Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212895.roa
File:                     AS212895.roa (raw, json)
Hash identifier:          +erexsV8aJNTB4fZ3OqOWIWDnT4HryxArTmCYbaZHjw=
Subject key identifier:   0E:AF:03:BB:8D:CD:13:73:47:7E:2C:CF:D2:5B:96:2F:A0:4C:99:D2
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       1CD167D7C1B507198A2756E7F1BB9A6D952B37B5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212895.roa
Signing time:             Tue 05 Dec 2023 02:44:14 +0000
ROA not before:           Tue 05 Dec 2023 02:39:14 +0000
ROA not after:            Tue 03 Dec 2024 02:44:14 +0000
asID:                     212895
IP address blocks:        2a06:a005:5d0::/44 maxlen: 48
                          2a06:a005:6d0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d1:67:d7:c1:b5:07:19:8a:27:56:e7:f1:bb:9a:6d:95:2b:37:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:14 2023 GMT
            Not After : Dec  3 02:44:14 2024 GMT
        Subject: CN=0EAF03BB8DCD1373477E2CCFD25B962FA04C99D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d2:91:2f:4b:72:99:76:b0:aa:66:3a:c1:b1:
                    4b:c5:2f:30:4b:cf:45:0c:90:a0:ea:a3:aa:bb:f4:
                    32:51:60:5c:92:65:9e:ca:92:7d:e1:cb:d0:20:91:
                    35:35:a2:8a:81:f9:08:38:0d:60:f6:43:01:42:e2:
                    bd:45:59:80:ec:a4:d0:2f:18:a5:d9:1c:0a:48:88:
                    7b:76:23:b5:e7:9b:a4:27:ac:4c:a7:2b:c6:b1:99:
                    34:71:2f:2c:7a:17:9b:80:aa:77:52:f9:fb:d2:d1:
                    52:44:56:48:b6:4a:95:84:22:f2:05:20:0e:07:84:
                    c4:4c:ed:13:cf:58:b6:4c:cb:96:aa:3a:5a:36:46:
                    1b:b7:1d:36:43:90:ac:b7:41:d4:e9:85:9d:64:eb:
                    0b:0c:01:93:77:42:7a:0a:64:1f:5c:b3:14:d3:60:
                    fd:7e:2f:dc:81:94:08:3a:ca:9b:86:36:55:6a:37:
                    09:0d:0c:35:4e:8b:e5:68:27:e3:1c:1c:a5:43:07:
                    38:a8:8d:5d:04:12:91:4e:66:d2:ab:28:bb:6c:06:
                    e2:0d:a1:dc:78:48:50:0d:07:e8:ad:33:59:67:c2:
                    07:1a:5d:09:4a:5d:33:8c:ad:8c:ef:ca:d9:a6:6d:
                    a5:1a:2f:7c:f6:fd:e6:c8:3f:ea:1c:c4:72:f3:64:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AF:03:BB:8D:CD:13:73:47:7E:2C:CF:D2:5B:96:2F:A0:4C:99:D2
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212895.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5d0::/44
                  2a06:a005:6d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:4f:3f:63:bc:99:69:38:c6:55:39:24:da:d2:22:4e:1d:e2:
         0f:17:99:50:75:39:d1:d0:38:50:c3:6d:a7:82:6e:ec:48:ab:
         87:3f:4f:70:97:ad:bd:89:fd:79:fe:42:eb:c8:3d:93:b1:44:
         e8:77:6c:84:65:85:cf:80:87:18:06:1e:60:02:65:78:8b:83:
         07:ff:9d:e7:24:4e:1f:a4:43:ee:26:8b:db:d1:1e:ce:0c:f4:
         5f:78:d5:4a:06:bb:7a:e1:30:59:08:72:3a:44:69:10:cd:39:
         8d:92:88:7b:2f:31:c7:b9:50:ef:92:c9:4f:3f:77:15:58:e1:
         3f:65:40:6f:7b:14:5c:1a:20:ba:00:f8:64:98:3b:55:9f:d8:
         c4:92:d6:00:b2:3c:f3:70:46:e0:0a:e6:d8:d3:d1:bb:4c:52:
         65:8e:49:40:b9:bb:0f:6e:23:90:cc:2c:77:d9:d3:23:99:7f:
         ab:b7:8f:f4:c6:97:4d:04:50:9a:18:c5:7e:cd:bf:9d:b3:98:
         d2:c1:5d:1c:f2:04:47:68:8d:90:e1:6b:a3:a6:4d:22:07:27:
         08:ba:63:80:cc:74:64:e1:ec:7f:f4:93:9d:63:43:cf:23:5e:
         60:8f:06:aa:8b:db:00:05:c1:7d:ec:3a:91:2a:eb:05:36:c2:
         27:18:ee:d8
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUHNFn18G1BxmKJ1bn8buabZUrN7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTRaFw0yNDEyMDMwMjQ0MTRaMDMxMTAvBgNV
BAMTKDBFQUYwM0JCOERDRDEzNzM0NzdFMkNDRkQyNUI5NjJGQTA0Qzk5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD10pEvS3KZdrCqZjrBsUvFLzBL
z0UMkKDqo6q79DJRYFySZZ7Kkn3hy9AgkTU1ooqB+Qg4DWD2QwFC4r1FWYDspNAv
GKXZHApIiHt2I7Xnm6QnrEynK8axmTRxLyx6F5uAqndS+fvS0VJEVki2SpWEIvIF
IA4HhMRM7RPPWLZMy5aqOlo2Rhu3HTZDkKy3QdTphZ1k6wsMAZN3QnoKZB9csxTT
YP1+L9yBlAg6ypuGNlVqNwkNDDVOi+VoJ+McHKVDBziojV0EEpFOZtKrKLtsBuIN
odx4SFANB+itM1lnwgcaXQlKXTOMrYzvytmmbaUaL3z2/ebIP+ocxHLzZHdDAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUDq8Du43NE3NHfizP0luWL6BMmdIwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEyODk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcEKgagBQXQAwcEKgagBQbQMA0GCSqGSIb3DQEBCwUA
A4IBAQB2Tz9jvJlpOMZVOSTa0iJOHeIPF5lQdTnR0DhQw22ngm7sSKuHP09wl629
if15/kLryD2TsUTod2yEZYXPgIcYBh5gAmV4i4MH/53nJE4fpEPuJovb0R7ODPRf
eNVKBrt64TBZCHI6RGkQzTmNkoh7LzHHuVDvkslPP3cVWOE/ZUBvexRcGiC6APhk
mDtVn9jEktYAsjzzcEbgCubY09G7TFJljklAubsPbiOQzCx32dMjmX+rt4/0xpdN
BFCaGMV+zb+ds5jSwV0c8gRHaI2Q4Wujpk0iBycIumOAzHRk4ex/9JOdY0PPI15g
jwaqi9sABcF97DqRKusFNsInGO7Y
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org