Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa
File:                     AS216409.roa (raw, json)
Hash identifier:          9pA5H/dqsuJ9WrTG/OCxHvCxm6pqbffY/FHCb+f7F0s=
Subject key identifier:   E6:E4:50:82:82:C5:AF:FB:61:DA:2B:7C:C9:E4:D8:D3:42:0B:A6:0F
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2AB54ED6C14B9F0B21DE43A522D867FA0BB4BCC7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa
Signing time:             Mon 15 Apr 2024 19:20:21 +0000
ROA not before:           Mon 15 Apr 2024 19:15:21 +0000
ROA not after:            Mon 14 Apr 2025 19:20:21 +0000
asID:                     216409
IP address blocks:        94.24.109.0/24 maxlen: 24
                          2a05:dfc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b5:4e:d6:c1:4b:9f:0b:21:de:43:a5:22:d8:67:fa:0b:b4:bc:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr 15 19:15:21 2024 GMT
            Not After : Apr 14 19:20:21 2025 GMT
        Subject: CN=E6E4508282C5AFFB61DA2B7CC9E4D8D3420BA60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:75:d9:b5:8a:6b:77:e8:c3:14:20:ef:9f:
                    b7:f6:cc:24:d2:c4:d3:e8:88:f1:17:9d:cf:e2:1f:
                    e0:d2:ad:4c:f8:bc:12:9c:f7:e9:48:31:b7:49:87:
                    56:2d:14:8f:74:f7:b1:88:58:ce:99:9a:27:51:5d:
                    d2:de:df:02:a2:38:26:34:d0:15:de:6e:eb:ae:27:
                    5b:84:55:41:3e:c3:d2:8e:d4:2f:fd:80:3d:83:26:
                    d4:8e:0d:4b:00:69:ea:d5:99:98:c4:4e:63:a1:6e:
                    4d:24:08:30:01:1d:a2:d3:8b:ed:06:0e:b7:93:b1:
                    9b:99:c5:32:ba:2a:a8:48:62:5f:26:7f:db:48:5a:
                    7d:96:d7:14:0f:1b:f2:02:a9:14:21:84:cf:5f:b1:
                    67:5f:98:af:5e:00:f0:f2:a9:dd:99:ea:4f:7e:5d:
                    eb:fe:e6:a7:27:70:69:70:b8:52:57:14:2e:2f:22:
                    4d:34:6c:31:5a:fa:9a:eb:c5:29:a1:48:88:2f:36:
                    ce:ea:2a:9b:23:2c:9d:4b:df:7b:ee:9a:41:8c:aa:
                    33:d0:c5:e3:99:31:a9:83:6c:76:5d:47:79:2e:92:
                    2e:e1:62:f8:9e:26:d0:a4:63:05:a4:ca:7e:2b:44:
                    c9:66:db:84:66:b5:38:35:00:c7:3b:39:90:dc:3f:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E4:50:82:82:C5:AF:FB:61:DA:2B:7C:C9:E4:D8:D3:42:0B:A6:0F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.24.109.0/24
                IPv6:
                  2a05:dfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:43:3a:8f:47:69:0a:c4:79:2d:51:92:1a:c1:12:ab:11:09:
         3a:14:74:3b:82:4d:3b:45:93:22:b4:46:a8:97:64:06:5a:e5:
         6d:52:5e:ba:36:09:f0:02:ea:8e:15:b4:f8:8f:ea:30:87:0d:
         27:86:c2:31:a9:be:16:bb:33:a5:84:62:ac:01:ea:ae:12:7e:
         fc:ef:39:88:97:96:c6:51:89:73:d5:41:e7:ec:9b:a4:81:88:
         0c:93:7f:52:a1:79:29:c5:45:ae:58:62:22:73:54:44:bd:3f:
         a2:9b:b5:6c:e9:35:dc:7c:23:3a:94:0d:f3:df:d2:e7:ba:de:
         b2:9f:70:95:94:8f:27:da:77:76:ae:34:e4:b1:b3:07:77:20:
         e5:cc:46:d6:9d:f4:f0:3e:3e:6d:b5:5b:56:96:be:fa:4c:02:
         da:30:e0:db:d2:c7:4f:e5:89:11:56:52:62:f6:3c:15:86:68:
         77:a6:01:99:68:aa:a5:5f:36:4b:9f:51:23:23:9b:c5:44:cc:
         cb:c1:ce:6e:71:1c:dc:ca:62:cf:b8:ce:e2:0c:89:b3:73:2c:
         02:db:d6:45:27:58:c5:39:f7:93:7f:06:0c:4f:8d:d6:0e:3d:
         08:3f:f4:07:8f:3d:ec:cb:ca:4f:51:a5:3f:2f:7a:0c:76:c3:
         60:8c:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----