Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210537.roa
File:                     AS210537.roa (raw, json)
Hash identifier:          3ERxi44Eg1sK5YBKrGy6K/4Lk5UeIprfhyFS9IIAhH0=
Subject key identifier:   66:BA:6F:B2:1D:51:7E:8D:05:63:FA:15:D9:C9:80:DB:63:11:A4:D4
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       58FB78F63BD237A72CD78F2241661367C2F72FB9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210537.roa
Signing time:             Mon 07 Oct 2024 09:39:59 +0000
ROA not before:           Mon 07 Oct 2024 09:34:59 +0000
ROA not after:            Mon 06 Oct 2025 09:39:59 +0000
asID:                     210537
IP address blocks:        2a06:a005:1508::/48 maxlen: 48
                          2a06:a005:20c0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fb:78:f6:3b:d2:37:a7:2c:d7:8f:22:41:66:13:67:c2:f7:2f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Oct  7 09:34:59 2024 GMT
            Not After : Oct  6 09:39:59 2025 GMT
        Subject: CN=66BA6FB21D517E8D0563FA15D9C980DB6311A4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:93:cc:b4:b1:1a:18:75:1b:9b:7e:68:61:
                    b9:77:3e:72:49:90:47:a8:9d:75:04:7d:d5:14:cb:
                    bb:85:89:af:a3:d3:4a:f2:d1:b8:a1:cd:dc:8b:4c:
                    07:e2:8e:4f:6e:6d:31:db:4e:fd:94:fa:78:f0:42:
                    ae:46:7a:53:90:ee:d9:56:91:78:9f:84:18:50:2b:
                    39:c2:0e:d3:ed:a6:c9:74:8a:10:17:fa:e4:13:a8:
                    6d:f6:97:e4:59:e5:ef:6d:db:a7:dc:57:04:6c:b8:
                    9a:8f:57:c2:e3:9b:56:6f:51:06:4e:73:05:ca:75:
                    f6:bf:ec:f3:25:2e:c2:f6:05:de:02:8d:02:fd:01:
                    5b:55:2e:0a:04:4f:8b:eb:8d:75:97:e2:1e:16:18:
                    54:75:a4:6c:62:b0:85:15:f7:bd:a8:c9:ed:b7:c2:
                    f7:72:cc:b0:13:cb:bb:0b:06:de:48:d7:65:22:5d:
                    d4:13:d3:21:a1:03:4e:c4:c7:6b:5e:73:9a:48:bc:
                    23:17:85:37:08:88:10:08:ae:15:88:9c:76:a5:8d:
                    25:87:b6:8b:b1:e6:1d:68:45:5f:41:89:03:ea:96:
                    02:a8:5b:08:fe:4d:3f:c9:f7:f0:02:3e:53:72:b8:
                    99:00:c7:eb:82:da:a3:76:fb:e1:b1:58:2c:4a:d6:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:6F:B2:1D:51:7E:8D:05:63:FA:15:D9:C9:80:DB:63:11:A4:D4
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1508::/48
                  2a06:a005:20c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a4:af:7f:7e:86:5c:8c:38:79:3e:db:05:eb:2b:8e:a9:de:fc:
         62:03:67:df:aa:c5:6f:15:da:0b:09:9c:ce:9c:f9:23:47:fb:
         86:1c:8e:a2:59:7a:c8:75:a3:b3:c0:39:9d:ee:5d:64:c9:e3:
         35:17:7b:3d:b0:ab:cb:8f:f0:f7:1b:29:aa:63:54:68:5c:a3:
         c8:ee:76:29:c5:eb:72:a4:44:ca:5c:ac:93:04:ad:71:0b:09:
         39:6c:69:9e:f2:c0:3a:f2:a5:b5:95:16:04:b8:61:14:58:1b:
         ca:cd:fc:f2:fa:35:7a:03:0c:81:86:2b:80:86:a3:15:64:b6:
         1d:f7:3c:f6:68:d4:e1:5d:d8:9c:a7:1a:f0:e4:65:30:32:86:
         43:d7:c7:92:41:7b:ab:a7:10:1a:5d:d0:0d:3c:41:b1:cf:9d:
         1c:65:69:1d:40:e2:08:aa:61:a1:be:35:bb:73:2d:bf:90:0e:
         ff:de:f0:3d:23:03:01:18:f5:4c:ad:f2:16:63:79:44:dd:47:
         e3:5c:cd:de:1b:ab:f3:9c:ce:6d:27:af:3b:7b:db:6b:6f:17:
         ef:aa:d9:00:20:4c:c4:31:bb:2e:8b:d9:5e:13:6d:37:69:40:
         57:20:d8:42:44:f4:d1:22:41:e7:29:8b:0d:06:61:95:e5:51:
         87:76:53:c1
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUWPt49jvSN6cs148iQWYTZ8L3L7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEwMDcwOTM0NTlaFw0yNTEwMDYwOTM5NTlaMDMxMTAvBgNV
BAMTKDY2QkE2RkIyMUQ1MTdFOEQwNTYzRkExNUQ5Qzk4MERCNjMxMUE0RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISZPMtLEaGHUbm35oYbl3PnJJ
kEeonXUEfdUUy7uFia+j00ry0bihzdyLTAfijk9ubTHbTv2U+njwQq5GelOQ7tlW
kXifhBhQKznCDtPtpsl0ihAX+uQTqG32l+RZ5e9t26fcVwRsuJqPV8Ljm1ZvUQZO
cwXKdfa/7PMlLsL2Bd4CjQL9AVtVLgoET4vrjXWX4h4WGFR1pGxisIUV972oye23
wvdyzLATy7sLBt5I12UiXdQT0yGhA07Ex2tec5pIvCMXhTcIiBAIrhWInHaljSWH
toux5h1oRV9BiQPqlgKoWwj+TT/J9/ACPlNyuJkAx+uC2qN2++GxWCxK1v+tAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUZrpvsh1Rfo0FY/oV2cmA22MRpNQwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEwNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcAKgagBRUIAwcEKgagBSDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCkr39+hlyMOHk+2wXrK46p3vxiA2ffqsVvFdoLCZzOnPkjR/uGHI6iWXrI
daOzwDmd7l1kyeM1F3s9sKvLj/D3GymqY1RoXKPI7nYpxetypETKXKyTBK1xCwk5
bGme8sA68qW1lRYEuGEUWBvKzfzy+jV6AwyBhiuAhqMVZLYd9zz2aNThXdicpxrw
5GUwMoZD18eSQXurpxAaXdANPEGxz50cZWkdQOIIqmGhvjW7cy2/kA7/3vA9IwMB
GPVMrfIWY3lE3UfjXM3eG6vznM5tJ687e9trbxfvqtkAIEzEMbsui9leE203aUBX
INhCRPTRIkHnKYsNBmGV5VGHdlPB
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:36 2024 by rpki-client on console-fra.rpki-client.org