Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212715.roa
File:                     AS212715.roa (raw, json)
Hash identifier:          tO3U005TNA4Vw/mY2Coi3+qhS+udXiSsJleHJuMLxRA=
Subject key identifier:   7E:30:66:7A:AF:AB:D4:5C:76:4A:9A:0B:F3:45:81:F2:57:D6:D0:71
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5AFE547369A854F23818E062F7B8F2DF45E98F57
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212715.roa
Signing time:             Tue 05 Dec 2023 02:44:15 +0000
ROA not before:           Tue 05 Dec 2023 02:39:15 +0000
ROA not after:            Tue 03 Dec 2024 02:44:15 +0000
asID:                     212715
IP address blocks:        2a06:a005:1087::/48 maxlen: 48
                          2a06:a005:1088::/48 maxlen: 48
                          2a06:a005:1089::/48 maxlen: 48
                          2a06:a005:108a::/48 maxlen: 48
                          2a06:a005:108b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fe:54:73:69:a8:54:f2:38:18:e0:62:f7:b8:f2:df:45:e9:8f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:15 2023 GMT
            Not After : Dec  3 02:44:15 2024 GMT
        Subject: CN=7E30667AAFABD45C764A9A0BF34581F257D6D071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:03:71:c3:94:a4:ff:71:f0:38:60:ca:19:62:
                    f4:99:5d:18:ad:49:f7:2c:6b:9a:39:ec:8e:3f:ed:
                    43:2a:70:b8:05:3e:86:60:6f:7f:a0:2e:8e:2e:78:
                    c9:d0:72:62:ae:e8:be:bc:9c:f3:60:b4:07:0c:76:
                    a0:0e:f1:40:1e:79:d9:0b:0c:89:72:c9:90:89:80:
                    f4:7b:5d:4c:9f:aa:17:da:64:39:d4:7a:c4:a7:5f:
                    4e:b8:3a:e3:28:ab:04:5e:21:89:2d:96:ae:bf:a7:
                    f5:86:cc:0a:28:17:92:c0:d8:a7:09:0e:2b:01:90:
                    20:c5:93:23:40:11:3a:5c:d0:75:5f:04:d7:f9:79:
                    a2:7c:f1:66:ce:b7:87:6a:21:fa:71:6c:f8:01:a2:
                    97:78:c5:3b:d1:01:6e:16:82:7a:97:53:04:d5:f5:
                    f9:60:7a:21:7b:53:d0:97:47:cc:43:ef:e9:6a:ec:
                    b3:e9:6f:1a:7c:55:e3:e6:cf:0b:62:0a:cc:86:2f:
                    98:9c:f1:28:e3:15:6b:5c:d6:b4:a1:f9:6f:26:26:
                    81:77:6e:9c:0b:71:f4:5c:2c:cf:44:a0:6b:9a:cd:
                    38:c8:be:b3:77:d9:55:cc:5a:00:83:e0:4e:bc:76:
                    1f:da:49:f7:f7:47:46:d3:74:d0:9a:dd:7b:b1:e2:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:30:66:7A:AF:AB:D4:5C:76:4A:9A:0B:F3:45:81:F2:57:D6:D0:71
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1087::-2a06:a005:108b:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         92:17:7e:8f:7e:15:f1:96:29:20:e1:0a:38:85:7e:a5:28:9d:
         4c:c5:d3:cc:fe:69:b1:d5:b5:7d:e7:d9:bd:74:df:cb:b0:0f:
         89:fb:fd:7e:75:43:04:25:a9:14:2e:47:2e:3f:f9:05:d1:09:
         27:e9:f1:74:17:26:fd:2a:2a:c1:cd:8b:a4:ce:ef:a4:f1:73:
         9b:e7:2f:7e:db:57:2f:fb:07:7e:b0:1d:ab:db:65:89:3e:90:
         8e:d7:a0:b2:2c:2e:58:ec:34:44:99:b2:9a:2d:d2:6b:f1:98:
         ba:2d:06:47:74:63:97:18:97:b2:0f:16:1d:5c:6e:36:5e:63:
         76:60:28:72:e3:5b:cb:77:a9:89:32:92:9e:eb:1b:e0:25:14:
         ec:b8:fd:2e:e0:b1:4b:e0:7c:f1:4b:2a:ed:67:53:4d:af:b3:
         0f:6f:54:a4:86:6f:be:95:bc:58:44:18:f7:c3:39:f9:8f:68:
         6b:b8:f3:8f:19:81:d7:04:38:cb:ac:09:7b:ab:38:b0:0f:a0:
         6e:13:e1:ed:34:a1:05:78:c2:25:50:08:b9:d8:c9:ea:43:6d:
         bc:45:0f:47:3f:37:95:f3:c9:9d:ed:74:d8:10:63:eb:ae:d3:
         1e:5a:f5:5b:b5:0b:f8:20:1b:3d:87:c0:55:17:b8:07:fc:33:
         11:4c:21:b3
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUWv5Uc2moVPI4GOBi97jy30Xpj1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTVaFw0yNDEyMDMwMjQ0MTVaMDMxMTAvBgNV
BAMTKDdFMzA2NjdBQUZBQkQ0NUM3NjRBOUEwQkYzNDU4MUYyNTdENkQwNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1A3HDlKT/cfA4YMoZYvSZXRit
Sfcsa5o57I4/7UMqcLgFPoZgb3+gLo4ueMnQcmKu6L68nPNgtAcMdqAO8UAeedkL
DIlyyZCJgPR7XUyfqhfaZDnUesSnX064OuMoqwReIYktlq6/p/WGzAooF5LA2KcJ
DisBkCDFkyNAETpc0HVfBNf5eaJ88WbOt4dqIfpxbPgBopd4xTvRAW4WgnqXUwTV
9flgeiF7U9CXR8xD7+lq7LPpbxp8VePmzwtiCsyGL5ic8SjjFWtc1rSh+W8mJoF3
bpwLcfRcLM9EoGuazTjIvrN32VXMWgCD4E68dh/aSff3R0bTdNCa3Xux4r+1AgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUfjBmeq+r1Fx2SpoL80WB8lfW0HEwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEyNzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEH
AQH/BB4wHDAaBAIAAjAUMBIDBwAqBqAFEIcDBwIqBqAFEIgwDQYJKoZIhvcNAQEL
BQADggEBAJIXfo9+FfGWKSDhCjiFfqUonUzF08z+abHVtX3n2b1038uwD4n7/X51
QwQlqRQuRy4/+QXRCSfp8XQXJv0qKsHNi6TO76Txc5vnL37bVy/7B36wHavbZYk+
kI7XoLIsLljsNESZspot0mvxmLotBkd0Y5cYl7IPFh1cbjZeY3ZgKHLjW8t3qYky
kp7rG+AlFOy4/S7gsUvgfPFLKu1nU02vsw9vVKSGb76VvFhEGPfDOfmPaGu4848Z
gdcEOMusCXurOLAPoG4T4e00oQV4wiVQCLnYyepDbbxFD0c/N5XzyZ3tdNgQY+uu
0x5a9Vu1C/ggGz2HwFUXuAf8MxFMIbM=
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org