Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
File:                     AS207466.roa (raw, json)
Hash identifier:          y7gdb9xaGuD2jWCO/busaY21gb2CYfq32o4+GvdcTU0=
Subject key identifier:   8C:72:4B:CC:8F:0E:81:73:B5:1B:B1:18:EE:7C:88:44:C5:70:A3:21
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       4762C0BA1A35A67CE61BDB0A89A3CE486EC8A62C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
Signing time:             Sat 04 Jan 2025 10:40:12 +0000
ROA not before:           Sat 04 Jan 2025 10:35:12 +0000
ROA not after:            Sat 03 Jan 2026 10:40:12 +0000
asID:                     207466
IP address blocks:        2a06:a001:a080::/44 maxlen: 48
                          2a06:a005:15d2::/48 maxlen: 48
                          2a06:a005:15d3::/48 maxlen: 48
                          2a06:a005:187a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 11:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:62:c0:ba:1a:35:a6:7c:e6:1b:db:0a:89:a3:ce:48:6e:c8:a6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  4 10:35:12 2025 GMT
            Not After : Jan  3 10:40:12 2026 GMT
        Subject: CN=8C724BCC8F0E8173B51BB118EE7C8844C570A321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:67:86:b8:45:fc:78:59:19:63:80:d3:ee:
                    c2:d4:a2:51:48:72:db:89:8c:8f:8d:43:ce:41:a0:
                    48:91:b3:e0:8b:97:43:10:31:7a:2b:45:16:cf:4d:
                    2a:c9:5e:49:5b:d3:5b:50:bd:ae:c1:c2:87:bb:8f:
                    56:a6:18:06:8f:f5:63:27:30:60:85:fc:66:6b:9d:
                    0b:ca:8c:3c:f2:49:56:09:c2:80:2f:f0:70:2e:f3:
                    04:33:94:fc:0d:e3:71:4a:53:07:f0:89:97:df:47:
                    2a:a2:a2:95:97:5e:dc:56:42:42:ba:9d:44:d6:2b:
                    e3:ff:77:53:45:9e:a9:85:42:3c:0b:a5:c7:92:90:
                    58:a2:ea:2e:5f:3c:3e:5a:a0:d2:16:44:4b:9b:96:
                    e1:9b:a1:55:bc:0e:04:60:6c:9b:ed:45:5f:86:04:
                    79:0a:a6:4a:26:a0:7e:bd:bb:e3:ef:cb:3f:21:d0:
                    29:c3:56:45:f6:bf:a1:44:03:8f:46:4c:16:4a:74:
                    a9:1b:17:e2:96:73:05:45:be:c2:52:75:3b:42:48:
                    5a:10:cd:cb:31:40:ce:62:23:f8:4f:7c:2a:00:d6:
                    b6:4b:d4:60:ed:da:c1:2d:b5:58:d3:73:7a:6c:64:
                    4b:e0:9d:14:dc:f3:c4:70:6e:c0:9a:85:cc:c2:02:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:72:4B:CC:8F:0E:81:73:B5:1B:B1:18:EE:7C:88:44:C5:70:A3:21
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a080::/44
                  2a06:a005:15d2::/47
                  2a06:a005:187a::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:ae:53:34:d1:7f:c6:f5:c8:58:2d:47:cd:aa:d2:9c:d1:
         3b:e2:c2:d4:95:bf:b0:01:2c:68:93:9b:fe:60:03:aa:e3:b7:
         f2:bd:f1:ef:9c:a2:6a:51:fc:86:a3:90:71:8f:45:cc:f7:d5:
         89:bb:dc:86:ee:c5:18:60:be:03:b5:9f:85:8b:0f:50:72:e7:
         a2:38:b8:b4:92:b1:21:73:94:a0:cc:30:24:e9:75:d2:14:b2:
         7a:3b:54:6e:43:6d:bf:d7:05:d9:38:99:03:2f:3d:77:c5:21:
         57:c2:8c:97:51:0a:f3:a4:d5:74:5e:bb:e6:0e:d9:e5:9a:7b:
         a9:9f:b8:08:16:a7:2d:ae:9d:8a:ab:6c:8c:1a:54:48:07:91:
         ea:4b:8e:68:39:6a:64:3e:1b:79:d9:7c:d5:9b:03:6f:2c:68:
         0b:cf:e8:6a:45:88:2c:f4:dd:6e:0b:22:81:82:93:56:39:1a:
         20:78:42:82:a7:da:d4:49:b8:a4:ba:b4:3c:e2:e1:c6:33:78:
         f5:15:72:15:5d:7e:43:3d:0d:a6:fe:8e:a6:ce:30:65:a5:9c:
         45:35:4c:3e:d4:12:a4:33:f2:d3:7b:8d:da:9d:12:d2:49:be:
         ff:27:3e:ec:d2:bb:e7:8b:06:e3:54:65:3a:db:72:01:6a:bd:
         88:3c:1f:ab
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUR2LAuho1pnzmG9sKiaPOSG7IpiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTAxMDQxMDM1MTJaFw0yNjAxMDMxMDQwMTJaMDMxMTAvBgNV
BAMTKDhDNzI0QkNDOEYwRTgxNzNCNTFCQjExOEVFN0M4ODQ0QzU3MEEzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZmeGuEX8eFkZY4DT7sLUolFI
ctuJjI+NQ85BoEiRs+CLl0MQMXorRRbPTSrJXklb01tQva7Bwoe7j1amGAaP9WMn
MGCF/GZrnQvKjDzySVYJwoAv8HAu8wQzlPwN43FKUwfwiZffRyqiopWXXtxWQkK6
nUTWK+P/d1NFnqmFQjwLpceSkFii6i5fPD5aoNIWREubluGboVW8DgRgbJvtRV+G
BHkKpkomoH69u+Pvyz8h0CnDVkX2v6FEA49GTBZKdKkbF+KWcwVFvsJSdTtCSFoQ
zcsxQM5iI/hPfCoA1rZL1GDt2sEttVjTc3psZEvgnRTc88RwbsCahczCAg7fAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUjHJLzI8OgXO1G7EY7nyIRMVwoyEwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA3NDY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzAhBAIAAjAbAwcEKgagAaCAAwcBKgagBRXSAwcAKgagBRh6MA0GCSqG
SIb3DQEBCwUAA4IBAQCuJa5TNNF/xvXIWC1HzarSnNE74sLUlb+wASxok5v+YAOq
47fyvfHvnKJqUfyGo5Bxj0XM99WJu9yG7sUYYL4DtZ+Fiw9QcueiOLi0krEhc5Sg
zDAk6XXSFLJ6O1RuQ22/1wXZOJkDLz13xSFXwoyXUQrzpNV0XrvmDtnlmnupn7gI
Fqctrp2Kq2yMGlRIB5HqS45oOWpkPht52XzVmwNvLGgLz+hqRYgs9N1uCyKBgpNW
ORogeEKCp9rUSbikurQ84uHGM3j1FXIVXX5DPQ2m/o6mzjBlpZxFNUw+1BKkM/LT
e43anRLSSb7/Jz7s0rvniwbjVGU623IBar2IPB+r
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:42 2025 by rpki-client