Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205092.roa
File:                     AS205092.roa (raw, json)
Hash identifier:          dca2o2FmtSRrQ0e8W++aaQb/uPtCyKLtAdkhanKDiB0=
Subject key identifier:   C7:ED:F9:FD:13:12:88:05:94:29:82:6A:84:FC:2F:AD:29:97:B5:04
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       59295D568E16B063D34A9CFE5060431C7438DF68
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205092.roa
Signing time:             Tue 05 Dec 2023 02:44:12 +0000
ROA not before:           Tue 05 Dec 2023 02:39:12 +0000
ROA not after:            Tue 03 Dec 2024 02:44:12 +0000
asID:                     205092
IP address blocks:        2a06:a005:930::/44 maxlen: 48
                          2a06:a005:940::/44 maxlen: 48
                          2a06:a005:960::/44 maxlen: 48
                          2a06:a005:970::/44 maxlen: 48
                          2a06:a005:980::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:29:5d:56:8e:16:b0:63:d3:4a:9c:fe:50:60:43:1c:74:38:df:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:12 2023 GMT
            Not After : Dec  3 02:44:12 2024 GMT
        Subject: CN=C7EDF9FD131288059429826A84FC2FAD2997B504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:59:a4:4d:88:a9:91:80:96:bf:28:64:0d:
                    ed:b4:67:ba:1e:a9:05:9e:d6:0f:a4:e4:01:31:ec:
                    00:c4:38:7f:fd:73:f6:04:d1:84:e6:eb:43:60:83:
                    5d:54:56:2f:4c:28:54:2b:1e:77:af:ee:20:23:c1:
                    93:1c:93:29:f7:c6:76:67:90:87:48:28:8b:3b:30:
                    a7:0d:a7:87:7d:af:8d:63:96:78:24:b6:3e:e0:32:
                    e9:01:6b:22:2b:38:f0:a2:4b:4e:30:fe:36:80:3c:
                    67:5e:68:e4:98:4d:a8:83:2f:1e:11:cf:73:2d:ed:
                    97:47:a7:e4:df:8a:f6:e0:5d:55:5a:06:7a:14:8e:
                    66:19:b9:35:3b:15:16:70:83:1d:5c:9a:c8:b4:24:
                    56:ee:04:cd:6d:76:6d:50:e8:a2:e2:d6:c9:1a:e8:
                    84:0d:05:ac:42:3f:07:45:df:bb:91:38:65:4f:83:
                    eb:bf:ce:53:2c:62:30:26:93:cf:4e:59:11:bb:05:
                    67:e2:ad:74:18:f0:17:a6:17:fd:e2:d8:92:11:0d:
                    ac:2b:cf:eb:ab:27:17:d4:e7:1f:9e:2f:29:65:fa:
                    85:9e:e8:be:e2:ce:78:81:43:56:1d:77:f2:cf:6a:
                    db:e0:ee:33:9a:0e:b3:90:d5:21:5f:25:25:57:9e:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:ED:F9:FD:13:12:88:05:94:29:82:6A:84:FC:2F:AD:29:97:B5:04
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:930::-2a06:a005:94f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:960::-2a06:a005:98f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:ee:1d:f4:58:82:5c:f8:36:1a:59:9d:79:d0:ee:be:d3:
         65:41:79:75:21:c0:50:43:16:35:80:ca:eb:e4:d0:cb:3b:a5:
         25:24:ab:5f:50:00:45:46:e7:82:c7:65:06:b2:fd:32:1c:78:
         52:f6:8c:31:9f:93:2c:75:06:a2:76:e8:49:3e:16:41:c3:48:
         14:11:ab:cd:6f:95:34:10:87:2a:ac:47:f2:b1:d5:70:37:c4:
         6a:e0:54:f9:25:ea:4c:06:9f:e5:0b:e1:2c:19:27:b4:6e:2f:
         61:89:80:c6:75:55:b0:6f:62:7b:cb:41:e1:7a:18:56:54:db:
         44:18:3c:19:45:18:6d:63:44:2d:db:99:63:bf:c1:4f:4c:db:
         1a:51:fb:e1:45:fe:c3:b1:bb:d5:da:e7:34:57:3a:2e:8c:ab:
         9b:01:3b:ab:e5:e3:62:74:b6:be:0e:2f:6e:1e:24:81:a9:57:
         8b:02:1d:20:d6:ca:cd:d5:48:fc:e0:e1:ec:31:a9:5f:bc:6e:
         6a:d6:35:9d:36:ed:ad:10:2b:57:9f:15:ee:e4:6e:d0:64:ba:
         e8:37:0d:7f:43:a7:fe:29:93:60:76:9c:c6:ca:d0:63:88:07:
         73:24:8f:28:dc:d9:ae:3c:ce:07:f8:9c:0c:22:97:ad:01:1f:
         2f:24:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org