Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206016.roa
File:                     AS206016.roa (raw, json)
Hash identifier:          YY2JP+H7H6OoVVIEr6G9nGNaNdtW1jH0PtwxOcLou7Y=
Subject key identifier:   84:5F:41:9C:3E:56:98:81:9E:AE:F6:C4:6A:D2:27:CE:43:D9:51:2D
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6827637074BB9D0C0AE69E5DEA4A4BCAA9BC7B06
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206016.roa
Signing time:             Tue 05 Dec 2023 02:44:15 +0000
ROA not before:           Tue 05 Dec 2023 02:39:15 +0000
ROA not after:            Tue 03 Dec 2024 02:44:15 +0000
asID:                     206016
IP address blocks:        2a06:a005:990::/44 maxlen: 48
                          2a06:a005:db0::/44 maxlen: 48
                          2a06:a005:1380::/44 maxlen: 48
                          2a06:a005:1390::/44 maxlen: 48
                          2a06:a005:27d0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:27:63:70:74:bb:9d:0c:0a:e6:9e:5d:ea:4a:4b:ca:a9:bc:7b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:15 2023 GMT
            Not After : Dec  3 02:44:15 2024 GMT
        Subject: CN=845F419C3E5698819EAEF6C46AD227CE43D9512D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:84:8f:6d:70:89:54:c9:67:f1:2a:15:38:54:
                    54:26:20:4f:4a:41:2f:c4:94:e3:6a:d8:a0:75:34:
                    d7:ba:b3:b3:8d:72:c9:2a:9c:63:53:80:4a:c8:99:
                    9e:51:b8:b5:10:89:7d:ff:9d:7a:7d:69:bc:04:3d:
                    51:38:89:56:3f:ae:07:d7:cb:ba:aa:cd:4c:d8:e2:
                    c4:dd:b8:81:f4:b5:11:73:c9:50:5f:46:45:b4:ee:
                    08:be:6a:cf:a9:ad:f8:5f:f6:5a:24:05:d0:03:a6:
                    a2:c4:d1:8c:d3:0f:87:94:2c:d0:40:49:0e:b7:e8:
                    02:d1:d5:8d:8c:b3:49:86:8e:17:90:ad:6d:de:60:
                    f3:ba:97:20:64:2d:20:43:f8:d8:e4:c1:b0:61:8b:
                    f7:9e:24:dd:ab:f5:bf:b9:70:ca:90:92:31:70:cf:
                    6b:94:98:49:5d:b1:19:dd:7b:e7:1a:b3:62:f3:a4:
                    8e:95:b6:72:99:54:15:6b:11:7f:7f:f4:6f:76:6f:
                    43:89:29:5c:1b:3b:3d:98:ce:60:bc:4f:46:05:87:
                    ae:b0:f6:43:03:b5:8f:42:49:f3:ef:b7:ac:36:80:
                    52:4a:7c:32:8f:0c:26:9b:c5:f6:ac:b2:9d:54:a6:
                    af:8a:98:05:da:72:2b:0a:7b:69:7c:0c:04:db:79:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5F:41:9C:3E:56:98:81:9E:AE:F6:C4:6A:D2:27:CE:43:D9:51:2D
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:990::/44
                  2a06:a005:db0::/44
                  2a06:a005:1380::/43
                  2a06:a005:27d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         cc:a8:4a:f3:5d:51:61:61:da:f3:f7:00:7f:42:14:43:50:dc:
         ad:ab:11:1f:5f:c2:7e:80:58:84:5d:25:b3:9f:42:5d:32:b2:
         c8:37:b2:39:23:44:63:50:2c:23:9a:92:da:e8:7b:e2:24:df:
         ec:39:0b:17:41:e3:4f:90:0a:ff:42:82:91:c2:a1:8b:4d:29:
         94:95:8c:da:c5:c3:d3:84:37:60:f8:2c:90:18:19:e4:71:c4:
         7e:db:0c:99:82:45:5e:20:4a:d6:05:72:bd:ab:10:b0:84:4c:
         4e:c8:53:b3:ec:72:d1:fb:12:cf:61:76:62:b7:75:96:1e:5c:
         86:ee:33:25:da:c5:21:a9:08:47:73:82:72:4f:cc:56:44:d2:
         ff:a2:77:56:81:5f:04:f6:49:68:f2:bc:92:84:59:3f:53:25:
         c5:7e:27:84:3b:74:47:e5:21:23:b3:87:02:49:b9:38:fe:37:
         33:14:58:b8:e0:1c:90:b1:88:ee:f7:90:a7:c0:85:2d:53:24:
         da:61:e0:fc:25:9f:5a:28:dd:be:b0:d8:50:b6:e4:10:94:a1:
         1b:71:1c:3d:96:af:90:60:05:04:ae:72:fd:27:a3:06:0a:57:
         7f:34:a5:df:88:1d:e6:e4:95:ec:00:53:f6:df:47:ea:d1:b5:
         ed:34:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org