Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202726.roa
File:                     AS202726.roa (raw, json)
Hash identifier:          o+DhgOK/i8H0+n813yfRt+EbrQrQ7XiVk/M+g+PqvTo=
Subject key identifier:   F1:26:9F:EA:B0:81:65:E3:F0:32:79:B5:8E:31:EC:BB:8B:5B:CF:04
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       48D8E9EAAD866FC383C9D90A85B7871648BCD326
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202726.roa
Signing time:             Tue 05 Dec 2023 02:44:12 +0000
ROA not before:           Tue 05 Dec 2023 02:39:12 +0000
ROA not after:            Tue 03 Dec 2024 02:44:12 +0000
asID:                     202726
IP address blocks:        2a06:a005:20d0::/44 maxlen: 48
                          2a06:a005:20e0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d8:e9:ea:ad:86:6f:c3:83:c9:d9:0a:85:b7:87:16:48:bc:d3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:12 2023 GMT
            Not After : Dec  3 02:44:12 2024 GMT
        Subject: CN=F1269FEAB08165E3F03279B58E31ECBB8B5BCF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:4f:48:6d:6f:24:60:41:d6:f9:52:61:3f:
                    f9:60:f1:fb:e5:02:92:71:b1:0e:ea:98:39:8f:2a:
                    f9:19:55:41:11:39:37:9d:31:08:0e:17:dd:1e:b5:
                    f7:4a:93:74:78:95:cd:85:a6:0c:59:2e:67:f7:27:
                    d5:4c:3a:41:6d:06:c4:21:68:cc:00:ab:df:42:cf:
                    dc:b8:c6:be:04:3c:e3:56:53:ed:ce:4b:2d:f4:b1:
                    76:17:88:1a:c4:c6:02:71:db:2e:bb:50:cd:4e:d2:
                    f6:f2:5a:12:f8:08:c7:37:a1:31:62:98:e9:e5:13:
                    43:24:49:8f:21:f6:71:af:7a:03:b1:5a:d6:dd:b0:
                    28:e6:bd:1d:ab:88:a5:5d:b5:9d:46:8c:52:10:13:
                    91:21:1e:c5:fc:38:1d:3c:96:63:0a:88:e3:1c:1b:
                    f6:0e:ca:2c:38:24:15:49:e0:1e:e5:e9:88:81:6f:
                    4a:7d:49:b3:a3:cd:3c:06:0a:28:ae:f3:4d:39:56:
                    7e:7c:38:bb:81:74:c0:28:4b:39:61:2a:6e:f7:92:
                    4f:d5:ee:9c:c8:a9:0f:84:ae:b8:35:3f:4a:dd:60:
                    e1:47:85:ce:6d:80:f5:4f:e1:76:96:86:ac:b7:31:
                    af:c4:1b:63:ee:7e:4e:60:3c:df:59:9e:63:f3:81:
                    b1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:26:9F:EA:B0:81:65:E3:F0:32:79:B5:8E:31:EC:BB:8B:5B:CF:04
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:20d0::-2a06:a005:20ef:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9a:1c:eb:94:60:3d:1b:5a:44:8d:a9:b0:39:9f:6f:a1:37:60:
         91:3e:f9:9f:a0:a9:f1:a0:b3:3f:46:c2:5e:17:83:3c:fd:83:
         94:23:fd:b0:73:19:50:ac:aa:b0:61:21:d6:72:01:c5:d5:9b:
         26:f4:82:26:3e:39:ce:4b:f6:47:0d:64:e6:fa:71:7b:1e:71:
         32:da:cd:37:6d:82:90:2d:23:1b:0d:c8:d4:8b:5e:70:88:35:
         87:90:85:5d:8a:a2:66:ef:f0:5d:7c:33:56:05:6a:b2:d8:e7:
         7d:fc:d3:96:8f:62:d1:f4:6f:5a:e2:4d:73:dc:dd:9b:9d:43:
         a7:ce:c0:e4:34:eb:94:94:e4:e9:22:49:35:b3:28:8a:7b:d3:
         ea:9b:1b:ce:52:b0:8a:36:5b:c3:f1:16:8a:54:53:f8:50:c3:
         04:22:27:02:34:2d:24:c5:84:7b:49:46:c4:95:9d:c1:cb:88:
         1f:38:1c:77:a2:53:d8:42:ff:fb:65:f9:7a:38:52:81:8a:e3:
         bc:cd:da:6f:66:ba:b0:b0:61:fc:84:3f:70:48:1c:fe:30:89:
         52:b0:43:06:02:6b:63:bc:af:46:4d:eb:58:c0:36:a9:d1:a1:
         b9:cd:91:a8:77:ae:0b:9d:62:d0:31:38:18:5b:ab:5d:1d:0f:
         1b:f5:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org