Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa
File:                     AS212793.roa (raw, json)
Hash identifier:          dUQZWYFCyflFXPZDIJTMvMKF048+zR5XUP9tRhBvDUM=
Subject key identifier:   65:5F:F3:11:CC:87:22:02:71:B6:69:B0:9E:61:29:4E:74:F1:CD:39
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       26E575904AD12B93E1C88D500D70A9235A45CBE0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa
Signing time:             Mon 05 Feb 2024 23:44:24 +0000
ROA not before:           Mon 05 Feb 2024 23:39:24 +0000
ROA not after:            Mon 03 Feb 2025 23:44:24 +0000
asID:                     212793
IP address blocks:        2a06:a005:b69::/48 maxlen: 48
                          2a06:a005:15da::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e5:75:90:4a:d1:2b:93:e1:c8:8d:50:0d:70:a9:23:5a:45:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb  5 23:39:24 2024 GMT
            Not After : Feb  3 23:44:24 2025 GMT
        Subject: CN=655FF311CC87220271B669B09E61294E74F1CD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:f3:fa:c3:b1:44:c8:7e:fd:92:c4:5c:79:
                    65:a1:e3:a3:48:16:69:82:f3:ef:b9:3a:05:2f:30:
                    db:df:67:80:c7:e3:8f:54:ce:7c:8c:4e:43:59:83:
                    d2:75:64:31:73:df:11:50:e8:64:71:b8:f1:ce:22:
                    8d:86:7c:0d:a0:20:19:fb:b7:3c:c9:a7:44:c8:69:
                    99:db:5c:f3:8a:5f:01:3b:51:7a:3f:61:58:44:92:
                    11:39:6c:ed:3a:8c:fe:37:ab:ee:cd:9e:cd:fe:e3:
                    63:0a:41:4f:bc:55:16:52:49:ea:16:fb:00:d8:6e:
                    98:d2:84:eb:b7:31:f5:6a:96:86:6b:63:70:af:02:
                    89:8d:8b:76:c0:49:c7:b4:44:f5:60:4e:be:95:ad:
                    09:8e:8f:1f:9a:fa:e4:8e:f3:90:62:f1:01:28:8b:
                    75:6a:b4:83:65:be:f1:a2:64:35:43:65:1e:89:d1:
                    b9:f3:1c:b3:97:28:66:7a:15:16:01:9b:64:09:df:
                    94:46:12:23:41:57:4a:48:3e:03:7e:1f:bb:b1:b3:
                    9e:9a:9d:b6:03:e9:c6:c1:fa:5b:73:25:70:26:5d:
                    a2:90:e5:67:b9:a6:4d:f0:f3:27:74:5d:19:19:89:
                    d5:2d:c1:20:3b:14:53:df:0c:c6:6e:7e:00:4f:82:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:F3:11:CC:87:22:02:71:B6:69:B0:9E:61:29:4E:74:F1:CD:39
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b69::/48
                  2a06:a005:15da::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:47:94:63:0b:7c:eb:a5:51:e6:ea:e8:09:47:9c:f0:3a:03:
         21:53:94:0d:cb:12:ef:91:4a:cd:d0:94:1b:ff:5e:e8:bd:3a:
         d4:04:08:dc:ed:e8:86:64:63:d4:7b:79:64:30:83:d3:0d:e8:
         f2:62:e1:c8:67:aa:fa:73:a0:e9:5c:2e:da:78:f6:bb:45:cf:
         f9:95:b9:4b:47:8c:57:a5:59:53:dd:18:86:b2:aa:be:cb:fb:
         24:9e:4c:e6:39:11:b3:93:aa:3a:93:a6:4e:ec:e1:9f:e1:5a:
         bf:47:72:0c:d6:c0:5e:13:c3:ac:63:67:41:52:e2:59:d0:5b:
         bb:0e:b4:76:14:7c:ba:4a:68:01:8b:66:4f:6e:57:31:4c:3f:
         c1:aa:03:7e:0f:eb:e1:16:0f:ad:51:50:31:01:53:d3:57:8c:
         6b:cc:00:0f:65:4b:28:63:17:cd:72:0b:a6:f0:64:3a:7b:f2:
         55:11:d9:6f:c9:ec:ab:00:a8:30:dd:fc:3d:65:51:fd:b4:fa:
         56:b0:a3:be:c3:88:83:40:16:24:9f:44:2b:50:fa:7f:11:0b:
         3a:f2:28:77:86:46:b6:35:1a:ab:bb:3e:5d:5a:1d:d7:52:1e:
         66:97:3b:28:37:f3:32:9e:da:d1:82:c1:63:a0:30:87:f8:0c:
         a7:d1:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org