Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS52210.roa
File:                     AS52210.roa (raw, json)
Hash identifier:          cFWDftleWCammoKOhlqXzCEOalyzTTiDOuMSZM6w978=
Subject key identifier:   3A:25:D4:F5:67:4F:EB:D7:3C:F7:24:3F:C1:0A:D8:B0:92:82:A8:E1
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5C30F414E0C471FC47A912B4579754A5E6655824
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS52210.roa
Signing time:             Sun 05 Mar 2023 20:08:03 +0000
ROA not before:           Sun 05 Mar 2023 20:03:03 +0000
ROA not after:            Sun 03 Mar 2024 20:08:03 +0000
asID:                     52210
IP address blocks:        2a06:a005:45d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jul 2023 12:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:30:f4:14:e0:c4:71:fc:47:a9:12:b4:57:97:54:a5:e6:65:58:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar  5 20:03:03 2023 GMT
            Not After : Mar  3 20:08:03 2024 GMT
        Subject: CN=3A25D4F5674FEBD73CF7243FC10AD8B09282A8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:7a:40:4d:96:ca:72:29:36:8a:69:18:9f:
                    31:3d:95:80:e3:c7:b8:7b:f9:d3:6f:78:ab:7f:c7:
                    80:66:52:1e:f2:ac:ae:2b:6c:09:72:4a:5f:9c:0b:
                    13:1f:54:94:81:84:06:a5:f6:60:bb:63:8a:89:42:
                    16:06:35:26:3c:f3:e8:50:68:bd:b9:da:17:52:41:
                    d3:4b:30:b7:8b:14:c2:49:3e:2e:6a:c0:f1:f3:e2:
                    71:a9:05:ed:d7:01:1c:c8:87:60:31:32:5f:01:46:
                    78:44:34:96:b5:4a:e1:10:30:58:8b:e3:1b:bf:dd:
                    ae:09:62:14:ff:fe:7d:ca:58:d5:87:42:0f:22:e2:
                    33:11:dc:35:a0:d0:5d:47:11:f0:85:09:b7:ca:a3:
                    66:36:69:24:22:9e:75:7a:82:0b:83:5c:12:85:37:
                    78:59:36:48:9b:b7:62:3b:74:aa:ec:0e:b5:29:83:
                    67:a3:a3:b9:d1:52:5c:c0:63:84:b0:59:85:5d:91:
                    2d:06:61:66:cb:cc:b8:fa:60:43:c4:b8:40:e0:d7:
                    18:dd:2c:dd:05:cc:2d:eb:fa:63:d0:90:4a:ea:e7:
                    47:c7:f3:44:42:17:1b:e3:7f:82:93:e0:12:fc:21:
                    31:e3:32:57:cb:af:a1:e1:4a:91:3c:43:c7:4d:a8:
                    4d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:25:D4:F5:67:4F:EB:D7:3C:F7:24:3F:C1:0A:D8:B0:92:82:A8:E1
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS52210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45d::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:03:01:9e:55:9e:b6:f6:31:f3:47:b6:93:07:b0:b7:6e:
         8b:75:29:a8:33:90:3e:ea:a9:74:ad:af:07:4d:76:c0:9a:32:
         e2:ac:ed:22:ed:3b:f6:a6:4d:e3:c8:c9:05:2f:ff:0a:d2:bc:
         e0:3d:36:bb:55:db:cd:50:44:86:e8:4c:b6:9e:df:ca:81:30:
         82:48:d1:85:82:2e:2c:ce:e2:ec:f9:68:c2:cc:da:72:b8:91:
         00:a1:e1:c1:f9:9e:4e:2b:73:a3:d6:98:43:68:f8:99:7f:6e:
         6b:39:8b:98:38:87:87:55:e2:df:d2:a6:8a:04:79:29:20:07:
         e1:bb:23:4d:06:75:ed:c1:d6:7c:d1:80:bf:2c:17:33:e6:87:
         e2:4a:be:13:76:4b:94:3f:5d:65:bc:86:41:87:59:ce:a2:98:
         c4:e4:99:b1:37:55:96:31:8a:db:d8:49:6a:a2:92:f2:2c:93:
         1f:12:74:61:f3:27:10:41:f5:ab:1d:ac:dd:7c:fe:74:2f:b4:
         a0:d2:55:d6:f6:b0:1b:cd:94:30:97:e7:29:ed:4f:75:e9:92:
         29:de:86:28:58:4d:40:f7:14:30:a9:59:54:eb:db:fc:61:f7:
         89:ad:45:9d:cb:44:7a:d4:39:b9:61:33:59:77:1a:72:ca:f2:
         4a:9e:ef:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----