Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212252.roa
File:                     AS212252.roa (raw, json)
Hash identifier:          XJTsibHPlj1OB3CLEU7THGrRa4hIL7zWce1HdEg4c0s=
Subject key identifier:   69:1D:E7:DA:C0:06:FE:97:8F:C2:47:3D:3F:3B:AD:F2:C6:D7:B2:AC
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5823B807A729F58ADA13B39E1FCA05EECE4AD64A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212252.roa
Signing time:             Tue 05 Nov 2024 03:40:07 +0000
ROA not before:           Tue 05 Nov 2024 03:35:07 +0000
ROA not after:            Tue 04 Nov 2025 03:40:07 +0000
asID:                     212252
IP address blocks:        2a06:a005:2430::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:23:b8:07:a7:29:f5:8a:da:13:b3:9e:1f:ca:05:ee:ce:4a:d6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:07 2024 GMT
            Not After : Nov  4 03:40:07 2025 GMT
        Subject: CN=691DE7DAC006FE978FC2473D3F3BADF2C6D7B2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:2f:6a:fb:84:82:55:a3:f4:00:b8:34:71:
                    16:97:fc:47:46:71:3e:47:78:14:f3:54:1d:d6:ac:
                    f9:2e:1d:50:55:35:68:7f:07:55:35:cd:9f:59:2f:
                    5d:11:32:29:5a:c5:f3:16:35:07:c8:bf:56:83:f1:
                    1e:95:44:8a:3e:2e:f7:e5:68:4b:61:a9:51:61:c2:
                    9c:99:94:c9:c8:04:2d:12:69:21:3d:49:a5:52:1e:
                    e4:02:a8:4e:b0:fd:cd:e6:80:5d:94:16:5e:41:49:
                    61:26:c8:50:39:b8:ed:82:e6:d5:ec:3a:a9:89:82:
                    47:f9:e3:83:68:48:3f:de:c4:6f:14:4b:43:6c:9f:
                    86:7b:cb:d2:67:f6:f2:98:3b:9d:55:90:88:fd:48:
                    d5:e6:cd:82:0f:8c:2e:96:7d:02:0e:ea:cf:dd:d7:
                    fc:0c:2b:88:c6:e3:27:9e:93:d5:7a:93:b6:a2:d2:
                    28:bf:b8:4f:5a:a4:38:64:c6:3e:4c:35:b3:8f:9b:
                    d0:6e:7e:c1:fb:ba:71:e7:0d:d2:4e:88:4f:1e:bd:
                    dd:d2:8f:7d:d0:4c:6c:a1:18:52:bc:28:89:5e:1b:
                    5b:7c:d2:df:f6:64:bd:c1:fc:ba:a0:82:f9:52:34:
                    d5:62:ef:47:2d:f7:27:16:48:2e:7c:08:c8:42:d4:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:E7:DA:C0:06:FE:97:8F:C2:47:3D:3F:3B:AD:F2:C6:D7:B2:AC
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2430::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:38:3b:32:ed:7a:74:a2:48:02:a9:a2:84:f0:cd:aa:b1:89:
         34:d4:4e:4d:41:2c:dd:09:f2:84:ab:84:17:71:28:a6:f3:4c:
         fb:f8:69:a0:46:58:84:f2:3a:ee:d8:93:8b:b4:e8:3e:24:44:
         57:d2:85:c6:97:ef:ad:37:88:b3:c7:bc:bb:93:6e:fd:6d:3e:
         66:b1:69:e4:c0:8d:d8:7d:37:20:38:e0:ba:a2:ec:ae:06:08:
         e3:a3:28:6f:f7:94:bc:ce:26:89:ba:93:9d:b3:34:c2:57:63:
         6a:d5:d1:bc:28:d8:a2:7a:6c:d2:fe:3c:51:45:37:52:84:71:
         e2:ce:4b:ce:d2:b3:b5:ca:20:cd:9b:2d:2c:60:80:8b:c6:da:
         06:8c:63:f8:20:ec:71:86:8c:c5:df:e4:66:de:5d:cd:0b:fb:
         ad:83:45:d5:cc:ff:1e:54:98:3a:e9:20:d6:ed:d2:1d:45:f1:
         3c:ec:53:dc:f5:1a:89:21:4a:ed:dd:25:12:d6:a4:a0:c9:11:
         55:a6:f8:61:ed:c6:b5:35:c8:02:28:1a:89:14:55:f5:9e:60:
         5d:fd:a3:50:4a:71:f6:1e:c1:ed:de:c2:5e:95:31:74:f5:bc:
         c7:80:51:ca:05:05:43:48:e3:2b:d0:11:b2:14:01:8d:c6:55:
         4c:e6:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----