Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207705.roa
File:                     AS207705.roa (raw, json)
Hash identifier:          mUGTwnrysRPLwF7Edn3bfi2iMcJmqoXhl5mWAJ14UhI=
Subject key identifier:   FB:0D:08:27:7B:46:B5:91:B0:B8:FA:1B:C6:B6:07:DE:97:33:08:10
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       401944B64931F9C115D51C977FBE41E8ED731021
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207705.roa
Signing time:             Tue 05 Nov 2024 03:40:03 +0000
ROA not before:           Tue 05 Nov 2024 03:35:03 +0000
ROA not after:            Tue 04 Nov 2025 03:40:03 +0000
asID:                     207705
IP address blocks:        2a06:a005:210::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:19:44:b6:49:31:f9:c1:15:d5:1c:97:7f:be:41:e8:ed:73:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:03 2024 GMT
            Not After : Nov  4 03:40:03 2025 GMT
        Subject: CN=FB0D08277B46B591B0B8FA1BC6B607DE97330810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:28:70:ca:2b:09:ec:b7:5b:a4:fb:ac:3a:
                    7f:e4:f4:29:eb:37:7e:5a:f8:ca:4b:ad:49:f1:33:
                    a7:d9:20:81:6e:f8:c5:eb:4a:8f:de:4b:86:40:e0:
                    d3:37:39:c8:19:9f:3c:5a:90:a3:58:b3:9a:41:ba:
                    4b:4f:bb:12:b2:8b:50:48:c8:a0:29:fb:fb:81:25:
                    b0:6f:e4:bc:30:3f:4c:f0:e4:ca:91:55:d7:05:6d:
                    fe:b6:38:80:a7:92:86:35:30:b5:0c:1b:77:4d:71:
                    bd:41:39:a8:8f:80:4a:b4:27:f0:b6:23:5e:e2:03:
                    b0:cd:1b:c8:0a:27:2d:b5:fd:3c:8b:7b:26:30:04:
                    ff:4d:53:85:29:bf:a5:c8:2c:43:39:59:3f:49:f9:
                    0a:d4:f5:96:25:37:2c:6d:0e:e3:85:4a:a5:e4:b1:
                    69:44:fb:11:3e:21:a0:5b:b8:59:3f:7c:c4:7d:12:
                    21:f6:6f:c5:59:89:39:0d:9b:ef:d8:9a:38:11:37:
                    1c:41:84:9e:df:48:37:05:c9:39:a7:f8:e9:cb:ca:
                    79:bf:84:29:33:ad:36:8d:ae:37:1d:61:f2:fe:2f:
                    37:28:c5:a8:df:b7:74:ec:ae:de:2b:38:b5:46:19:
                    db:af:85:c9:01:8c:3b:84:c3:dd:ea:51:9b:04:66:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0D:08:27:7B:46:B5:91:B0:B8:FA:1B:C6:B6:07:DE:97:33:08:10
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207705.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:210::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:ef:58:bf:73:d4:b6:0f:c3:75:4b:a7:c0:86:41:a6:7f:
         50:4c:a1:2b:aa:d2:79:f2:99:25:e3:b1:a7:a3:0f:ea:cd:9e:
         b6:d6:bd:71:97:83:93:92:ad:15:3e:53:ef:31:10:0c:01:bb:
         dd:4b:93:33:34:af:5f:fb:0c:89:d6:b1:6e:28:5d:9c:a2:c0:
         69:b0:cf:a0:57:0c:f3:e7:1e:3b:4e:d0:5a:7e:db:fc:bb:c5:
         9b:62:02:d7:6c:e1:43:bb:a3:8e:10:fe:08:6f:c6:25:95:9a:
         c9:64:d7:35:aa:0a:8c:f5:c2:ef:4c:4c:05:39:00:bf:b5:fc:
         8e:dd:ac:dc:db:93:b6:00:10:51:f5:fc:d4:26:c7:f0:b2:1a:
         ad:5b:23:3a:59:86:98:e2:14:5f:e9:89:d3:34:3e:37:cc:bf:
         0e:1c:d0:32:3b:7b:cd:8f:df:9e:36:74:19:16:14:3b:f3:db:
         67:95:56:5d:9d:6f:b9:08:0d:50:d0:00:20:03:ee:e3:07:88:
         f8:64:5f:57:67:0c:b2:f8:61:44:bd:7c:de:65:c4:90:af:2c:
         dc:6c:78:d8:03:61:90:a0:df:23:13:44:e4:45:48:f6:ff:12:
         2f:74:69:e5:05:f2:86:8f:d1:d6:ff:63:3a:20:e7:f6:11:2b:
         96:ea:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----