Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212983.roa
File:                     AS212983.roa (raw, json)
Hash identifier:          7z2qnu1N0GDcyOaclAtu/A+vH94mymZXWIL/IneTQ9g=
Subject key identifier:   B8:87:0E:9A:5D:94:D5:8C:F4:E4:22:72:ED:0A:02:16:13:0A:17:56
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0F1110E8814E8ED459373F0B4AA797601C73EED8
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212983.roa
Signing time:             Tue 05 Dec 2023 02:44:17 +0000
ROA not before:           Tue 05 Dec 2023 02:39:17 +0000
ROA not after:            Tue 03 Dec 2024 02:44:17 +0000
asID:                     212983
IP address blocks:        2a06:a005:13::/48 maxlen: 48
                          2a06:a005:43e::/48 maxlen: 48
                          2a06:a005:480::/48 maxlen: 48
                          2a06:a005:483::/48 maxlen: 48
                          2a06:a005:a04::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:11:10:e8:81:4e:8e:d4:59:37:3f:0b:4a:a7:97:60:1c:73:ee:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:17 2023 GMT
            Not After : Dec  3 02:44:17 2024 GMT
        Subject: CN=B8870E9A5D94D58CF4E42272ED0A0216130A1756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:8c:f1:7d:20:6c:57:29:7d:2b:52:fb:0f:
                    0e:39:b4:2d:82:e2:7a:51:1d:2e:fc:ba:c6:21:38:
                    76:4d:f3:90:02:c0:e4:15:1a:d3:0d:e7:d1:c6:75:
                    89:d7:b2:b5:8c:ff:32:8b:5e:c7:0d:86:0c:82:76:
                    c9:35:d7:9a:78:29:41:1d:f8:cd:64:63:fc:de:b0:
                    e9:b2:3e:bf:1d:9e:43:f7:69:13:7d:3b:92:71:fc:
                    d0:f1:4a:b8:fe:b2:34:ca:86:51:af:ab:28:8e:71:
                    c9:35:49:6e:3c:c8:44:ae:0d:63:73:7f:68:89:c8:
                    25:23:45:dc:fc:4a:67:b5:f2:e1:98:49:83:f6:da:
                    1a:30:54:f1:a6:a8:a7:c2:f8:c3:07:75:4c:58:0b:
                    45:b5:ba:22:8e:2e:65:c0:66:3d:59:5a:f9:ac:a6:
                    f2:68:4e:2b:d1:c4:24:5f:70:b2:e3:22:05:d1:c7:
                    f1:77:72:4f:fa:95:92:5a:59:b0:54:e4:e2:a1:0f:
                    24:b1:83:8f:7a:96:59:33:64:a6:21:53:1f:7d:ec:
                    72:ce:d6:b8:c2:9b:e9:89:27:a7:ed:12:a7:1c:f7:
                    d3:f5:a0:96:61:9b:51:a9:83:ff:23:55:ea:61:1b:
                    f1:e4:cd:53:e1:38:b0:7a:a2:f7:99:0d:3e:76:4d:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:87:0E:9A:5D:94:D5:8C:F4:E4:22:72:ED:0A:02:16:13:0A:17:56
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:13::/48
                  2a06:a005:43e::/48
                  2a06:a005:480::/48
                  2a06:a005:483::/48
                  2a06:a005:a04::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:a6:0b:ba:42:c9:29:7f:79:e7:9f:6c:92:99:5f:59:b2:a4:
         53:a5:fc:44:ad:22:08:e0:ac:84:a6:3b:b0:c0:bc:9f:4d:c8:
         a2:48:6e:3e:32:51:2a:6c:cd:4c:e4:91:d8:10:ae:9a:ce:9f:
         93:e8:b6:3c:3a:ee:56:b4:b9:db:e9:08:36:aa:f4:6c:c5:a4:
         f6:4e:17:08:ee:3e:f4:c5:6d:e1:6a:f1:59:50:c8:18:9a:7f:
         48:e0:8e:72:3e:59:a8:65:d7:4b:ca:e0:ec:0c:a6:08:10:28:
         a2:e8:f5:f5:ea:59:18:3e:e2:a4:8a:5a:b6:0d:6e:ab:47:6f:
         62:f9:14:69:3d:cb:9f:ec:77:f4:e6:ae:c7:0d:c3:a8:53:a1:
         74:11:b1:92:25:15:0a:ef:89:63:7f:5b:e7:ce:99:aa:b8:26:
         71:0d:2f:79:3b:84:95:2e:c7:05:b9:26:57:2d:81:40:16:f6:
         8b:0d:4a:0c:5a:69:37:9d:32:35:e9:f6:13:94:2a:f5:3a:3c:
         99:60:58:41:1e:73:c7:18:00:d6:91:c3:b1:02:0c:7a:d3:90:
         f8:52:dc:74:f8:08:aa:f6:f8:93:c1:0c:de:6e:a3:ed:fe:18:
         aa:b9:0a:49:9f:77:03:a2:51:16:eb:5c:90:31:53:ee:dd:65:
         8c:01:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org