Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202732.roa
File:                     AS202732.roa (raw, json)
Hash identifier:          ma/Ez7fSvkrqQERph8UsMH+AFT1KuX9iz7VkN7VEvMo=
Subject key identifier:   6D:FC:6E:2E:87:1D:C2:34:E8:6E:C4:92:E2:BF:2D:00:96:E6:47:AE
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3EF01810B13AAC82F8C686C83A4613E15D07F90E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202732.roa
Signing time:             Tue 12 Dec 2023 23:44:21 +0000
ROA not before:           Tue 12 Dec 2023 23:39:21 +0000
ROA not after:            Tue 10 Dec 2024 23:44:21 +0000
asID:                     202732
IP address blocks:        2a06:a005:b63::/48 maxlen: 48
                          2a06:a005:1163::/48 maxlen: 48
                          2a06:a005:1501::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:18:10:b1:3a:ac:82:f8:c6:86:c8:3a:46:13:e1:5d:07:f9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec 12 23:39:21 2023 GMT
            Not After : Dec 10 23:44:21 2024 GMT
        Subject: CN=6DFC6E2E871DC234E86EC492E2BF2D0096E647AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:e3:d1:44:be:f8:cc:df:06:c2:f9:45:a0:
                    30:86:dc:10:78:b3:2a:c3:ad:e5:45:60:95:ab:4a:
                    8a:31:36:fd:09:35:2e:df:5d:49:b7:e3:ff:05:12:
                    c3:e0:7f:1b:93:d7:50:c0:cf:63:ef:04:86:2e:b9:
                    c4:f7:cc:16:b6:e8:40:16:35:d3:33:9e:19:8c:55:
                    7a:f7:ca:f8:15:61:92:e2:53:ae:d0:2d:ef:f3:e5:
                    13:11:d9:5a:0b:70:bf:d6:af:cb:64:75:09:e7:86:
                    61:15:85:0b:da:fe:bf:e6:c7:f5:63:e9:84:9d:e5:
                    6d:e7:9d:50:3d:e0:a4:31:68:f9:cc:c9:04:d9:c3:
                    b5:d9:52:35:3a:80:2a:18:f6:f0:13:19:6b:7d:8a:
                    9e:13:a2:41:86:5b:58:7e:82:43:53:35:dc:81:2a:
                    51:29:d6:84:eb:64:3d:72:1c:89:87:9d:fa:14:50:
                    d9:e2:23:cb:08:92:49:35:9d:50:62:11:43:7d:bc:
                    7a:ae:77:6b:e0:21:fb:52:c7:d1:6a:87:83:7f:08:
                    0d:26:c0:61:85:d7:de:2b:9d:65:6e:73:d0:a9:84:
                    64:4f:30:b6:e2:2c:e2:d0:7e:09:f8:33:29:31:cb:
                    f4:11:6d:4a:e9:13:df:60:9c:98:1e:cb:4f:b2:c4:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:6E:2E:87:1D:C2:34:E8:6E:C4:92:E2:BF:2D:00:96:E6:47:AE
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b63::/48
                  2a06:a005:1163::/48
                  2a06:a005:1501::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:72:68:a9:87:ed:95:cf:5c:b6:e5:c4:0e:aa:1d:31:88:0a:
         ac:22:3f:8c:1a:50:00:31:c5:54:48:2b:39:c9:af:76:7f:7b:
         05:af:af:8a:86:61:06:3a:47:14:d6:1f:77:71:c0:cd:84:2b:
         9e:db:68:dd:ad:86:bc:e9:db:e7:a6:ec:2c:5d:6a:c6:0c:fd:
         79:a7:22:16:9e:1b:dd:e9:6d:59:0e:b1:9e:5c:f3:65:2f:cc:
         15:dc:65:7e:e2:3e:33:76:60:fe:67:e3:af:ac:57:09:2e:ba:
         5b:c3:da:b8:62:c1:99:4a:d9:c5:54:e3:4f:a2:76:c3:06:92:
         2c:85:ad:fc:7a:e2:ef:d8:a5:3b:39:12:c5:11:d5:68:c7:60:
         d8:48:9b:63:75:67:79:d9:63:4b:1c:16:f7:71:5c:ba:c4:07:
         3c:98:76:dd:36:40:2f:81:21:7e:7a:e5:f4:82:93:3c:22:cf:
         97:ec:65:dd:56:31:cd:d6:3e:9b:41:d4:b1:ae:7d:e5:76:af:
         d6:33:9d:f0:70:47:56:40:85:5a:5a:f0:74:d9:cb:10:52:7e:
         12:a2:65:31:6b:49:2b:42:29:c3:74:47:b1:d0:56:2f:67:4f:
         9f:5a:92:4b:d1:8a:db:0f:d6:47:69:56:5f:f2:32:cf:47:48:
         ad:cd:c6:7d
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUPvAYELE6rIL4xobIOkYT4V0H+Q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMTIyMzM5MjFaFw0yNDEyMTAyMzQ0MjFaMDMxMTAvBgNV
BAMTKDZERkM2RTJFODcxREMyMzRFODZFQzQ5MkUyQkYyRDAwOTZFNjQ3QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwOPRRL74zN8GwvlFoDCG3BB4
syrDreVFYJWrSooxNv0JNS7fXUm34/8FEsPgfxuT11DAz2PvBIYuucT3zBa26EAW
NdMznhmMVXr3yvgVYZLiU67QLe/z5RMR2VoLcL/Wr8tkdQnnhmEVhQva/r/mx/Vj
6YSd5W3nnVA94KQxaPnMyQTZw7XZUjU6gCoY9vATGWt9ip4TokGGW1h+gkNTNdyB
KlEp1oTrZD1yHImHnfoUUNniI8sIkkk1nVBiEUN9vHqud2vgIftSx9Fqh4N/CA0m
wGGF194rnWVuc9CphGRPMLbiLOLQfgn4Mykxy/QRbUrpE99gnJgey0+yxPKXAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUbfxuLocdwjTobsSS4r8tAJbmR64wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAyNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzAhBAIAAjAbAwcAKgagBQtjAwcAKgagBRFjAwcAKgagBRUBMA0GCSqG
SIb3DQEBCwUAA4IBAQAgcmiph+2Vz1y25cQOqh0xiAqsIj+MGlAAMcVUSCs5ya92
f3sFr6+KhmEGOkcU1h93ccDNhCue22jdrYa86dvnpuwsXWrGDP15pyIWnhvd6W1Z
DrGeXPNlL8wV3GV+4j4zdmD+Z+OvrFcJLrpbw9q4YsGZStnFVONPonbDBpIsha38
euLv2KU7ORLFEdVox2DYSJtjdWd52WNLHBb3cVy6xAc8mHbdNkAvgSF+euX0gpM8
Is+X7GXdVjHN1j6bQdSxrn3ldq/WM53wcEdWQIVaWvB02csQUn4SomUxa0krQinD
dEex0FYvZ0+fWpJL0YrbD9ZHaVZf8jLPR0itzcZ9
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org