Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210013.roa
File:                     AS210013.roa (raw, json)
Hash identifier:          vndIzapvo4Wwry6/cYcr3V3aFKH3jWwkSJrBN1SBucg=
Subject key identifier:   FC:A6:CE:07:21:76:C7:E7:D9:38:11:25:8B:0A:F6:7A:19:A0:32:86
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5F56FE4A776F119B547406A41F3726B7E89D821E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210013.roa
Signing time:             Sat 30 Dec 2023 03:44:21 +0000
ROA not before:           Sat 30 Dec 2023 03:39:21 +0000
ROA not after:            Sat 28 Dec 2024 03:44:21 +0000
asID:                     210013
IP address blocks:        2a06:a005:490::/44 maxlen: 48
                          2a06:a005:1460::/44 maxlen: 48
                          2a06:a005:1510::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:56:fe:4a:77:6f:11:9b:54:74:06:a4:1f:37:26:b7:e8:9d:82:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec 30 03:39:21 2023 GMT
            Not After : Dec 28 03:44:21 2024 GMT
        Subject: CN=FCA6CE072176C7E7D93811258B0AF67A19A03286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:f9:c3:15:b0:ab:d2:59:9b:96:1a:f7:c1:
                    74:55:78:33:30:1e:11:cc:01:20:68:dd:ef:a1:19:
                    8e:f4:ff:5a:d0:ab:64:23:f4:15:f1:18:f9:e9:a3:
                    d1:3d:78:56:0e:00:8f:c1:13:d6:b2:9b:89:ff:71:
                    08:96:17:22:91:44:e6:29:fe:60:97:ff:ba:10:62:
                    50:96:41:9d:73:3f:4e:61:63:47:08:8e:03:f1:91:
                    98:a7:73:90:58:8d:25:27:89:1e:37:5e:82:45:24:
                    54:ce:82:61:95:ca:bd:7c:5d:49:0f:98:fc:ce:4c:
                    bf:96:a3:c4:40:45:02:d6:a2:ea:ee:3e:a8:e1:76:
                    97:1a:c2:a9:36:82:27:69:a2:c7:fb:f3:c8:9a:9e:
                    36:e3:8e:93:c6:be:6e:13:a2:26:a0:87:45:f7:75:
                    1c:78:3e:c7:34:b2:5d:d8:46:b9:f7:6d:b5:a1:b4:
                    b5:ae:78:0f:ab:35:78:c6:a3:3a:2c:38:3e:76:65:
                    52:f8:b9:e7:aa:fe:51:22:85:81:4c:b6:60:f1:bd:
                    49:81:be:3e:bd:56:3c:49:55:09:84:31:2f:03:9f:
                    27:78:1c:91:ea:58:d1:c1:60:5f:3c:d9:60:78:6e:
                    a9:ad:bb:ab:4a:df:54:d1:6a:05:ca:b2:61:a5:02:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:CE:07:21:76:C7:E7:D9:38:11:25:8B:0A:F6:7A:19:A0:32:86
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210013.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:490::/44
                  2a06:a005:1460::/44
                  2a06:a005:1510::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:69:03:82:31:82:c0:a2:56:1d:ac:a7:14:57:9c:91:16:
         e0:1c:0a:71:82:cb:a5:42:83:ad:8b:78:20:51:6b:6d:97:9f:
         13:61:8c:45:23:4f:5b:d7:97:3b:42:90:f4:69:6d:38:33:99:
         e9:88:d4:b4:13:4a:5a:57:08:15:08:ac:da:c5:36:7f:e3:a7:
         b5:6a:17:dd:14:c6:f1:51:c3:f6:b3:c7:84:0c:39:74:51:5d:
         60:91:a8:2e:a8:8e:ac:0e:7c:49:e8:4c:87:0b:a0:e0:9f:97:
         2a:58:dc:77:95:31:45:9d:8a:8e:fc:d0:1a:99:b9:14:15:ca:
         51:12:ac:94:d3:c4:6d:2f:7f:3b:54:fa:ab:00:e8:30:44:e5:
         a4:49:92:fe:a5:36:9f:3f:fa:0b:75:ad:4f:6e:53:b4:da:5f:
         f9:6a:48:03:07:68:c8:47:bf:26:12:aa:cb:68:84:98:9c:c5:
         c5:0f:7f:28:cf:23:af:80:54:be:b8:1b:7a:9b:08:a4:91:aa:
         e6:c8:38:cd:c1:50:3f:43:df:c9:4f:1a:99:8f:04:89:19:6e:
         ff:85:7b:fc:41:8b:06:66:2a:d9:45:fa:00:5b:10:f0:dc:48:
         65:ba:86:c9:f0:49:0c:2f:9d:a4:a3:8c:df:c1:b9:75:69:52:
         82:1b:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----