Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61125.roa
File:                     AS61125.roa (raw, json)
Hash identifier:          PU4G+zA2AdfI02wynNxqDATYxEN/pjkSzJiLyayOTz4=
Subject key identifier:   F0:79:64:CB:CE:D4:64:F8:85:BD:33:61:20:BF:F3:DC:EE:57:22:23
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       769D6A3E25201377D55A85386C47910B3DC51123
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61125.roa
Signing time:             Tue 05 Dec 2023 02:44:16 +0000
ROA not before:           Tue 05 Dec 2023 02:39:16 +0000
ROA not after:            Tue 03 Dec 2024 02:44:16 +0000
asID:                     61125
IP address blocks:        2a06:a005:a05::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9d:6a:3e:25:20:13:77:d5:5a:85:38:6c:47:91:0b:3d:c5:11:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:16 2023 GMT
            Not After : Dec  3 02:44:16 2024 GMT
        Subject: CN=F07964CBCED464F885BD336120BFF3DCEE572223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c1:fa:44:eb:6e:00:35:ba:8c:3b:69:37:9a:
                    b3:7e:24:d6:e1:c6:be:e7:e3:23:cd:3a:65:44:ec:
                    6d:e1:f5:ec:1e:30:70:34:f3:d7:90:37:fd:50:54:
                    c6:ce:f6:8d:28:37:d8:3e:86:6d:fb:9e:75:82:71:
                    8c:8e:da:c9:00:31:83:fd:5e:41:c3:1a:8c:ae:25:
                    31:47:a1:ab:0b:76:72:a1:02:55:8a:3e:9d:c8:11:
                    49:f3:8d:8d:ce:20:12:8c:98:a5:48:be:c3:2f:56:
                    57:60:ca:88:ca:75:d8:cb:ea:74:ab:2e:7b:66:a2:
                    3f:08:af:6d:fe:28:db:f4:fd:64:0c:29:0f:92:cf:
                    3f:38:8e:0e:3a:39:13:78:49:7e:bf:2f:36:1e:12:
                    b6:84:69:0f:57:3f:0b:64:c1:f5:0e:73:e2:22:a1:
                    bb:7c:39:6d:4f:ee:9c:7e:8b:a4:ac:63:9f:77:b0:
                    5b:f0:a7:7c:55:65:e7:d1:8f:41:0f:06:7f:dc:12:
                    85:67:1f:7d:87:8c:66:97:91:fb:8c:41:dc:f5:6a:
                    8f:c8:16:05:ff:59:21:93:7b:63:db:e2:c9:47:52:
                    bd:34:8b:22:be:d5:0e:21:18:cb:f7:96:92:0d:61:
                    12:06:78:bb:08:d9:a3:43:70:3e:62:2f:59:74:94:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:79:64:CB:CE:D4:64:F8:85:BD:33:61:20:BF:F3:DC:EE:57:22:23
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61125.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a05::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:2b:d3:a1:04:ff:30:1f:c2:8f:f4:a6:63:94:2b:4e:d9:8f:
         0d:15:95:a3:81:11:29:65:1e:63:80:6d:36:30:73:84:61:64:
         3f:a8:7d:29:3c:77:e1:51:61:19:4f:54:09:fb:66:e3:19:f4:
         67:fe:b0:88:5b:ef:0b:3c:0a:7c:a4:11:87:2f:82:22:da:cd:
         b3:70:3f:19:af:c1:d1:7e:33:96:f2:3e:de:8c:6c:4d:ea:7c:
         11:89:f8:d6:cb:13:17:9c:36:b7:84:e7:d6:06:a2:b6:43:41:
         b7:01:f7:28:dd:92:24:17:f5:14:be:6b:24:af:16:a4:47:2d:
         68:01:b5:32:7b:84:f4:c4:b6:4f:5f:c9:1a:55:2a:7e:c9:1c:
         02:26:f0:1b:c8:59:62:9b:a6:06:29:c2:77:71:30:3a:88:16:
         4c:55:bb:a3:25:00:2b:fa:a7:0b:8d:c4:55:36:b3:7c:1c:b3:
         bb:fa:4f:d4:60:3e:b9:61:88:8a:4e:7f:8e:36:3e:1c:e9:5a:
         70:1c:0c:1c:9a:91:aa:70:e9:8c:4e:af:66:06:64:ac:2e:c9:
         06:4c:e2:8d:54:12:47:b0:ab:6d:a3:d0:b6:e7:50:b5:d9:5c:
         b2:6c:85:a5:0b:c8:71:a9:e4:a5:75:53:20:b1:01:81:34:01:
         bb:ce:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org