Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa
File:                     AS202776.roa (raw, json)
Hash identifier:          4G457lcca8NRMLC/8RD2MVzLor/jH3520I/TnyzbTDQ=
Subject key identifier:   50:37:03:17:60:6E:67:A4:65:A1:BA:4D:F0:EE:61:6A:0F:50:D3:AD
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       4E77CC18C9348847B530AD4AAC6FF2688E0890E2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa
Signing time:             Wed 14 Feb 2024 13:44:24 +0000
ROA not before:           Wed 14 Feb 2024 13:39:24 +0000
ROA not after:            Wed 12 Feb 2025 13:44:24 +0000
asID:                     202776
IP address blocks:        2a06:a005:2b00::/44 maxlen: 48
                          2a06:a005:2b90::/44 maxlen: 48
                          2a06:a005:2bf0::/44 maxlen: 48
                          2a06:a005:2d00::/44 maxlen: 48
                          2a06:a005:2d10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:77:cc:18:c9:34:88:47:b5:30:ad:4a:ac:6f:f2:68:8e:08:90:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 14 13:39:24 2024 GMT
            Not After : Feb 12 13:44:24 2025 GMT
        Subject: CN=50370317606E67A465A1BA4DF0EE616A0F50D3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:40:ba:a0:8d:13:75:5e:0e:79:0e:bf:0f:
                    51:71:a5:9f:d8:77:32:16:2b:ca:fa:7a:53:fe:13:
                    b5:48:b8:4f:1a:f9:3a:e2:27:f0:0f:b7:e6:ae:c5:
                    a3:d2:0c:f8:d9:dd:75:b8:70:92:c7:82:a4:04:08:
                    92:20:d3:6a:3b:85:eb:c8:8b:90:2b:40:d4:2d:83:
                    bf:24:4e:2a:f2:11:ec:e2:88:aa:4d:b3:65:21:73:
                    01:e4:67:c6:2a:78:ee:a8:c3:8a:7c:9c:68:b8:a0:
                    17:bb:5c:7f:8e:f5:13:ff:e8:ad:a0:f8:72:c7:eb:
                    61:3e:8a:2b:81:0a:cc:3d:0e:10:db:26:a8:aa:e7:
                    dd:51:f6:48:13:7f:3c:ae:a7:c0:b8:17:9d:36:af:
                    f3:f3:60:91:02:c5:4e:2a:c2:8c:7d:ec:22:71:51:
                    8e:bc:61:3e:5a:d2:76:fc:66:96:06:00:56:6f:0b:
                    19:3f:68:a3:95:53:26:4d:7f:6c:19:37:ea:9b:74:
                    3d:9c:3b:5e:a3:a7:8f:0c:cf:99:97:aa:b9:51:38:
                    52:69:e8:56:44:a9:49:ca:3d:0a:34:ca:2e:13:ed:
                    c4:48:61:fe:c5:2b:b4:a7:12:02:26:2c:e7:89:5d:
                    3f:a9:29:cd:c4:a1:4f:b7:23:bf:b6:02:ac:c8:3b:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:03:17:60:6E:67:A4:65:A1:BA:4D:F0:EE:61:6A:0F:50:D3:AD
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2b00::/44
                  2a06:a005:2b90::/44
                  2a06:a005:2bf0::/44
                  2a06:a005:2d00::/43

    Signature Algorithm: sha256WithRSAEncryption
         12:c7:7a:58:0d:9b:cb:34:87:69:71:39:e2:0c:3b:a3:c1:cc:
         a5:f2:ff:74:47:e0:bd:fc:9e:f7:31:75:7d:4e:01:01:20:75:
         7e:cc:be:90:17:db:75:09:47:3e:53:22:af:28:17:5f:90:f6:
         35:60:3d:d1:0e:60:a0:99:36:19:e1:fa:22:53:4b:b1:46:27:
         3c:cb:5d:62:5c:61:9c:ff:07:cc:a6:9a:c6:f9:0c:3d:f4:59:
         c8:f5:6d:6b:41:c8:17:20:f4:c1:73:5a:e3:9e:c6:a2:da:2b:
         59:e2:21:37:62:77:cb:69:8b:4d:01:7a:8a:61:8a:25:66:5c:
         2a:cf:67:30:06:af:34:79:46:40:38:a0:c9:1a:9a:14:70:a2:
         12:71:ab:4e:2c:09:46:75:bc:7c:34:23:77:92:5b:a9:66:4b:
         dc:7b:0e:e6:7b:0f:ca:12:ec:e2:00:22:14:41:b3:a4:5f:40:
         ad:50:e8:b0:c0:e6:d5:fa:02:01:ed:6c:a4:b1:2b:0e:67:b3:
         1f:a1:c9:4d:66:e4:bf:a0:cd:50:09:38:00:cb:67:b2:78:a7:
         55:a3:6c:f4:8e:e8:08:0f:3a:8b:bc:a6:37:a2:e0:98:1d:22:
         cf:87:41:d9:ad:e2:c8:f0:71:a4:e7:dc:6c:71:c0:a0:5f:cc:
         30:43:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:35 2024 by rpki-client on console-fra.rpki-client.org