Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213105.roa
File:                     AS213105.roa (raw, json)
Hash identifier:          iR5A1h6cGN6b1w7JnegEeSh13iVtvlZJTQPjdd/9FUY=
Subject key identifier:   17:74:D1:A6:15:1F:E0:08:2C:99:CA:3E:33:33:68:14:73:BB:C6:A5
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5F6414106C0DEFE2D9AF4F87393A92C9DD3B55AA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213105.roa
Signing time:             Tue 05 Nov 2024 03:40:10 +0000
ROA not before:           Tue 05 Nov 2024 03:35:10 +0000
ROA not after:            Tue 04 Nov 2025 03:40:10 +0000
asID:                     213105
IP address blocks:        2a06:a005:1260::/44 maxlen: 48
                          2a06:a005:18e0::/44 maxlen: 48
                          2a06:a005:1d30::/44 maxlen: 48
                          2a06:a005:1f20::/44 maxlen: 48
                          2a06:a005:1f30::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:64:14:10:6c:0d:ef:e2:d9:af:4f:87:39:3a:92:c9:dd:3b:55:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:10 2024 GMT
            Not After : Nov  4 03:40:10 2025 GMT
        Subject: CN=1774D1A6151FE0082C99CA3E3333681473BBC6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:df:39:1a:f4:c1:73:3b:0b:d5:b7:76:05:
                    c5:af:f3:8c:90:c9:79:d8:3e:52:b5:83:16:e8:cc:
                    bc:9e:d1:5f:01:31:eb:1f:c7:55:6d:3e:5a:49:0e:
                    d1:03:ef:2b:9c:76:0e:b3:d8:92:38:98:a2:0f:2b:
                    75:32:48:8f:de:99:d2:3e:b7:1b:b5:67:53:44:43:
                    e9:f3:69:6f:10:b7:ae:d1:9e:35:40:8e:b0:14:2b:
                    94:70:88:68:05:ef:f1:4f:cd:c5:e8:c0:0d:88:6e:
                    c8:be:9d:96:fc:ff:21:4c:43:ab:15:fc:f6:7d:d4:
                    9e:b3:6a:0f:c5:9d:d9:06:82:35:09:60:1b:2e:6e:
                    31:49:6a:b9:c6:4f:63:96:ec:f2:91:cb:63:cc:55:
                    52:ea:cc:a1:39:54:7b:0b:07:16:c7:a5:0b:95:12:
                    cd:5f:36:48:0f:a9:36:23:e7:98:a5:13:57:97:84:
                    bc:9b:3b:fe:5e:a0:6a:50:64:2a:86:ce:08:ca:a6:
                    c0:51:c4:6a:0b:6f:0c:c6:49:2b:89:17:62:6f:b3:
                    08:40:d6:31:25:99:da:94:e3:40:ee:12:e2:fd:e1:
                    9e:f4:c8:e0:a8:71:99:76:30:24:88:06:04:c0:99:
                    93:9b:64:ac:a4:00:bf:aa:a7:66:3d:88:e9:67:2d:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:74:D1:A6:15:1F:E0:08:2C:99:CA:3E:33:33:68:14:73:BB:C6:A5
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1260::/44
                  2a06:a005:18e0::/44
                  2a06:a005:1d30::/44
                  2a06:a005:1f20::/43

    Signature Algorithm: sha256WithRSAEncryption
         2b:3c:96:8e:bb:7a:6b:9f:be:0a:2a:9a:32:f6:b0:8d:3d:6e:
         b7:4d:74:fc:f5:cb:d1:60:b7:36:bb:1d:2f:e0:87:bd:2d:ca:
         51:38:ee:44:4c:8c:70:6a:40:43:cb:21:94:59:9a:ed:cc:38:
         73:f4:0e:bd:09:6e:95:3e:7a:3a:0f:34:90:af:bb:b2:e1:10:
         4c:8a:6c:67:60:b4:d1:50:cd:ca:80:e8:46:5f:4f:d7:9f:4c:
         63:28:c9:ad:b6:b9:fc:2b:9d:4a:90:a0:c0:81:ce:e7:be:3b:
         d6:7f:b8:f0:d1:7d:1c:c0:65:c3:94:d5:e8:a7:24:83:13:01:
         c4:6c:73:df:e8:09:5a:9f:5c:8f:81:ad:09:fe:8d:fa:ee:82:
         0c:c6:93:62:df:40:74:8a:4a:e4:60:64:7c:76:86:25:ef:ea:
         1d:2d:02:4b:42:f9:d8:71:4c:8b:01:9a:04:4d:e0:ba:1b:02:
         75:b3:59:7f:c8:fc:88:98:df:46:9b:11:ac:7e:4e:72:81:8c:
         75:99:7c:d2:72:f7:19:8d:df:55:04:c5:54:28:cc:25:50:90:
         4d:89:a4:bc:db:1b:9a:47:29:8a:76:53:44:35:89:58:45:0c:
         1d:34:2c:1e:41:3a:65:58:fc:11:a4:fa:da:f8:24:1f:f2:04:
         9c:c5:b5:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUX2QUEGwN7+LZr0+HOTqSyd07VaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MTBaFw0yNTExMDQwMzQwMTBaMDMxMTAvBgNV
BAMTKDE3NzREMUE2MTUxRkUwMDgyQzk5Q0EzRTMzMzM2ODE0NzNCQkM2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPV985GvTBczsL1bd2BcWv84yQ
yXnYPlK1gxbozLye0V8BMesfx1VtPlpJDtED7yucdg6z2JI4mKIPK3UySI/emdI+
txu1Z1NEQ+nzaW8Qt67RnjVAjrAUK5RwiGgF7/FPzcXowA2Ibsi+nZb8/yFMQ6sV
/PZ91J6zag/FndkGgjUJYBsubjFJarnGT2OW7PKRy2PMVVLqzKE5VHsLBxbHpQuV
Es1fNkgPqTYj55ilE1eXhLybO/5eoGpQZCqGzgjKpsBRxGoLbwzGSSuJF2JvswhA
1jElmdqU40DuEuL94Z70yOCocZl2MCSIBgTAmZObZKykAL+qp2Y9iOlnLYQ/AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUF3TRphUf4Agsmco+MzNoFHO7xqUwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEzMTA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEH
AQH/BC4wLDAqBAIAAjAkAwcEKgagBRJgAwcEKgagBRjgAwcEKgagBR0wAwcFKgag
BR8gMA0GCSqGSIb3DQEBCwUAA4IBAQArPJaOu3prn74KKpoy9rCNPW63TXT89cvR
YLc2ux0v4Ie9LcpROO5ETIxwakBDyyGUWZrtzDhz9A69CW6VPno6DzSQr7uy4RBM
imxnYLTRUM3KgOhGX0/Xn0xjKMmttrn8K51KkKDAgc7nvjvWf7jw0X0cwGXDlNXo
pySDEwHEbHPf6Alan1yPga0J/o367oIMxpNi30B0ikrkYGR8doYl7+odLQJLQvnY
cUyLAZoETeC6GwJ1s1l/yPyImN9GmxGsfk5ygYx1mXzScvcZjd9VBMVUKMwlUJBN
iaS82xuaRymKdlNENYlYRQwdNCweQTplWPwRpPra+CQf8gScxbUX
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:55 2024 by rpki-client on console-ams.rpki-client.org