Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202939.roa
File:                     AS202939.roa (raw, json)
Hash identifier:          Vd547UhFvNIpons4Vfr0p/jwskImL5N21xLiCJcH2FY=
Subject key identifier:   4C:A8:3F:45:59:50:C1:98:F9:A3:31:DC:C0:7C:BF:72:78:4D:A9:05
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       070138FECF31613ADE338A54873B26DA71DC17C4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202939.roa
Signing time:             Tue 05 Dec 2023 02:44:19 +0000
ROA not before:           Tue 05 Dec 2023 02:39:19 +0000
ROA not after:            Tue 03 Dec 2024 02:44:19 +0000
asID:                     202939
IP address blocks:        2a06:a005:1ba0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:01:38:fe:cf:31:61:3a:de:33:8a:54:87:3b:26:da:71:dc:17:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:19 2023 GMT
            Not After : Dec  3 02:44:19 2024 GMT
        Subject: CN=4CA83F455950C198F9A331DCC07CBF72784DA905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:ab:ba:1a:15:3f:6a:08:cc:13:62:a8:43:
                    0f:d1:79:8d:92:68:09:4d:54:a2:85:cd:5e:2b:49:
                    17:bb:a2:47:ae:c7:18:0a:b8:5c:15:6a:0e:04:5c:
                    9e:96:bf:90:0d:2a:a3:7f:fd:10:fe:51:7f:7e:d3:
                    13:e0:c8:76:1f:90:30:63:90:56:bf:cf:9e:c4:91:
                    f9:a8:ab:f8:2a:0e:a8:16:52:4f:67:25:31:b4:f7:
                    f7:3f:7e:29:e3:d4:a5:14:08:96:58:ff:a3:03:79:
                    9b:65:87:4d:51:c4:7f:17:c7:22:85:8e:40:46:d5:
                    00:c0:38:51:e3:b0:73:ce:8b:97:a8:a0:d8:f1:a3:
                    06:06:ee:6a:37:72:55:20:c6:df:0b:57:71:77:be:
                    05:53:5f:c4:a8:59:88:b7:72:b2:7e:6b:fc:07:e6:
                    62:ee:b7:ab:b7:c0:1a:79:3b:e9:c1:45:7d:53:c2:
                    e8:dc:9e:28:9c:fc:ff:c3:0b:c7:91:f8:f8:71:de:
                    98:2e:73:33:99:20:11:96:35:96:01:ca:d6:4d:50:
                    17:2c:b9:d0:a4:ed:24:8a:d6:c0:81:39:67:fd:72:
                    c0:f6:d5:eb:91:8c:7d:cc:67:0d:07:5c:94:54:dd:
                    a6:2c:67:ed:14:9a:32:07:64:41:cd:2a:66:0f:07:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A8:3F:45:59:50:C1:98:F9:A3:31:DC:C0:7C:BF:72:78:4D:A9:05
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1ba0::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:c9:5f:27:64:8f:c2:5e:12:c7:1b:33:26:c4:f4:0e:07:
         98:8b:82:2c:66:5c:51:d8:d9:c1:1a:b0:79:c1:5f:a9:52:54:
         f4:b6:91:d9:75:06:e2:f2:d6:b1:26:da:b5:d1:6c:77:34:c7:
         bd:c8:b6:c4:87:2f:b9:65:ce:28:5c:e2:76:ad:88:54:bc:db:
         a1:46:50:57:a8:e9:e7:57:5e:83:60:49:a5:fe:9c:db:29:b2:
         53:8e:db:a2:18:aa:35:8c:4c:b5:de:86:d6:e0:d4:f4:ab:41:
         28:2f:eb:91:07:7e:47:df:38:ad:c4:f0:91:3c:65:60:b7:e5:
         18:f0:fb:f0:59:8c:15:f9:a1:72:47:9a:e5:d3:00:5e:5d:ee:
         43:1a:60:3d:a3:d7:89:1c:9c:38:24:ea:41:56:2b:ad:37:ad:
         84:61:fd:ce:19:f7:83:b1:92:cc:76:88:72:a2:b3:46:43:4b:
         d8:27:1f:4f:3a:8e:df:d3:44:be:36:ae:ff:8e:ca:57:e2:bb:
         48:1a:fe:73:9d:d1:68:d7:51:01:19:46:d0:f3:e1:41:79:92:
         17:40:15:51:08:7b:90:73:ca:14:9e:41:c3:dd:84:34:a0:4f:
         6e:ef:cb:5c:5c:55:e1:0a:5b:6f:b7:d3:e5:69:57:55:e8:80:
         bd:cb:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----