Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57481.roa
File:                     AS57481.roa (raw, json)
Hash identifier:          153cZ4Yjq/BdLU/m9MXfK3HMyw0msiAvW5AFoIXpyWs=
Subject key identifier:   43:91:F1:93:BE:01:62:CF:3C:6E:E2:C9:55:BB:FE:1A:31:82:D4:60
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       13BACF0E17E784A270B0FFD0A1AE94F01F0BDDBC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57481.roa
Signing time:             Tue 05 Dec 2023 02:44:13 +0000
ROA not before:           Tue 05 Dec 2023 02:39:13 +0000
ROA not after:            Tue 03 Dec 2024 02:44:13 +0000
asID:                     57481
IP address blocks:        2a06:a005:1d20::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ba:cf:0e:17:e7:84:a2:70:b0:ff:d0:a1:ae:94:f0:1f:0b:dd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:13 2023 GMT
            Not After : Dec  3 02:44:13 2024 GMT
        Subject: CN=4391F193BE0162CF3C6EE2C955BBFE1A3182D460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:66:97:fb:1e:20:57:ef:42:2e:6e:67:c5:
                    6a:81:c9:5d:0c:12:c9:a9:ed:79:45:6d:d1:af:9d:
                    16:ff:09:cb:1b:b6:e0:47:38:a8:de:38:98:be:40:
                    94:41:78:3a:d6:13:62:19:42:3c:00:f9:e9:2a:d4:
                    0c:9b:46:1c:d4:de:5f:4d:4b:3e:5e:41:ec:b8:23:
                    66:54:09:f2:ef:19:0d:12:10:60:1b:d5:4d:a3:ea:
                    70:96:b8:72:54:68:90:9c:a1:b9:b9:f3:85:61:28:
                    5f:34:86:5e:cd:35:53:b0:1d:8c:a8:23:20:14:06:
                    51:28:46:c7:f0:91:a1:47:9f:34:45:5f:26:61:23:
                    74:93:38:91:fb:b0:8b:dd:0f:e6:b4:f6:b0:8d:0c:
                    15:7e:39:d4:d8:37:b4:80:e4:5d:f1:93:53:92:69:
                    18:2f:a9:a7:19:7c:95:28:33:5f:f9:5b:d5:8b:8b:
                    52:25:93:bb:2d:dc:39:11:40:ca:73:19:31:a2:9b:
                    89:d1:5c:f1:b0:a5:a7:b5:29:d2:1a:3f:09:17:af:
                    40:31:18:7d:e5:6c:cb:6f:58:02:83:04:1f:d8:97:
                    e7:fa:fc:44:aa:8f:1a:40:8d:c5:b6:16:ba:3c:14:
                    55:eb:68:a8:6c:b3:c6:1e:52:f6:fa:44:71:da:19:
                    83:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:91:F1:93:BE:01:62:CF:3C:6E:E2:C9:55:BB:FE:1A:31:82:D4:60
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57481.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1d20::/44

    Signature Algorithm: sha256WithRSAEncryption
         c1:31:ce:49:8c:b9:80:76:84:2a:d5:7b:44:4a:e6:81:e4:84:
         df:0c:6e:39:68:e3:8f:5b:7d:19:3c:31:d2:07:01:40:ec:fc:
         2c:af:da:a5:25:10:5a:6a:63:9c:ad:e1:97:8b:68:ad:f3:98:
         0b:85:75:db:63:44:1d:df:60:ab:08:2f:03:44:5a:21:4b:32:
         6a:61:08:4b:9e:bb:c1:2b:64:22:4e:4d:c6:09:a4:b6:a5:91:
         ce:e4:82:60:1c:60:c6:be:ef:db:0f:13:47:55:40:6c:9c:3b:
         80:f0:6b:ba:14:3a:db:ca:39:00:69:46:b6:36:92:fc:30:32:
         85:99:22:2f:a0:8c:8b:8f:42:e6:18:69:9e:2d:58:64:4d:a1:
         1c:89:69:35:aa:aa:ae:47:7e:85:11:fd:7b:d9:cd:2a:1c:c1:
         10:b0:11:33:8d:ad:89:1f:95:3d:c8:ef:8b:e9:95:60:cd:ed:
         ca:a9:8a:d2:4d:eb:32:0a:94:1f:1c:b4:b5:57:e7:6a:4c:48:
         a6:8c:73:77:94:d9:d2:be:5c:9b:8b:92:6f:e1:39:d3:f8:51:
         f2:66:9c:5d:7a:0c:2f:b0:d6:b5:35:3b:64:e3:a6:71:f5:ee:
         ec:9e:44:22:78:89:29:60:0d:05:a8:f0:8b:61:18:09:8e:2a:
         7a:1c:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----