Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50755.roa
File:                     AS50755.roa (raw, json)
Hash identifier:          TuIBs8APNaceAbJRkKKDBx9KRfhsq+Dzdvak1TCFjTc=
Subject key identifier:   95:2B:DE:B8:1A:FF:8A:14:0A:32:E5:34:D7:05:26:8B:0E:F8:C6:D1
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       0385B0B04B30F26D9203523E8C63CDFD363EDC77
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50755.roa
Signing time:             Fri 09 Feb 2024 14:44:24 +0000
ROA not before:           Fri 09 Feb 2024 14:39:24 +0000
ROA not after:            Fri 07 Feb 2025 14:44:24 +0000
asID:                     50755
IP address blocks:        2a06:a005:2ee0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:85:b0:b0:4b:30:f2:6d:92:03:52:3e:8c:63:cd:fd:36:3e:dc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb  9 14:39:24 2024 GMT
            Not After : Feb  7 14:44:24 2025 GMT
        Subject: CN=952BDEB81AFF8A140A32E534D705268B0EF8C6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:c4:f2:79:e4:c0:ef:af:14:56:8a:75:f4:
                    14:bf:8d:21:86:1e:44:b4:b2:e4:8b:9e:b8:91:89:
                    9f:7a:0d:36:38:16:d0:a7:06:07:c9:bd:43:7b:ae:
                    70:7e:c6:5d:9f:f2:c2:da:29:f1:03:0d:b6:61:15:
                    85:6a:c4:02:26:39:3c:50:ab:3e:1d:14:eb:75:09:
                    ea:ed:e9:5b:dd:e9:54:6f:c0:13:d5:3b:fc:7d:8d:
                    ea:39:e8:6e:d7:48:42:e6:3c:04:d3:c3:2d:3c:37:
                    fa:a5:66:ce:f6:65:22:8b:a5:5d:f0:d8:18:9b:2d:
                    e3:40:b0:79:2b:41:21:b0:57:91:56:e5:a4:18:fc:
                    a9:a3:26:4a:4c:36:5c:42:ef:9d:4e:db:23:62:09:
                    e7:69:72:f4:7f:e4:a3:6e:89:69:12:97:63:52:d4:
                    e2:00:f3:d7:66:a7:2c:1c:6e:03:df:e9:b3:9e:b5:
                    55:fa:92:36:93:84:d5:1c:0f:f4:af:f2:6b:ff:a0:
                    32:68:65:4d:77:a2:34:2b:46:ed:f5:19:e7:4a:d4:
                    da:d5:eb:1c:73:be:94:9e:4e:66:71:0d:a2:ad:d4:
                    58:db:96:a0:ce:4a:76:fc:ff:39:4f:9d:f8:e7:9d:
                    b6:bd:5c:a5:91:02:69:d0:dd:0e:64:20:ae:7c:86:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2B:DE:B8:1A:FF:8A:14:0A:32:E5:34:D7:05:26:8B:0E:F8:C6:D1
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b3:42:42:c3:72:b1:f9:ef:ba:88:12:bf:1d:76:77:8a:9c:a4:
         28:e8:d1:9c:ab:11:9c:fa:6c:9e:6a:5d:3c:79:25:c3:bc:89:
         ee:44:8a:a9:10:06:43:15:a3:dc:da:ee:34:fd:bf:19:7b:58:
         32:68:65:f7:c2:64:a4:37:0b:e2:be:bb:66:44:d5:cd:42:28:
         71:4b:28:48:c7:4d:06:1d:30:4f:e8:18:55:e4:9f:3d:ef:5c:
         2b:9c:09:f7:eb:96:a3:34:cc:1f:53:c2:8a:62:e2:b7:f9:c1:
         91:fe:39:3d:64:d7:2b:ad:72:0c:eb:10:07:f3:27:58:52:47:
         64:99:e2:d6:46:9d:49:05:7e:bd:0f:3b:6b:99:5f:69:9a:b0:
         37:37:94:4b:45:6b:56:7d:3a:de:aa:95:28:08:8c:28:6f:90:
         2c:7c:f6:82:b7:ea:d2:dd:54:1b:58:17:cd:9b:b2:01:ae:af:
         85:47:aa:49:46:ef:08:28:32:2a:5b:3e:eb:5d:2b:7e:7e:b8:
         8d:6d:1a:54:8f:0d:c1:3f:c1:45:d1:61:62:38:88:99:7b:71:
         5e:f3:79:d3:92:71:b4:ee:bf:40:1e:67:48:13:4f:03:ae:e7:
         e5:aa:27:5f:f0:17:8c:20:45:1b:4b:e7:44:b9:63:04:65:2c:
         ba:55:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org