Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa
File:                     AS210445.roa (raw, json)
Hash identifier:          ZfIa19Qeaj+sqnxU3ogaDVPZRjgUe25nHHDwMIUlaJ0=
Subject key identifier:   67:5B:DF:55:46:58:7F:9D:6B:5C:0C:22:00:03:B5:85:C1:74:9A:1E
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       28750089A60F3FAAA1EC1544356609507F76B585
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa
Signing time:             Tue 20 Feb 2024 09:44:24 +0000
ROA not before:           Tue 20 Feb 2024 09:39:24 +0000
ROA not after:            Tue 18 Feb 2025 09:44:24 +0000
asID:                     210445
IP address blocks:        2a06:a005:f60::/44 maxlen: 48
                          2a06:a005:16f0::/44 maxlen: 48
                          2a06:a005:2180::/44 maxlen: 48
                          2a06:a005:29b0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:00:89:a6:0f:3f:aa:a1:ec:15:44:35:66:09:50:7f:76:b5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 20 09:39:24 2024 GMT
            Not After : Feb 18 09:44:24 2025 GMT
        Subject: CN=675BDF5546587F9D6B5C0C220003B585C1749A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:55:cd:f6:5c:6e:71:d6:49:78:53:7f:eb:
                    0a:20:76:6a:1b:cc:7a:7e:3e:46:f0:8b:6e:6f:67:
                    16:88:f3:3b:a8:a6:2a:c0:5d:66:94:83:d6:99:0d:
                    62:03:51:76:27:8d:1e:b6:08:49:94:ba:1a:8a:a3:
                    a7:7c:db:c7:19:3c:78:17:27:1f:0d:df:a7:d5:f5:
                    fe:ed:98:6a:3d:54:ec:e1:5a:4b:e3:f9:3f:97:1f:
                    d2:78:3e:c4:78:20:b7:e2:8b:8f:96:75:dc:9a:2a:
                    dd:51:5a:31:d8:14:76:05:b5:a8:df:4c:c4:d9:e4:
                    a9:65:45:6c:82:eb:44:3c:71:74:0d:6a:ed:74:b9:
                    7e:b1:eb:a7:b4:c4:a8:c7:f5:5f:ac:6c:5b:e5:ff:
                    01:85:74:1d:a7:e2:c9:1e:2d:1a:d5:68:96:16:93:
                    e5:b1:24:a8:2f:4f:b6:25:66:9e:71:6b:53:16:0a:
                    6b:2d:38:74:52:34:0a:7c:32:49:bf:1a:10:d0:07:
                    24:a6:6d:61:81:61:cc:69:1c:e3:39:f3:28:0c:28:
                    9a:8d:34:6a:5f:6c:fc:36:ce:9a:24:30:79:2a:6b:
                    96:fa:97:8e:7e:ba:96:3b:48:0d:75:bc:21:10:d2:
                    fe:a5:24:de:fd:c6:0e:fb:d1:fc:d8:58:08:d1:1b:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5B:DF:55:46:58:7F:9D:6B:5C:0C:22:00:03:B5:85:C1:74:9A:1E
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:f60::/44
                  2a06:a005:16f0::/44
                  2a06:a005:2180::/44
                  2a06:a005:29b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:9a:db:46:a9:40:b3:8c:2f:2e:25:0a:03:3f:b6:e8:2f:
         55:14:29:21:e7:08:f7:a2:39:90:31:65:cc:b6:30:b9:5d:ea:
         14:fd:f4:19:03:59:ce:73:4a:26:d7:34:ab:01:a6:03:50:a4:
         aa:4f:07:74:ce:f4:f0:e2:d2:53:9c:bd:7c:1f:22:aa:da:fc:
         ce:12:fa:8d:07:7e:27:72:c1:9a:1d:36:f2:21:a4:34:14:a8:
         ca:d5:02:d6:8c:a6:25:ca:d7:cd:b4:b1:27:06:83:b4:de:c8:
         e8:94:f8:db:c3:28:23:33:80:ba:04:47:6e:fa:41:9a:63:c3:
         ae:9a:db:3a:c6:02:a5:77:1a:5b:14:99:84:e9:88:8f:d4:e7:
         24:e7:92:ca:30:a4:ef:48:a5:aa:3c:53:e7:b7:ab:93:43:ca:
         33:17:a1:e8:02:1f:32:94:77:ef:f9:5c:3d:a3:be:8e:bb:f8:
         b6:3c:49:86:cd:45:eb:06:9c:37:a4:0d:0f:fa:d7:68:22:eb:
         c5:b5:29:50:8a:81:eb:56:1c:5e:5a:61:f5:da:13:00:ea:79:
         32:95:86:c2:4a:6a:2b:fc:60:1d:ee:0d:9f:0e:28:dc:a3:5d:
         cb:85:a7:e2:c4:06:02:cd:89:ad:fa:7b:32:8b:5d:c7:46:15:
         be:98:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org