Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210576.roa
File:                     AS210576.roa (raw, json)
Hash identifier:          J6a8Oa/qjRcOs0/ZlhYUmb1Ms2eC9pZsjTo2ZAsE8DE=
Subject key identifier:   81:C6:BE:8A:07:A8:EB:E5:22:2C:26:A7:D5:D8:DE:15:E2:63:EA:C0
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       55CBD16FAD78D63334073FDA454FECF2E24218E0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210576.roa
Signing time:             Tue 05 Dec 2023 02:44:13 +0000
ROA not before:           Tue 05 Dec 2023 02:39:13 +0000
ROA not after:            Tue 03 Dec 2024 02:44:13 +0000
asID:                     210576
IP address blocks:        2a06:a005:5fc::/46 maxlen: 48
                          2a06:a005:1100::/44 maxlen: 48
                          2a06:a005:1110::/44 maxlen: 48
                          2a06:a005:1120::/44 maxlen: 48
                          2a06:a005:1130::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cb:d1:6f:ad:78:d6:33:34:07:3f:da:45:4f:ec:f2:e2:42:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:13 2023 GMT
            Not After : Dec  3 02:44:13 2024 GMT
        Subject: CN=81C6BE8A07A8EBE5222C26A7D5D8DE15E263EAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:b1:6f:17:2f:b2:7d:fd:f7:8f:9e:8d:74:
                    47:fa:4e:db:6a:d1:11:19:37:ac:b9:1a:1e:a0:21:
                    34:03:4e:9b:5b:34:42:0f:55:d4:51:91:17:2e:d6:
                    90:31:f1:ba:e6:a3:d8:57:50:ce:03:af:9e:24:3b:
                    65:5f:ab:06:50:12:71:5c:47:3a:94:18:44:a9:f9:
                    bd:90:06:83:c4:13:ec:a0:54:71:73:5f:81:cf:9d:
                    74:1e:14:b6:e4:de:50:ce:ea:75:97:d2:fd:64:0c:
                    8d:27:9a:45:e9:79:44:f4:66:86:e3:36:21:65:bb:
                    fc:84:a2:dd:83:a8:53:79:bd:7f:e2:83:5b:ed:9f:
                    10:36:ae:aa:51:4d:18:87:ac:dc:fe:7e:0f:5c:6e:
                    36:22:ab:4e:9b:8c:5f:43:84:e8:fb:21:11:ee:21:
                    04:68:ff:d4:01:84:e6:9b:29:d7:91:b3:5b:15:d3:
                    e6:15:87:cf:57:c3:7e:85:68:63:2b:ff:30:f8:9e:
                    6d:30:14:72:cc:96:91:9f:b6:7b:78:e0:1f:e5:93:
                    19:f7:d5:85:74:55:9b:4f:4c:e8:c9:33:7f:0a:0c:
                    dd:f7:23:8e:2e:ae:cb:a9:8a:25:a3:66:52:73:65:
                    11:84:38:19:2f:f1:37:50:d6:28:ef:45:a9:b4:ee:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:BE:8A:07:A8:EB:E5:22:2C:26:A7:D5:D8:DE:15:E2:63:EA:C0
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210576.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5fc::/46
                  2a06:a005:1100::/42

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:38:ba:07:17:c8:95:af:46:01:ff:7f:fd:97:46:d8:f0:
         24:ea:34:03:1b:0c:59:79:66:d6:79:87:e1:f5:9a:cd:85:be:
         36:45:9d:65:28:78:dd:da:20:df:62:dd:42:de:55:7f:aa:09:
         45:a5:11:04:01:22:c1:d1:f7:3b:1b:b6:a8:ad:8c:6a:4a:cb:
         91:8c:1c:e5:ad:5e:bb:3c:ea:a9:d0:62:e6:5c:a9:eb:e0:c6:
         de:70:e8:7e:00:62:38:bc:fe:1d:99:31:12:d6:41:9c:f5:16:
         69:a8:a7:52:81:63:3a:18:aa:7c:37:a0:36:d3:f7:45:74:6a:
         bb:40:5c:98:77:82:be:11:a4:f1:48:69:f6:bd:5d:ca:e2:a8:
         12:08:69:48:bf:49:53:58:d5:c7:f0:3e:37:23:86:77:86:15:
         ed:0c:f8:b4:55:07:c4:38:9e:46:15:90:e4:36:e6:9e:04:02:
         86:ed:cc:4f:0e:f1:88:8c:70:51:0b:42:5d:89:1f:3b:68:86:
         22:08:2c:c6:2b:15:c0:bb:96:14:0d:46:f7:7d:b6:e6:5d:c6:
         9f:db:3b:be:a6:1c:fa:d3:f8:f5:36:3e:2a:ac:7a:95:dc:09:
         bf:d1:ea:01:3e:8b:2f:ed:76:4f:cc:05:70:19:9d:fa:e4:5a:
         65:6f:0e:f2
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUVcvRb6141jM0Bz/aRU/s8uJCGOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTNaFw0yNDEyMDMwMjQ0MTNaMDMxMTAvBgNV
BAMTKDgxQzZCRThBMDdBOEVCRTUyMjJDMjZBN0Q1RDhERTE1RTI2M0VBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSC7FvFy+yff33j56NdEf6Tttq
0REZN6y5Gh6gITQDTptbNEIPVdRRkRcu1pAx8brmo9hXUM4Dr54kO2VfqwZQEnFc
RzqUGESp+b2QBoPEE+ygVHFzX4HPnXQeFLbk3lDO6nWX0v1kDI0nmkXpeUT0Zobj
NiFlu/yEot2DqFN5vX/ig1vtnxA2rqpRTRiHrNz+fg9cbjYiq06bjF9DhOj7IRHu
IQRo/9QBhOabKdeRs1sV0+YVh89Xw36FaGMr/zD4nm0wFHLMlpGftnt44B/lkxn3
1YV0VZtPTOjJM38KDN33I44ursupiiWjZlJzZRGEOBkv8TdQ1ijvRam07mlxAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUgca+igeo6+UiLCan1djeFeJj6sAwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEwNTc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcCKgagBQX8AwcGKgagBREAMA0GCSqGSIb3DQEBCwUA
A4IBAQA5jzi6BxfIla9GAf9//ZdG2PAk6jQDGwxZeWbWeYfh9ZrNhb42RZ1lKHjd
2iDfYt1C3lV/qglFpREEASLB0fc7G7aorYxqSsuRjBzlrV67POqp0GLmXKnr4Mbe
cOh+AGI4vP4dmTES1kGc9RZpqKdSgWM6GKp8N6A20/dFdGq7QFyYd4K+EaTxSGn2
vV3K4qgSCGlIv0lTWNXH8D43I4Z3hhXtDPi0VQfEOJ5GFZDkNuaeBAKG7cxPDvGI
jHBRC0JdiR87aIYiCCzGKxXAu5YUDUb3fbbmXcaf2zu+phz60/j1Nj4qrHqV3Am/
0eoBPosv7XZPzAVwGZ365Fplbw7y
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org