Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212242.roa
File:                     AS212242.roa (raw, json)
Hash identifier:          WAkqnGZ3kgT93q8lUNE/06M0A5Pc2Oxtg2ORAYrXFX0=
Subject key identifier:   03:BD:03:7E:E0:4C:96:2A:E9:A0:83:70:FF:FA:2C:43:4E:07:5E:C9
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0FD7624B37F629EAE4513F9AEC81539CF03FD0B9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212242.roa
Signing time:             Tue 05 Dec 2023 02:44:16 +0000
ROA not before:           Tue 05 Dec 2023 02:39:16 +0000
ROA not after:            Tue 03 Dec 2024 02:44:16 +0000
asID:                     212242
IP address blocks:        2a06:a005:2450::/44 maxlen: 48
                          2a06:a005:24c0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d7:62:4b:37:f6:29:ea:e4:51:3f:9a:ec:81:53:9c:f0:3f:d0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:16 2023 GMT
            Not After : Dec  3 02:44:16 2024 GMT
        Subject: CN=03BD037EE04C962AE9A08370FFFA2C434E075EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:5a:d1:5b:70:8c:e2:11:c1:4c:7c:00:ef:
                    d0:fc:79:71:1c:72:c7:95:e2:24:93:d9:47:36:0b:
                    03:4e:79:11:84:19:21:d5:85:bc:80:6d:2a:63:45:
                    d4:7f:0e:a4:98:11:aa:7f:f5:2d:e8:f5:12:de:d0:
                    b9:6b:c0:e6:9f:1f:a0:bc:01:d2:88:b4:19:16:04:
                    90:bb:f9:b1:14:20:eb:b1:c6:3a:5b:ce:e5:c1:88:
                    0d:bc:d9:bb:45:cf:12:8c:73:44:80:a8:23:ad:cc:
                    29:ff:c0:16:33:89:19:f7:2c:1a:ca:24:63:0b:9c:
                    85:8c:8c:18:8d:20:6a:ef:d5:4a:06:0e:56:83:f1:
                    fd:ca:cf:33:84:05:53:18:d5:73:c7:21:96:cd:83:
                    17:a6:0f:5f:69:9b:06:41:a7:15:8e:71:e0:d8:40:
                    48:2f:c6:e0:1c:2c:bc:22:d8:a2:13:39:87:39:7a:
                    87:9d:aa:42:9b:7b:96:29:75:ad:4b:8b:7a:f3:8c:
                    b5:7c:37:97:a4:93:42:4c:0a:e8:86:26:68:30:23:
                    54:93:64:ad:e8:8b:0c:f6:f3:f6:1f:bd:3d:e1:24:
                    c5:02:ae:7c:b0:b0:86:b8:8d:0a:9f:53:f9:dc:7c:
                    e6:9b:3c:4e:c8:8f:c9:63:5b:1b:43:5a:54:12:05:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BD:03:7E:E0:4C:96:2A:E9:A0:83:70:FF:FA:2C:43:4E:07:5E:C9
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2450::/44
                  2a06:a005:24c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:bb:45:82:a6:17:06:ee:13:f9:de:4f:5f:07:f7:5a:03:
         bd:75:0f:9c:8c:29:75:4f:79:db:6e:3e:5b:01:e8:c6:69:c5:
         c1:ba:4c:ef:f4:e7:72:2d:33:25:6a:c6:89:33:fd:70:2e:6e:
         a9:6d:eb:06:f9:f8:6c:ea:09:c0:6e:5d:eb:fc:de:8d:a8:b9:
         ac:a3:e7:9c:a0:85:ee:87:d2:5f:db:2a:77:b7:cb:9f:f2:53:
         d8:22:eb:6a:d1:ce:4f:71:8f:d2:0a:f7:2c:a6:db:41:e4:b4:
         05:8b:15:c1:7a:df:5b:ad:95:b1:24:de:e8:73:c6:73:31:61:
         c4:17:6f:ae:43:27:29:54:3e:17:60:05:72:48:ca:4a:fc:d5:
         c6:9d:4e:33:1c:9e:80:eb:52:5f:4c:65:1a:bd:b1:09:56:d1:
         a9:6b:1b:31:96:10:5e:a4:67:5d:dc:88:19:d8:39:ec:8e:a3:
         83:e2:ab:6e:24:16:ed:03:69:69:c8:25:a7:aa:2c:06:cb:7a:
         b4:ed:3b:1c:fd:87:c3:3a:9a:54:57:3a:9c:a2:21:01:35:77:
         e8:21:01:b5:71:aa:29:3b:00:cc:60:8e:8b:51:ac:59:23:f1:
         dd:5b:56:bc:19:9d:e8:06:37:77:04:18:90:55:72:c6:78:2c:
         09:ff:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org