Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50833.roa
File:                     AS50833.roa (raw, json)
Hash identifier:          /qVmfR/ZmCj6CH0266iq8sN09yVtZd1MpfFZzQuNFeM=
Subject key identifier:   B1:24:B2:C7:37:69:D9:8F:7C:96:4C:23:AB:3C:7F:B4:D1:E4:7B:4B
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3FF11FD4AF6EF25E3D9BE58726344F9B629A4F24
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50833.roa
Signing time:             Tue 05 Dec 2023 02:44:16 +0000
ROA not before:           Tue 05 Dec 2023 02:39:16 +0000
ROA not after:            Tue 03 Dec 2024 02:44:16 +0000
asID:                     50833
IP address blocks:        2a06:a005:2d2::/48 maxlen: 48
                          2a06:a005:a09::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f1:1f:d4:af:6e:f2:5e:3d:9b:e5:87:26:34:4f:9b:62:9a:4f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:16 2023 GMT
            Not After : Dec  3 02:44:16 2024 GMT
        Subject: CN=B124B2C73769D98F7C964C23AB3C7FB4D1E47B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:b7:a5:53:5f:3c:9d:43:8c:af:37:e2:ac:
                    ee:51:99:57:21:c1:96:9c:b1:bf:01:48:62:a5:eb:
                    26:57:83:e2:ff:46:62:b5:45:a1:05:0d:28:c8:83:
                    6a:0c:85:be:79:01:49:d1:df:ab:38:1e:28:61:92:
                    33:ee:5d:c4:0c:fb:de:c2:eb:36:16:25:09:85:71:
                    29:99:f5:12:10:db:1b:30:f9:dd:7d:86:0d:b0:01:
                    0c:ff:79:cb:a7:08:17:61:c3:b0:34:1f:29:99:b3:
                    c5:bc:fa:5f:d4:7d:4c:7e:09:21:fd:e2:a7:1a:7e:
                    3b:ac:1d:6e:27:b7:c6:6a:43:55:87:85:2b:cd:d2:
                    8b:2d:88:6a:8f:c9:a7:ea:5a:30:d1:c1:30:ed:1a:
                    cd:6b:9c:dc:74:87:92:f0:45:24:d8:7e:88:ae:42:
                    0b:c9:89:fe:ed:90:0e:98:16:d0:80:5c:40:f8:66:
                    85:eb:0b:0a:65:87:43:40:38:b2:a3:1f:b6:b5:d1:
                    2d:f3:9d:52:9c:95:3a:1b:a2:0d:75:0e:4a:45:91:
                    5e:8e:dc:5b:f6:10:c4:7d:0d:87:8d:8a:f1:94:98:
                    a3:58:9b:dd:ba:a7:1f:09:80:f1:31:25:d7:c9:3d:
                    fc:59:ff:2b:23:e4:08:1d:0d:21:80:0c:a2:3e:fd:
                    9c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:B2:C7:37:69:D9:8F:7C:96:4C:23:AB:3C:7F:B4:D1:E4:7B:4B
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d2::/48
                  2a06:a005:a09::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:d6:bf:32:b9:79:c6:43:e1:f1:7a:66:32:4d:a2:13:a4:
         ba:c3:2f:9f:cd:d1:d6:ed:9a:fc:ef:a1:f0:3c:e4:b4:86:43:
         7e:77:0a:e7:0c:09:26:3d:2f:78:77:0a:08:ae:59:96:c2:34:
         79:2d:22:cb:e3:6f:00:41:28:90:1d:dc:5a:0c:21:0b:16:aa:
         3b:ee:d1:ca:fc:8e:05:8b:27:5d:64:95:60:d5:32:3d:67:2e:
         c5:32:11:0b:00:76:ab:6e:bb:8c:3d:d3:87:fe:af:3c:95:56:
         c2:35:da:20:e3:a1:c9:65:c8:9c:32:a8:56:63:c9:74:60:b9:
         9c:77:8f:f8:d8:15:ff:14:96:41:71:fa:93:59:80:30:0d:3f:
         7a:65:05:5a:d2:80:1f:f8:e7:cc:00:18:15:ef:89:3a:1b:9d:
         f3:17:92:f3:55:0b:96:e8:68:cc:35:d0:38:7e:fd:93:f4:31:
         0c:b1:e5:e4:94:a1:22:80:65:59:ad:a2:00:84:dd:50:a3:7c:
         d8:fa:31:c7:27:28:63:50:a8:67:5d:8b:85:79:eb:58:16:bf:
         91:32:dc:e7:b9:40:54:88:2a:18:a0:62:7c:00:dd:02:4c:ff:
         78:5c:5a:20:05:fc:d6:70:91:96:37:89:3d:b2:08:d2:cd:5a:
         23:7b:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:57 2024 by rpki-client on console-fra.rpki-client.org