA72441AAFB798A89D705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:bf:ba:31:45:5a:de:9a:ca:8b:06:1a:6a:
                    90:3a:85:41:0c:f5:59:84:30:20:fb:aa:df:45:c0:
                    df:f4:94:8a:1c:ad:31:71:ca:75:9e:86:03:bb:5b:
                    77:29:0e:52:0c:04:e2:20:11:8e:93:23:d2:d1:9b:
                    fa:41:4e:a4:a7:c3:1f:2c:73:cc:36:e4:3c:e0:bf:
                    d3:3b:03:e2:7e:87:13:02:5e:2f:24:19:b0:33:b8:
                    09:25:dd:81:b7:2e:4c:5b:09:20:bc:82:45:e7:88:
                    dd:00:b3:76:83:04:d5:36:e0:12:64:48:49:d9:55:
                    a1:57:7d:bd:82:2a:41:71:c2:64:0a:2a:79:aa:60:
                    c0:55:da:e4:fd:db:e4:74:b4:85:9a:96:ed:0a:1a:
                    8b:ce:7c:5a:01:52:51:b9:5d:3d:d3:70:84:0c:64:
                    e6:aa:64:15:e6:a1:54:fd:26:f5:66:55:5c:aa:49:
                    36:0d:26:58:68:bd:e5:42:72:95:b1:55:ab:cf:bc:
                    0a:e0:e6:9a:2b:63:ba:c0:1e:20:56:0e:83:c1:c9:
                    f0:7c:15:b1:a8:63:09:31:64:31:bd:7d:78:a6:06:
                    6f:a5:83:1a:61:fc:e4:96:fd:7d:d5:53:b7:82:42:
                    01:c2:e9:10:85:fd:b0:af:a5:17:a3:78:6d:29:b3:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C9:52:53:0F:26:8E:20:D4:CF:A7:24:41:AA:FB:79:8A:89:D7:05
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202518.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1504::/48
                  2a06:a005:1d50::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:70:7d:1d:46:a0:09:3e:7e:66:ff:94:84:0b:ed:cb:f8:9c:
         27:f0:a0:67:b3:fc:b9:a9:ef:92:95:43:6c:02:8e:ad:30:0a:
         fb:55:f6:48:a7:d3:b1:6e:3d:49:eb:29:b8:aa:6e:23:4f:7f:
         cf:09:99:4d:14:0f:4b:e2:24:16:ba:fc:62:dc:d6:da:ba:fd:
         28:28:0b:2d:34:32:b1:74:84:48:b3:c3:85:4d:c8:34:07:ae:
         8b:8a:64:66:32:c4:52:79:d9:22:4c:48:9c:ea:36:d7:e6:fb:
         20:d4:64:dd:36:4b:a3:a9:72:88:6a:39:c5:b3:37:46:84:71:
         b3:10:91:8a:9f:db:8b:c6:80:c3:38:4b:6a:df:9b:28:39:dd:
         68:13:15:62:ea:57:24:c7:fd:84:ab:4a:7d:e4:2b:a9:2b:a2:
         20:13:8b:3e:09:63:30:2a:bb:4a:d1:53:d2:c6:df:d0:e0:10:
         a1:9e:82:25:9c:7d:a7:cf:f1:52:8e:8d:39:6a:0d:ab:13:8f:
         18:de:d3:39:f3:3b:e1:ba:83:fa:67:77:5c:41:d0:75:ec:1a:
         e6:9c:43:13:ac:f1:db:42:cc:34:72:6b:6a:56:ff:f5:db:b4:
         25:31:e9:b5:94:a0:aa:2b:35:06:bc:fe:a2:20:12:eb:da:44:
         b9:d3:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org