Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
File:                     AS207466.roa (raw, json)
Hash identifier:          IRGKWkKUJj9hzR4y1YUomnPf3fuskfoh242bph9rWHw=
Subject key identifier:   46:26:6C:C7:25:D6:58:E2:94:EE:00:4E:6C:A1:2F:6F:E2:C4:9C:49
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       713A77A9CB4A0ED35CBDC5987C94BB78FA4DF47F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
Signing time:             Sat 04 Mar 2023 09:04:01 +0000
ROA not before:           Sat 04 Mar 2023 08:59:01 +0000
ROA not after:            Sat 02 Mar 2024 09:04:01 +0000
asID:                     207466
IP address blocks:        2a06:a001:a080::/44 maxlen: 48
                          2a06:a005:15d2::/48 maxlen: 48
                          2a06:a005:15d3::/48 maxlen: 48
                          2a06:a005:187a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jul 2023 12:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3a:77:a9:cb:4a:0e:d3:5c:bd:c5:98:7c:94:bb:78:fa:4d:f4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar  4 08:59:01 2023 GMT
            Not After : Mar  2 09:04:01 2024 GMT
        Subject: CN=46266CC725D658E294EE004E6CA12F6FE2C49C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:cb:b8:9c:a1:ef:37:f0:a0:cb:66:76:9f:
                    8d:a8:5d:58:be:b8:40:6d:ad:a1:b7:d0:b1:1e:b8:
                    b8:a5:e8:27:18:db:96:b8:5d:e2:83:31:e0:48:8a:
                    53:1e:79:27:17:e5:08:c0:0b:e9:63:5e:7d:64:0b:
                    9d:38:9f:6e:52:96:1a:c7:bb:13:4a:c2:84:e8:7e:
                    6a:1e:a8:22:0e:b3:de:c7:f0:09:42:37:df:59:b3:
                    9c:6e:a8:42:ee:b8:c0:bd:1a:61:cc:ab:ce:6f:43:
                    3c:88:94:84:04:5e:7f:a5:73:22:6f:f9:54:b6:58:
                    57:f1:a4:6d:4a:c7:20:ac:4b:59:c4:2d:72:a7:c8:
                    43:e4:b4:1f:02:d4:12:9f:1e:d6:8d:68:48:c6:f8:
                    5c:43:11:de:93:94:01:0e:60:0b:50:3a:8e:fe:15:
                    0f:38:e8:a2:2d:b5:07:a8:d1:47:b9:c5:e7:1e:9e:
                    00:55:63:f3:5f:ce:b2:c3:31:24:33:eb:54:8c:f0:
                    73:02:20:ea:c2:5f:e3:8b:ab:fa:33:ea:88:e6:99:
                    3b:2c:04:1f:d5:c6:91:57:d9:68:e1:c8:b5:16:5b:
                    99:1c:e8:9c:13:8a:f5:6d:cd:6c:24:e7:84:01:66:
                    de:61:2a:e9:10:be:5d:f7:1a:5b:17:11:e2:53:71:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:26:6C:C7:25:D6:58:E2:94:EE:00:4E:6C:A1:2F:6F:E2:C4:9C:49
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a080::/44
                  2a06:a005:15d2::/47
                  2a06:a005:187a::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:a9:32:8b:93:db:9e:6a:63:d5:e4:11:29:05:19:97:3a:52:
         36:ee:81:4d:d6:35:e5:80:57:bc:4c:ea:1c:61:9c:f4:55:4d:
         6c:0d:e2:0f:aa:49:e3:df:bb:e2:bb:43:a0:56:f2:45:9b:8b:
         d0:2d:cf:7c:22:0d:e4:13:3a:69:88:ff:cc:4f:8b:18:c7:47:
         e7:ce:3f:4d:e7:96:d2:d0:6e:c1:5d:16:a6:f7:ec:43:71:aa:
         b4:d8:73:9d:13:e5:a5:04:2a:b7:8b:3e:7c:4a:77:e2:51:4e:
         fd:86:6d:a4:fc:74:69:3a:71:78:8c:36:1c:9b:25:95:19:f9:
         26:c1:dc:b9:dd:68:74:cb:9c:39:9c:9e:98:8e:52:4f:6f:97:
         6d:a1:b3:f2:40:cf:fe:a1:ff:e1:b9:8a:1a:5f:be:34:94:fa:
         d2:0f:69:0c:e8:ca:04:84:b5:21:fc:33:4e:d8:14:32:1d:12:
         fd:76:04:a0:44:ec:cb:96:00:db:47:58:66:8d:4b:2d:2e:7b:
         c4:f3:93:05:31:df:01:40:5d:6c:19:41:db:03:ca:59:19:3e:
         65:3c:b1:7e:b4:b3:45:66:bf:84:b8:33:6f:f7:b4:b3:25:cc:
         db:46:36:df:96:5f:5d:e6:09:66:26:69:38:c1:a7:c9:1f:a4:
         26:a2:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----