Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205245.roa
File:                     AS205245.roa (raw, json)
Hash identifier:          QaT2iTIuWou7s7PiEQNVys9ZkzZd9RZycjlagsQnHWI=
Subject key identifier:   39:E5:8E:FE:EB:E4:F8:53:B2:4F:5C:57:A9:E2:58:57:35:CA:FB:47
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5A374B35CA9EF0E97AF043F56EA0340F2E026F53
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205245.roa
Signing time:             Tue 05 Dec 2023 02:44:16 +0000
ROA not before:           Tue 05 Dec 2023 02:39:16 +0000
ROA not after:            Tue 03 Dec 2024 02:44:16 +0000
asID:                     205245
IP address blocks:        2a06:a005:7a0::/44 maxlen: 48
                          2a06:a005:7b0::/44 maxlen: 48
                          2a06:a005:820::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:37:4b:35:ca:9e:f0:e9:7a:f0:43:f5:6e:a0:34:0f:2e:02:6f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:16 2023 GMT
            Not After : Dec  3 02:44:16 2024 GMT
        Subject: CN=39E58EFEEBE4F853B24F5C57A9E2585735CAFB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:95:1d:b1:61:dc:66:54:ae:28:7e:8d:c9:
                    8d:4e:ec:39:6b:23:7c:b9:6b:50:0b:c4:c2:1f:7f:
                    e2:46:25:e6:c2:08:94:5d:96:2b:61:ce:11:51:b3:
                    27:b5:b1:c8:d1:92:90:15:f5:65:2e:1f:ce:87:9b:
                    08:d9:6e:96:34:87:7f:92:e1:a6:96:f4:4f:2b:bb:
                    07:52:e9:7f:95:31:d0:f3:03:ed:e4:a0:e3:72:31:
                    f0:c0:bb:f0:ef:76:74:d0:56:65:e4:a0:70:76:25:
                    0f:fa:6f:54:fc:92:08:79:2f:4d:3b:e1:65:c7:b3:
                    26:a7:e3:6c:4e:fd:21:9d:b4:c7:4e:1a:54:58:0d:
                    94:f7:1b:42:ff:ca:2d:27:1c:84:0c:60:d2:97:ce:
                    18:77:58:5d:51:77:6a:4c:1a:27:43:6f:84:9b:59:
                    50:29:f2:94:27:5d:81:16:bc:3c:a4:30:01:25:58:
                    08:55:ee:d6:68:8a:b7:a3:8a:0c:db:41:7b:32:bb:
                    fa:5f:8f:96:be:91:88:b1:a5:e3:a4:81:d6:44:93:
                    00:1d:1b:fa:9a:5f:d9:f5:3d:54:ea:fa:f6:f4:47:
                    b7:28:ee:42:16:6d:30:76:21:01:b8:d1:7b:39:80:
                    b7:7f:c4:3d:c4:dd:4e:20:d0:f4:c0:d0:43:12:c9:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:8E:FE:EB:E4:F8:53:B2:4F:5C:57:A9:E2:58:57:35:CA:FB:47
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205245.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:7a0::/43
                  2a06:a005:820::/44

    Signature Algorithm: sha256WithRSAEncryption
         c4:66:65:45:88:84:a7:cb:87:c9:aa:29:42:80:56:e0:74:da:
         06:18:51:85:a2:34:71:e7:a5:7f:0d:5b:0e:8d:69:6b:bf:7f:
         35:39:de:2c:9d:65:42:e0:2c:a2:2b:46:fa:ec:bf:0c:e6:a5:
         4a:26:08:14:b4:c9:81:7c:ec:24:2b:92:35:bd:b5:74:d5:df:
         a1:80:f8:d6:68:a6:d7:25:42:87:85:b2:63:54:15:a5:e4:eb:
         b0:d5:b9:93:f5:da:b4:06:2c:b3:93:03:d0:97:75:82:6b:cd:
         7c:33:dd:c1:04:0c:fe:93:f7:61:09:0d:7b:fd:d4:f4:10:cd:
         58:ce:04:f6:4e:33:52:1e:a4:2c:76:f6:54:ba:d6:fa:7c:f7:
         32:9c:0e:41:f1:2c:70:e5:5f:af:b4:4d:08:54:48:80:c5:57:
         06:6c:52:74:64:93:74:c4:5f:5b:48:b8:da:68:cc:4c:17:63:
         43:7d:15:e1:af:41:b8:a9:66:d4:7e:49:f1:bd:de:79:9b:5f:
         89:37:cc:24:2b:02:e4:90:e0:f4:10:e5:21:a8:91:17:9e:8e:
         f0:9c:bd:e5:67:ea:24:d9:c7:e8:04:8f:3d:9b:75:ea:d8:07:
         a1:77:2c:c3:54:5d:85:b3:40:97:8c:f1:73:fb:d0:f4:16:bd:
         a9:7c:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org