Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS59678.roa
File:                     AS59678.roa (raw, json)
Hash identifier:          ihg4Va6rPrTjl0ON1LNg6a/KsiTAPunuuilt1Ji9+7Y=
Subject key identifier:   FF:47:0A:D4:9A:20:A8:D9:FA:02:E3:BB:F0:66:11:33:B8:D3:61:EE
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       72CC22D85715E9E06BD41099EADA3A7D36E90B4E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS59678.roa
Signing time:             Thu 28 Dec 2023 15:44:21 +0000
ROA not before:           Thu 28 Dec 2023 15:39:21 +0000
ROA not after:            Thu 26 Dec 2024 15:44:21 +0000
asID:                     59678
IP address blocks:        2a06:a005:2c60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cc:22:d8:57:15:e9:e0:6b:d4:10:99:ea:da:3a:7d:36:e9:0b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec 28 15:39:21 2023 GMT
            Not After : Dec 26 15:44:21 2024 GMT
        Subject: CN=FF470AD49A20A8D9FA02E3BBF0661133B8D361EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:42:7e:f0:6f:99:d5:95:ea:39:86:cc:9e:
                    b2:ef:1d:73:f6:2f:d5:79:c6:71:a8:57:a8:70:6b:
                    3e:fc:c6:df:e1:f0:91:07:22:92:87:9b:70:97:41:
                    d7:2a:56:57:41:f5:27:bd:e9:b7:9d:ee:24:75:c2:
                    6d:89:ee:1d:5f:f6:6e:8f:c9:12:f0:99:60:30:e0:
                    87:4d:34:8c:bd:af:92:75:c6:76:bc:ab:61:3e:db:
                    29:0b:07:38:42:11:5c:40:04:0b:6d:c0:6c:f0:5e:
                    09:06:85:c1:a5:3c:7c:ba:52:b8:c7:d9:b9:16:aa:
                    8e:9f:1a:5b:86:b8:48:4a:39:bc:34:c7:c6:74:44:
                    c4:13:d7:45:8e:af:07:e0:b1:50:90:95:dd:54:bf:
                    22:65:48:5b:44:90:19:07:05:7a:26:a2:8d:83:2f:
                    14:0c:5d:9f:71:b3:a3:e6:66:a8:34:f8:b1:4d:93:
                    38:fe:90:7c:4b:60:c6:d1:40:8d:ca:85:fa:85:9d:
                    85:ac:16:15:d7:18:72:fd:a3:ec:ac:2f:92:54:8a:
                    0e:a7:9e:7c:0b:02:06:29:53:d0:e2:f9:dd:2d:0b:
                    ae:9c:af:3b:af:72:c3:59:32:f5:d2:b7:40:73:14:
                    30:99:f4:86:52:50:fa:4d:46:32:2f:a0:9b:63:91:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:0A:D4:9A:20:A8:D9:FA:02:E3:BB:F0:66:11:33:B8:D3:61:EE
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS59678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2c60::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:e5:87:a0:eb:e3:88:7b:b0:09:3f:a2:73:e2:ef:78:bd:6c:
         00:f7:56:b8:af:ec:03:13:4d:48:4d:05:b8:f0:ab:9d:11:7e:
         e4:6f:b8:fa:fa:2e:65:a4:84:d2:d0:93:62:99:d9:fa:c1:a8:
         7b:74:bf:f6:15:c8:f3:26:4d:96:90:54:b1:8b:7f:1c:92:7e:
         db:e3:27:3c:fd:93:fb:b4:f6:0f:b3:ea:82:24:19:58:43:56:
         6d:17:61:28:33:96:49:0b:c8:67:4c:9f:4c:e9:8d:6f:af:b2:
         20:7e:03:43:b9:b1:1d:fa:c3:46:33:5d:ee:d3:9c:09:22:13:
         95:ad:5c:82:43:59:d4:2e:17:8c:d0:b0:dc:99:14:76:db:f1:
         d4:1b:80:d4:50:b3:36:6b:70:5b:cd:bd:04:0d:49:bd:07:d8:
         aa:47:d5:e6:6b:1a:85:ec:ad:1a:5b:8d:e9:72:09:93:72:6e:
         7b:d8:07:e2:d7:0c:f1:1b:5a:a3:23:e0:01:76:a4:27:ed:d8:
         a1:10:75:c0:69:b2:29:ac:4b:d9:65:29:61:0e:2d:ae:8e:7e:
         c3:56:3b:47:00:6c:87:03:2f:38:00:90:4e:7c:97:bc:9e:77:
         77:5a:f0:3a:a1:9f:23:12:ca:24:eb:a6:be:a1:1c:19:a9:2b:
         8e:da:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----