Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51019.roa
File:                     AS51019.roa (raw, json)
Hash identifier:          jrnLVfKPKwn9qrbZBl70kU/Dy41CeXqkhGLFyOilFKU=
Subject key identifier:   B9:A8:C2:E2:42:9B:06:8E:44:0C:95:2B:6D:72:36:C8:4B:D9:FA:9B
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6B02309F8EDAF9DB02A618937E3BEAC0F36B0F2C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51019.roa
Signing time:             Tue 05 Nov 2024 03:40:03 +0000
ROA not before:           Tue 05 Nov 2024 03:35:03 +0000
ROA not after:            Tue 04 Nov 2025 03:40:03 +0000
asID:                     51019
IP address blocks:        2a06:a005:437::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:02:30:9f:8e:da:f9:db:02:a6:18:93:7e:3b:ea:c0:f3:6b:0f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:03 2024 GMT
            Not After : Nov  4 03:40:03 2025 GMT
        Subject: CN=B9A8C2E2429B068E440C952B6D7236C84BD9FA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:03:ee:ce:60:09:ea:a9:34:95:9f:52:7c:
                    d1:24:d1:80:b6:19:69:27:44:e7:da:69:e0:96:b1:
                    46:5e:83:f7:bd:1d:53:ef:ab:b1:27:ad:52:a8:c3:
                    1a:1f:b9:25:0d:7b:7d:96:34:17:5d:c4:50:64:26:
                    e8:02:80:df:13:e8:60:80:3c:c0:a5:93:02:cb:46:
                    3a:ca:65:d6:57:1f:34:aa:0d:39:a8:26:ed:8e:0f:
                    a6:e7:fb:5f:63:90:5f:ea:48:ec:fc:fe:50:ff:38:
                    63:72:1c:11:3c:42:be:37:f4:da:f1:7e:cf:1b:72:
                    98:cb:82:46:ea:76:0a:8f:46:bb:ff:10:64:df:87:
                    61:17:aa:25:01:a1:43:a5:a0:af:bc:09:62:03:e5:
                    5f:ed:33:df:34:a1:d9:6d:f3:b4:cd:ef:db:11:d9:
                    dd:42:e5:cf:43:ec:1b:89:9c:61:30:7c:9c:fe:dc:
                    49:e5:a3:0d:24:01:50:df:32:79:ee:95:68:f3:7a:
                    ce:be:3c:08:d3:3f:37:01:37:e5:d3:64:bb:99:ff:
                    63:ac:9e:58:80:5c:98:9b:51:45:d1:87:89:20:85:
                    a0:39:bf:4b:37:33:df:1f:01:f1:b9:93:87:98:ab:
                    bc:e5:cb:52:cd:7f:36:6e:d1:d3:32:94:b6:5d:bb:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A8:C2:E2:42:9B:06:8E:44:0C:95:2B:6D:72:36:C8:4B:D9:FA:9B
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:3d:54:2b:92:57:26:d7:a6:33:db:2f:86:f5:bc:de:7f:21:
         75:03:c3:aa:9b:81:e3:c1:55:2b:5a:a6:72:76:74:2e:11:d9:
         81:09:cc:d9:91:86:67:05:dc:d0:70:80:91:30:96:86:93:35:
         db:a6:87:b6:46:f2:63:5d:a3:5d:71:11:ac:47:a9:50:b1:75:
         86:7a:da:2c:60:e5:21:43:f4:5e:10:da:c4:9d:04:51:c8:59:
         e6:78:ae:6a:2e:5e:91:f1:b9:a3:d4:cc:dc:96:a8:f0:04:2d:
         f2:bf:34:b7:7c:60:af:04:ad:97:bb:dd:d6:97:6d:1d:cc:f6:
         e7:94:89:67:77:00:6a:09:de:df:1c:7d:3a:11:c7:84:e9:c5:
         b9:f1:2a:8e:b2:b9:61:95:c5:73:fd:2d:08:6e:33:8d:53:d3:
         13:2d:f8:87:3e:32:45:4e:bb:aa:ab:e3:e2:00:c0:51:23:13:
         62:7a:06:08:50:f2:86:76:72:c5:b1:89:bc:38:1b:49:a5:e4:
         e9:5e:fa:a2:15:69:67:0a:56:f4:f8:7e:b5:7c:e4:19:54:7c:
         d4:4f:7d:00:7d:67:4d:03:99:c1:4e:18:7a:5c:c1:18:ef:ab:
         dd:3a:3f:7e:11:de:67:72:99:c0:f3:91:62:61:f1:9b:89:62:
         02:c4:1b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----