Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa
File:                     AS264660.roa (raw, json)
Hash identifier:          sILBAqYgGltqXMB6sBiPzwr3J7YGIonoASyFKC4VJkQ=
Subject key identifier:   8C:0B:14:13:97:1C:46:94:7A:40:C4:70:AD:32:BB:69:8C:3C:5B:BE
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       1167CE404AB11CBFBBAFE4C0A660DA71BA5DECE0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa
Signing time:             Sat 23 Dec 2023 10:44:21 +0000
ROA not before:           Sat 23 Dec 2023 10:39:21 +0000
ROA not after:            Sat 21 Dec 2024 10:44:21 +0000
asID:                     264660
IP address blocks:        2a06:a005:1086::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:67:ce:40:4a:b1:1c:bf:bb:af:e4:c0:a6:60:da:71:ba:5d:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec 23 10:39:21 2023 GMT
            Not After : Dec 21 10:44:21 2024 GMT
        Subject: CN=8C0B1413971C46947A40C470AD32BB698C3C5BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:68:1d:39:38:8d:f4:52:ff:7f:00:ca:fe:
                    e6:e2:ae:49:a2:53:1f:46:01:81:4a:c9:de:4e:11:
                    2a:42:9c:87:57:9d:d2:19:4a:c4:e3:60:34:85:3f:
                    92:b8:48:bd:72:c0:db:9b:b1:38:a2:e8:e1:96:b2:
                    41:14:3e:a8:c3:39:f8:62:a5:d6:71:6e:f6:2b:94:
                    a9:a2:27:28:cc:6d:d7:31:21:ca:14:39:b1:0c:32:
                    13:90:cb:26:6b:98:72:04:3e:e7:3c:fe:a5:df:a4:
                    c3:b2:d0:ff:cc:f8:01:85:8b:82:1b:f3:07:31:39:
                    54:56:44:af:99:39:74:d1:1e:4c:d6:ee:4c:88:69:
                    e2:05:ea:74:d5:67:52:87:4c:3f:56:e5:e6:53:dc:
                    b2:e3:59:6b:61:95:9a:58:00:65:7b:7e:f0:97:24:
                    4f:fc:d1:60:10:78:2e:f9:7a:7f:fb:39:f9:37:81:
                    e5:3b:1e:1e:70:26:84:63:27:f0:2b:e4:6c:9f:a0:
                    c7:5b:b2:7e:fb:49:5f:97:98:71:fd:52:91:2f:4c:
                    73:3a:f5:0b:cb:7f:de:8e:dd:6e:e0:ec:0e:0c:07:
                    e1:22:a2:52:92:05:07:53:ad:08:0a:a6:d6:ae:bb:
                    c9:57:d9:59:a7:78:5d:d7:fd:e8:cf:cd:ec:c5:4d:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:14:13:97:1C:46:94:7A:40:C4:70:AD:32:BB:69:8C:3C:5B:BE
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1086::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:ad:c2:40:68:ca:14:37:a1:2f:6f:ab:34:32:92:e2:f0:
         22:5b:02:3f:23:96:ba:50:87:4c:c1:d8:98:71:87:b7:32:81:
         8a:2c:78:32:3c:b7:43:59:ca:5d:d7:97:49:d6:a2:25:0d:11:
         18:78:51:50:cc:92:d1:b8:d8:43:d6:20:20:12:35:05:a0:41:
         ec:22:88:89:14:d1:86:ea:93:b6:92:d2:b9:79:aa:32:4b:91:
         11:ed:50:44:16:7f:40:db:1e:96:f0:9b:38:ce:ee:6a:76:df:
         95:ee:c8:b5:dd:6f:b8:4c:d0:69:1d:9b:53:72:c3:ca:de:60:
         7f:f1:04:7a:9d:19:71:55:d3:ff:13:27:2f:c7:09:da:ff:48:
         3a:3f:bc:9a:93:53:d5:d0:34:1c:73:cf:73:11:a6:69:3f:29:
         fd:fb:8c:14:45:f1:c1:fa:51:23:2a:8f:29:ac:c8:51:56:83:
         d4:41:1e:b1:ba:1b:be:0c:ae:17:87:8b:91:8a:72:c0:de:5c:
         9f:f2:60:c8:04:9f:01:b5:de:a2:c4:f9:62:81:35:ac:60:c4:
         7d:98:c6:dd:e6:a0:93:27:df:f9:e6:b7:52:99:14:af:38:0d:
         12:9e:33:f0:0e:a0:5b:19:74:e4:6d:ab:a8:04:40:55:3d:3a:
         b8:7f:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:56:12 2024 by rpki-client on console-fra.rpki-client.org