Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203283.roa
File:                     AS203283.roa (raw, json)
Hash identifier:          HwNKBOs5/pUcSwsROCpu8B/9z0ez8CBhFVC1fzWjOf8=
Subject key identifier:   30:5B:3D:61:B2:BA:DC:FE:4B:84:BB:02:CE:AA:4B:AA:F9:14:08:C9
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       51E09D621632EEF3BAB32E9D1BCADC2BDBC902CB
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203283.roa
Signing time:             Tue 05 Nov 2024 03:40:10 +0000
ROA not before:           Tue 05 Nov 2024 03:35:10 +0000
ROA not after:            Tue 04 Nov 2025 03:40:10 +0000
asID:                     203283
IP address blocks:        2a06:a005:1810::/44 maxlen: 48
                          2a06:a005:1820::/44 maxlen: 48
                          2a06:a005:1830::/44 maxlen: 48
                          2a06:a005:1840::/44 maxlen: 48
                          2a06:a005:1850::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e0:9d:62:16:32:ee:f3:ba:b3:2e:9d:1b:ca:dc:2b:db:c9:02:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:10 2024 GMT
            Not After : Nov  4 03:40:10 2025 GMT
        Subject: CN=305B3D61B2BADCFE4B84BB02CEAA4BAAF91408C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:e2:51:ae:99:63:e7:cf:51:35:1d:ef:34:
                    7f:22:fc:13:a8:44:4e:c2:5e:dc:92:a8:70:ae:99:
                    6e:dc:d8:0b:72:11:c7:7f:9f:47:30:e6:37:aa:27:
                    05:ac:7c:cd:c1:3b:87:c2:95:b5:6d:93:42:58:ef:
                    67:d7:67:bb:c7:d0:84:32:6e:ee:7e:c3:86:ae:f4:
                    6a:e9:ce:62:ec:28:ad:1a:de:10:56:3a:82:05:1a:
                    e3:3b:5b:66:13:27:e4:ff:c4:92:24:cc:47:94:24:
                    01:50:ac:f9:18:77:e7:26:13:47:45:4b:ca:e5:9b:
                    d9:40:7d:e1:12:5a:1f:7f:0f:1f:56:c3:ee:32:a5:
                    1e:3e:36:ee:d6:7f:43:39:cd:87:3a:3c:0b:b7:e8:
                    8d:23:f8:07:d4:6d:9c:6c:c8:6f:54:63:d1:28:47:
                    ad:57:2d:1e:66:67:a8:c0:69:63:db:da:18:0c:3a:
                    fc:c5:60:0c:67:00:d0:c1:0c:18:49:cc:8b:53:cb:
                    23:fa:45:7a:07:37:c7:48:2c:63:68:ad:0b:2f:2b:
                    c0:c1:9a:10:25:80:de:25:0a:4e:24:f3:47:64:c2:
                    6b:db:b4:bb:92:1e:3c:30:4a:f0:04:3a:fd:70:52:
                    eb:91:e3:9b:fc:aa:47:a7:e3:12:a6:ee:c6:e3:1f:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5B:3D:61:B2:BA:DC:FE:4B:84:BB:02:CE:AA:4B:AA:F9:14:08:C9
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203283.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1810::-2a06:a005:185f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         19:bd:54:3f:f8:5e:ab:03:cc:70:44:b3:d5:3d:a3:cb:31:4e:
         ac:4d:da:c4:fe:ce:1d:b1:0f:49:3f:03:70:78:f8:2f:25:0f:
         b6:70:2d:9e:24:57:91:a1:c9:47:7b:fc:78:1c:55:cf:21:fc:
         04:9e:86:50:b3:71:8b:c1:6c:7f:99:2b:01:7e:3a:8a:bf:43:
         6a:91:3b:76:73:3e:a6:fd:69:7a:92:12:64:98:0f:f2:af:8f:
         8a:ea:31:37:0a:19:fb:2d:95:24:b1:49:4b:a0:6e:02:14:27:
         a7:7e:b9:95:57:d7:88:26:ef:50:46:fc:ce:a0:88:37:33:67:
         78:16:09:8f:7a:28:73:db:13:7e:6c:38:11:2f:28:ae:d3:18:
         e9:f1:33:6c:47:24:a5:e3:2b:83:86:b4:2f:3e:0c:ac:0c:07:
         ec:94:df:48:44:60:4c:c6:7f:17:27:b9:3c:2c:d2:bc:c9:c0:
         88:49:76:51:4b:77:ab:e0:75:cc:20:9b:9f:de:8c:f0:ab:55:
         57:69:14:b2:37:ff:81:3f:e6:b7:5a:09:d7:de:e1:e1:df:c6:
         1d:0a:ca:e9:e0:13:09:28:d6:6b:98:bf:1d:b8:05:2a:3c:fb:
         a1:24:ea:17:41:f5:17:c7:fa:f0:ed:56:74:91:68:c2:8c:f4:
         d1:d0:a9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----