Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206946.roa
File:                     AS206946.roa (raw, json)
Hash identifier:          FUNl/IUNX7HepMbHsrOm5fDzQEwTAtQeqFNDYFflKvs=
Subject key identifier:   70:E8:DB:51:EC:94:43:EB:48:3B:70:75:D7:A7:7F:EC:65:58:B9:9E
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       130345BD735FD9B9E0ED476AD3FA16B7B7AF0134
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206946.roa
Signing time:             Tue 05 Dec 2023 02:44:18 +0000
ROA not before:           Tue 05 Dec 2023 02:39:18 +0000
ROA not after:            Tue 03 Dec 2024 02:44:18 +0000
asID:                     206946
IP address blocks:        2a06:a005:4da::/48 maxlen: 48
                          2a06:a005:4db::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:03:45:bd:73:5f:d9:b9:e0:ed:47:6a:d3:fa:16:b7:b7:af:01:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:18 2023 GMT
            Not After : Dec  3 02:44:18 2024 GMT
        Subject: CN=70E8DB51EC9443EB483B7075D7A77FEC6558B99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:bf:01:cf:be:cc:3b:20:e7:0f:08:d2:97:
                    e3:92:f1:d4:1b:d7:85:12:16:ce:d3:bd:0d:04:12:
                    d1:dd:de:89:b0:c7:1d:3b:45:51:11:72:69:52:d1:
                    c4:38:b8:79:0c:6c:f4:0f:8c:95:5a:f7:60:83:56:
                    70:1c:5a:11:84:7e:3b:59:91:d4:62:92:bc:37:44:
                    87:ec:ba:12:2e:89:b8:f3:f8:dd:fb:f4:46:e4:fd:
                    3a:d1:aa:16:be:4f:51:46:50:3b:92:17:cc:45:d2:
                    5a:3d:f0:9d:54:5e:9a:93:1e:ee:69:7c:b1:a8:6e:
                    69:f7:c6:57:91:c1:76:5a:77:db:f1:b8:ca:9d:5e:
                    33:f7:cf:ac:3a:8f:fa:83:6a:26:56:6d:ee:74:51:
                    a4:7d:8f:b0:99:98:e5:59:36:35:0f:b5:cf:4b:03:
                    b1:32:85:27:b9:fe:e4:42:79:5c:0b:ad:b2:bb:c2:
                    56:7c:f3:80:b8:d2:48:3b:e4:bd:bc:65:46:73:20:
                    8e:fd:ee:7b:ff:1d:a5:5e:ac:49:fd:57:33:d3:99:
                    df:3e:83:ef:d3:5d:40:65:ca:27:39:c0:62:4d:f8:
                    3d:1b:f3:38:98:62:0a:c2:10:f0:09:3c:e8:1e:77:
                    6a:d7:3c:6b:68:34:3f:06:fd:b3:0a:de:af:10:07:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:DB:51:EC:94:43:EB:48:3B:70:75:D7:A7:7F:EC:65:58:B9:9E
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206946.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4da::/47

    Signature Algorithm: sha256WithRSAEncryption
         c8:00:f8:9a:e7:f7:c8:c6:41:86:b3:77:01:d6:e0:f1:79:10:
         7a:5a:8f:f1:b2:cb:7d:5c:15:21:98:8c:a3:5b:d0:d5:a8:b1:
         29:ec:00:17:0d:a0:45:43:de:71:4b:25:9d:d9:f2:41:bd:00:
         8c:64:b1:9f:3d:93:f9:58:11:7e:0b:5c:85:bb:5a:9e:f6:9a:
         8e:f3:71:7e:68:b7:c9:0f:89:52:e1:86:89:1d:f9:c7:49:03:
         91:7b:d5:30:9b:51:b0:1b:6b:93:31:f4:9a:05:7b:1d:06:c0:
         13:df:af:21:0d:71:57:be:2a:5d:64:ba:82:cc:e8:86:64:b6:
         2a:f3:21:27:dc:1b:25:d4:94:21:01:d6:9b:c1:cf:f5:9c:57:
         2d:82:24:61:c9:60:47:57:bd:9c:7d:ef:c5:87:48:6a:c9:a2:
         08:67:70:6e:31:33:3a:df:ea:95:9b:87:b1:2c:70:ae:9e:28:
         2d:8b:d7:4b:2c:9b:d3:0e:b3:44:e2:58:3d:8f:4b:0b:cb:fb:
         a1:3e:0c:3a:79:a6:ac:b2:42:4b:d7:35:09:fb:bc:e9:7a:65:
         a3:f0:5f:a2:44:3c:29:65:6e:9a:1d:c2:37:04:3b:80:21:1c:
         38:8d:cd:13:0a:04:52:d0:f0:29:09:45:ff:93:e1:fe:17:ba:
         91:61:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org