Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57974.roa
File:                     AS57974.roa (raw, json)
Hash identifier:          jpfFEYuxMtDIjXHWdvr63KmcENjVwbkKKDt+/vrQ5no=
Subject key identifier:   49:64:FC:BF:91:C1:21:0A:DA:4E:27:5E:98:C8:D3:AE:AE:A9:C0:F6
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3E47C4E789D235058D2D533E90E13886338C4926
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57974.roa
Signing time:             Wed 21 Feb 2024 02:44:24 +0000
ROA not before:           Wed 21 Feb 2024 02:39:24 +0000
ROA not after:            Wed 19 Feb 2025 02:44:24 +0000
asID:                     57974
IP address blocks:        2a06:a005:45b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:47:c4:e7:89:d2:35:05:8d:2d:53:3e:90:e1:38:86:33:8c:49:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 21 02:39:24 2024 GMT
            Not After : Feb 19 02:44:24 2025 GMT
        Subject: CN=4964FCBF91C1210ADA4E275E98C8D3AEAEA9C0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:7e:b5:94:c1:3e:90:61:24:01:3c:63:60:
                    3d:c0:01:5e:17:bf:36:81:f2:56:68:a8:3a:9f:b1:
                    d0:2f:38:a6:e4:18:f8:9d:95:9c:34:b0:7a:79:99:
                    90:da:4f:83:88:01:e6:46:31:8f:88:47:10:87:07:
                    ab:12:56:bb:03:80:01:92:41:21:02:02:ee:c1:ee:
                    58:45:87:e8:85:23:93:39:86:a4:d9:2a:53:cc:3b:
                    36:0e:45:cc:8c:11:cf:df:8a:c6:ef:5e:de:ed:72:
                    38:0c:9c:78:fe:00:62:37:9a:cf:23:fb:e4:c2:10:
                    53:e2:5d:5e:23:38:82:d0:d4:70:d7:aa:4b:6d:8f:
                    cc:25:63:5e:d6:14:2d:06:6e:41:8f:3f:68:10:e9:
                    d0:5b:76:43:fe:52:09:8a:e8:e9:52:a8:b1:4c:88:
                    4b:88:61:30:35:32:41:d6:1e:23:84:7c:de:68:02:
                    b7:35:40:a2:0e:3a:c4:68:24:4f:ec:1a:e8:83:a7:
                    d6:83:6f:3c:35:d1:03:72:0b:88:98:14:4d:62:ab:
                    8d:9b:9c:e7:b8:0b:36:ad:33:ca:a0:02:cd:56:00:
                    56:83:f8:57:1c:81:f4:48:00:7d:04:91:91:41:d8:
                    24:23:9e:9c:3d:18:0b:07:e2:b5:d0:3f:e5:94:ad:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:64:FC:BF:91:C1:21:0A:DA:4E:27:5E:98:C8:D3:AE:AE:A9:C0:F6
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:23:b5:63:06:4d:46:3a:6b:32:0d:96:e9:16:7e:ea:db:4b:
         ba:aa:65:82:f5:1a:cf:4d:13:ca:fb:b7:fa:71:a3:70:e1:a2:
         01:27:38:40:46:c8:f9:9e:d4:60:d7:45:f8:82:ed:61:94:4a:
         48:b5:a8:15:dd:96:0a:36:65:be:89:72:25:21:d6:6c:5b:2d:
         4c:a2:9e:b8:d8:9b:3e:a6:c6:34:98:e7:51:1d:4b:79:1a:dc:
         e6:aa:26:d2:11:c1:f5:14:15:4d:21:6f:66:15:bb:bd:45:76:
         19:0b:fc:6d:ee:01:91:32:1d:f2:e6:6d:3a:05:d4:1c:49:89:
         08:fa:fa:40:3c:29:31:46:ad:25:0d:0b:25:81:20:b1:fd:f2:
         3b:13:9e:7d:a5:72:89:72:3c:8a:e7:71:4f:0e:3f:14:d4:3b:
         e6:94:ba:e0:95:fa:d5:4f:b0:4b:29:62:cc:a0:ff:b3:50:d9:
         15:70:a4:09:13:c8:28:6c:34:1e:61:81:65:fe:4d:d4:6a:4d:
         07:fd:7a:46:4e:8c:e0:95:d6:7c:8c:f0:83:32:ae:35:e3:0c:
         cb:e5:79:fd:59:c2:33:d3:fe:36:fd:7a:ae:53:a0:74:36:d7:
         3a:9a:1a:85:89:d3:9b:51:9f:5a:dc:43:e2:4e:07:d1:51:38:
         c9:20:5c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----