Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202673.roa
File:                     AS202673.roa (raw, json)
Hash identifier:          pygzn8b0RKRIXiwCSMdLP39SjaTYQkwmv6iqxBNt5Uo=
Subject key identifier:   FB:98:06:BC:69:1A:C7:B4:DB:E1:58:73:73:1A:B1:15:F2:57:D1:62
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       29E5876FC7A405839745B74E0FC097A11EB40C3E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202673.roa
Signing time:             Wed 07 Feb 2024 00:44:24 +0000
ROA not before:           Wed 07 Feb 2024 00:39:24 +0000
ROA not after:            Wed 05 Feb 2025 00:44:24 +0000
asID:                     202673
IP address blocks:        2a06:a005:2e60::/44 maxlen: 48
                          2a06:a005:2e70::/44 maxlen: 48
                          2a06:a005:2e80::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e5:87:6f:c7:a4:05:83:97:45:b7:4e:0f:c0:97:a1:1e:b4:0c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb  7 00:39:24 2024 GMT
            Not After : Feb  5 00:44:24 2025 GMT
        Subject: CN=FB9806BC691AC7B4DBE15873731AB115F257D162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:13:22:a2:8c:72:8b:60:d2:5b:ab:78:47:
                    40:76:aa:3e:7f:0b:9b:99:2f:73:fe:85:6e:90:a2:
                    95:1b:2e:72:a4:2e:29:ab:a7:fb:96:75:41:2c:98:
                    54:bf:65:55:f6:c1:14:3a:7b:d6:35:7e:5c:f0:63:
                    6b:18:d4:8e:fe:39:1a:35:e0:2d:cf:19:7c:85:12:
                    4e:c1:44:0f:0c:55:4a:8a:6e:63:ed:4c:70:d0:bb:
                    27:14:c0:64:c6:95:ca:94:8c:00:e4:4d:45:d3:a6:
                    88:f1:e4:e5:19:eb:85:9b:bd:29:08:0e:90:e6:17:
                    cc:fe:0e:d4:cc:fa:0f:ee:6e:ad:4f:da:5d:3d:57:
                    ba:5a:9e:f7:fc:18:15:76:54:36:4f:a7:4e:9e:13:
                    74:88:89:9a:ac:25:f0:3d:3c:88:d5:37:da:b2:78:
                    40:51:7c:2a:b8:16:b9:18:75:cd:55:3d:85:12:10:
                    b8:1a:5e:98:76:0b:72:a3:c2:58:c2:54:c9:1a:4a:
                    ae:54:d3:6a:ea:40:11:46:8b:ee:9e:3b:7b:a4:ce:
                    28:bc:90:6e:e8:35:70:27:ce:e0:2f:5d:3d:90:f3:
                    5e:06:2d:4a:fc:18:50:de:d9:d9:07:48:44:5d:de:
                    86:4a:85:28:07:d2:dc:67:3b:56:03:e8:bc:3d:86:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:98:06:BC:69:1A:C7:B4:DB:E1:58:73:73:1A:B1:15:F2:57:D1:62
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2e60::-2a06:a005:2e8f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5b:e5:6b:83:02:ab:ac:a7:e2:87:a4:60:9c:f2:20:96:88:80:
         f8:fc:be:19:4f:ec:c7:5e:14:a3:9f:5c:f2:73:b1:c8:a2:01:
         8a:64:f9:eb:1d:98:0c:d1:28:cc:fa:c1:da:3f:ec:ed:50:c6:
         67:4b:f4:6d:e1:80:86:45:ed:6e:f9:8b:69:a0:b6:9e:27:a6:
         74:10:44:80:7c:70:78:53:c1:1f:e4:12:e3:72:05:fa:bc:4b:
         1a:59:c8:e8:cb:94:db:a2:db:d0:fc:06:8d:bb:97:08:c6:fd:
         55:fa:05:d1:b3:61:bb:d7:9b:24:1e:5f:a2:f3:c2:ad:c0:5a:
         04:36:79:ac:4e:c2:44:a5:ee:0b:42:9c:be:3f:4f:77:66:26:
         49:6e:ff:40:87:b8:e3:e5:86:5c:97:7f:69:04:d6:e7:54:c3:
         31:5d:0b:81:61:bf:8b:14:3c:d3:8a:3e:57:a7:97:21:0b:63:
         01:07:3e:9a:74:37:3b:2f:1e:2f:23:11:ae:a7:45:a7:f4:7e:
         d2:61:15:3a:a2:f5:8e:0c:35:c6:88:4e:ba:fb:b9:d8:98:99:
         cd:3f:19:ad:17:61:75:a0:43:f9:39:70:77:e2:8b:2c:a4:a6:
         8b:63:f4:62:f5:56:20:7b:41:08:18:d7:da:f7:28:69:bb:e4:
         05:77:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org