Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205848.roa
File:                     AS205848.roa (raw, json)
Hash identifier:          ZNS5zSCTX2GNtm1qK0QhO+Bn+0Q0yF85fZ/3s8JSEAA=
Subject key identifier:   6D:6F:18:80:30:B0:51:F9:E7:6E:40:54:B7:F1:83:89:61:BF:8A:AD
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2F2CBF465E1E200F48B37BEFEFEC3A8D272DD091
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205848.roa
Signing time:             Sun 18 Feb 2024 14:44:24 +0000
ROA not before:           Sun 18 Feb 2024 14:39:24 +0000
ROA not after:            Sun 16 Feb 2025 14:44:24 +0000
asID:                     205848
IP address blocks:        2a06:a005:3000::/44 maxlen: 48
                          2a06:a005:3020::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2c:bf:46:5e:1e:20:0f:48:b3:7b:ef:ef:ec:3a:8d:27:2d:d0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 18 14:39:24 2024 GMT
            Not After : Feb 16 14:44:24 2025 GMT
        Subject: CN=6D6F188030B051F9E76E4054B7F1838961BF8AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:d1:fa:e6:15:e7:b6:26:a1:aa:4d:55:af:
                    d7:61:cb:7c:3c:a7:77:3c:84:5b:c1:3f:6c:c6:9e:
                    99:65:42:fd:13:3e:ae:30:57:55:8e:13:92:f0:76:
                    18:90:e8:37:ac:d9:07:d0:13:88:2e:95:7e:c6:4e:
                    b6:a1:86:2c:72:89:47:8a:d9:3c:e6:cc:ae:31:3d:
                    4d:50:3d:d3:aa:01:ee:87:a0:60:2b:c2:25:c9:70:
                    ae:f9:f6:37:7a:04:2d:ef:37:e1:7a:59:7f:19:4f:
                    da:50:9b:b5:35:8b:5d:18:1d:59:d3:4a:3b:11:ee:
                    87:96:e2:66:47:41:9c:93:8b:2b:c6:26:6e:3c:8d:
                    6b:e8:f9:77:80:2e:7d:9a:b2:b5:11:66:05:f9:63:
                    1a:46:76:94:08:97:4c:c7:09:9a:58:2d:46:6e:71:
                    8b:c2:b3:c8:6c:cb:34:27:84:bb:73:6d:4a:c9:ef:
                    c1:62:ab:76:68:0a:24:0b:c7:d8:8b:1f:cb:44:a4:
                    5d:da:95:3e:45:bb:35:08:6e:b9:13:d3:77:9c:70:
                    d7:e2:df:eb:fb:60:be:99:b7:5a:ab:fe:51:a1:5c:
                    cb:8c:c5:89:2d:32:07:63:ec:26:32:3f:79:f9:77:
                    2e:53:63:1a:40:ec:e9:e6:57:f9:07:45:ca:a9:aa:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6F:18:80:30:B0:51:F9:E7:6E:40:54:B7:F1:83:89:61:BF:8A:AD
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:3000::/44
                  2a06:a005:3020::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:95:cf:8e:53:e2:8c:48:ee:a1:a3:0c:a6:d9:b8:9e:f5:3c:
         12:0b:5a:e7:6c:b3:56:91:9f:3d:ea:99:8c:e8:94:e7:c4:d3:
         06:0d:74:ce:32:87:78:4f:87:d3:a2:9f:e1:51:f1:fc:d8:3a:
         d4:4e:c1:d1:5b:0a:ba:84:8c:c9:c5:1d:d0:16:17:71:49:29:
         32:4c:7b:c7:75:00:93:cb:d9:50:f7:4b:af:59:bb:34:4f:d3:
         74:3e:c9:08:7d:d1:f4:d6:ef:c3:d3:71:e9:ff:78:d9:9b:23:
         14:fd:b7:52:06:d7:72:7a:2c:4a:23:d5:e3:da:9a:fe:5b:24:
         97:60:b6:f8:dd:46:fb:03:75:8e:9f:aa:8b:44:93:6c:40:ae:
         c2:54:9c:b1:a1:1a:fb:e8:74:6d:50:99:03:1b:01:e1:28:b7:
         4e:30:52:0e:04:bb:b0:d7:5b:f5:d6:ed:d3:1d:9a:4c:5f:26:
         d7:b3:01:a8:43:42:98:59:cc:67:6a:6d:a6:7d:43:68:6e:ff:
         dc:71:d1:7e:ca:ec:69:a8:76:0f:d6:30:4d:85:6d:3d:95:bc:
         e6:f0:36:fb:b3:0e:06:93:3c:0b:42:70:36:51:33:ef:0c:52:
         40:2e:c0:0d:9d:6e:e7:7d:0d:21:eb:b1:7a:e6:05:96:78:84:
         7a:45:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org