Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205980.roa
File:                     AS205980.roa (raw, json)
Hash identifier:          XLA6mT3noVkgXIvzYQqBFD/zCd1VoPcIJaigLJzp+p8=
Subject key identifier:   49:BB:35:5F:85:1A:E9:48:FF:7C:D7:AC:C0:9D:A2:3A:96:B3:C7:E3
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       7053E1562BF15A41AE48C633D73CD66258D6A979
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205980.roa
Signing time:             Thu 15 Feb 2024 20:44:24 +0000
ROA not before:           Thu 15 Feb 2024 20:39:24 +0000
ROA not after:            Thu 13 Feb 2025 20:44:24 +0000
asID:                     205980
IP address blocks:        2a06:a005:fa0::/44 maxlen: 48
                          2a06:a005:1360::/44 maxlen: 48
                          2a06:a005:1370::/44 maxlen: 48
                          2a06:a005:2ac0::/44 maxlen: 48
                          2a06:a005:2f90::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:53:e1:56:2b:f1:5a:41:ae:48:c6:33:d7:3c:d6:62:58:d6:a9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 15 20:39:24 2024 GMT
            Not After : Feb 13 20:44:24 2025 GMT
        Subject: CN=49BB355F851AE948FF7CD7ACC09DA23A96B3C7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:99:3d:71:03:1c:55:f8:aa:85:01:49:ec:
                    56:39:32:56:64:ef:4b:35:b7:fd:1b:c5:b4:5f:7e:
                    bf:bf:63:86:d2:7b:a5:1f:d7:47:96:5b:17:5c:d4:
                    83:cd:41:74:76:f8:b4:83:ae:c0:f1:16:49:f5:79:
                    d0:10:8a:c6:10:42:8c:c3:49:8e:6f:9c:31:32:74:
                    9b:1a:30:46:4d:a5:f7:e4:ff:30:2f:c5:df:9e:be:
                    d7:c1:27:6a:ca:b2:74:16:44:11:bc:c9:17:ff:ef:
                    a7:1e:74:e2:54:ae:06:7e:a0:59:ff:4a:8e:df:4e:
                    1b:11:b5:50:72:34:ab:54:41:2a:e1:10:f7:f6:af:
                    0f:c5:19:24:2b:83:1d:c3:ce:51:13:9c:3f:5b:64:
                    17:0e:a4:13:1a:d7:09:a8:31:a7:10:0f:1b:21:7f:
                    c0:bc:c4:0c:20:21:4d:2c:11:96:64:29:4e:0c:74:
                    fb:9f:28:cf:93:22:9c:43:ef:87:d1:7f:bd:c7:fe:
                    fe:eb:98:81:f7:0f:4f:4e:bd:d7:ba:0a:df:2e:3c:
                    ba:f1:20:8a:f5:95:17:91:2b:34:28:f5:6c:c5:51:
                    28:2b:46:b2:69:01:3c:f9:dc:0e:d3:fa:f3:2f:be:
                    90:2d:34:9a:49:78:35:88:c3:20:a0:55:d1:59:05:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BB:35:5F:85:1A:E9:48:FF:7C:D7:AC:C0:9D:A2:3A:96:B3:C7:E3
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205980.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:fa0::/44
                  2a06:a005:1360::/43
                  2a06:a005:2ac0::/44
                  2a06:a005:2f90::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:9a:bc:9d:fb:63:f1:1a:f1:a9:72:47:fe:73:81:94:62:d9:
         bd:09:a2:d1:1d:f8:f4:3f:1c:a2:a5:20:9e:65:f8:9b:4f:c8:
         21:b0:c4:0c:78:ed:f0:1c:98:6a:1c:1d:cf:db:8d:3c:03:a7:
         38:ef:0f:00:38:1b:43:0e:9f:99:76:68:1f:d2:5d:c9:4b:44:
         ab:db:f8:cb:d1:52:55:ec:fa:42:35:5c:9b:9b:53:fb:1c:be:
         c1:9f:89:cb:2b:1c:55:18:90:64:b6:27:43:c2:3f:2e:8a:3e:
         87:c3:22:2a:1b:4e:ee:5b:0b:99:cb:cd:00:4c:46:e4:a6:4c:
         f3:8e:2b:f5:47:b4:a7:1d:5d:13:79:6e:5d:f9:47:e8:ed:98:
         0e:34:6e:84:0c:46:24:9a:fc:7e:45:74:e6:21:cb:75:7b:a7:
         9d:e3:06:6b:95:87:ec:c7:a4:ef:58:27:3c:40:25:07:af:6b:
         ca:08:fa:13:af:7d:d2:c7:0f:06:e2:9e:0a:1f:7e:26:09:19:
         e9:b3:e6:bb:2d:24:aa:e0:97:4a:4a:79:2a:03:e4:ba:b1:d6:
         b2:60:5f:c0:ee:ff:9f:ee:1d:e2:a8:05:e7:af:a2:e9:e5:c1:
         81:55:b8:78:9c:63:a8:c2:a5:2c:dc:e8:fc:47:5c:f3:23:35:
         2c:06:e9:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUcFPhVivxWkGuSMYz1zzWYljWqXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMTUyMDM5MjRaFw0yNTAyMTMyMDQ0MjRaMDMxMTAvBgNV
BAMTKDQ5QkIzNTVGODUxQUU5NDhGRjdDRDdBQ0MwOURBMjNBOTZCM0M3RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO5pk9cQMcVfiqhQFJ7FY5MlZk
70s1t/0bxbRffr+/Y4bSe6Uf10eWWxdc1IPNQXR2+LSDrsDxFkn1edAQisYQQozD
SY5vnDEydJsaMEZNpffk/zAvxd+evtfBJ2rKsnQWRBG8yRf/76cedOJUrgZ+oFn/
So7fThsRtVByNKtUQSrhEPf2rw/FGSQrgx3DzlETnD9bZBcOpBMa1wmoMacQDxsh
f8C8xAwgIU0sEZZkKU4MdPufKM+TIpxD74fRf73H/v7rmIH3D09Ovde6Ct8uPLrx
IIr1lReRKzQo9WzFUSgrRrJpATz53A7T+vMvvpAtNJpJeDWIwyCgVdFZBdzvAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUSbs1X4Ua6Uj/fNeswJ2iOpazx+MwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA1OTgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEH
AQH/BC4wLDAqBAIAAjAkAwcEKgagBQ+gAwcFKgagBRNgAwcEKgagBSrAAwcEKgag
BS+QMA0GCSqGSIb3DQEBCwUAA4IBAQA5mryd+2PxGvGpckf+c4GUYtm9CaLRHfj0
PxyipSCeZfibT8ghsMQMeO3wHJhqHB3P2408A6c47w8AOBtDDp+Zdmgf0l3JS0Sr
2/jL0VJV7PpCNVybm1P7HL7Bn4nLKxxVGJBktidDwj8uij6HwyIqG07uWwuZy80A
TEbkpkzzjiv1R7SnHV0TeW5d+Ufo7ZgONG6EDEYkmvx+RXTmIct1e6ed4wZrlYfs
x6TvWCc8QCUHr2vKCPoTr33Sxw8G4p4KH34mCRnps+a7LSSq4JdKSnkqA+S6sday
YF/A7v+f7h3iqAXnr6Lp5cGBVbh4nGOowqUs3Oj8R1zzIzUsBun3
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org