Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62430.roa
File:                     AS62430.roa (raw, json)
Hash identifier:          co6J1JxhMpmXAc/fQ46vRe1xzUrJ/N7JYWEyo16wjd8=
Subject key identifier:   B3:C6:C5:8E:15:FB:13:4D:72:7A:6C:4B:44:DB:BC:5A:69:7C:BC:D6
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6605557A67096B8C89DE4AB282AEE5BD1183A811
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62430.roa
Signing time:             Tue 05 Dec 2023 02:44:14 +0000
ROA not before:           Tue 05 Dec 2023 02:39:14 +0000
ROA not after:            Tue 03 Dec 2024 02:44:14 +0000
asID:                     62430
IP address blocks:        2a06:a005:19::/48 maxlen: 48
                          2a06:a005:840::/44 maxlen: 48
                          2a06:a005:ba4::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:05:55:7a:67:09:6b:8c:89:de:4a:b2:82:ae:e5:bd:11:83:a8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  5 02:39:14 2023 GMT
            Not After : Dec  3 02:44:14 2024 GMT
        Subject: CN=B3C6C58E15FB134D727A6C4B44DBBC5A697CBCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:76:bf:01:23:c2:04:31:7c:3a:29:51:e2:
                    ed:79:75:92:c2:b5:1c:16:1a:41:98:2d:48:39:88:
                    8c:71:a2:59:fb:7a:a4:13:c5:00:7f:23:3e:9f:73:
                    64:53:24:3e:8a:32:26:dc:fa:c3:4f:5d:30:8d:11:
                    4c:ae:73:b5:fb:1a:a8:06:b7:e3:f2:2b:f2:3f:56:
                    17:ca:6e:03:97:8d:f1:7d:00:ed:c8:3b:90:a5:83:
                    5e:e7:90:4f:18:a3:8e:aa:d9:af:19:9a:d5:20:8d:
                    85:e2:48:ae:0a:1c:1d:fb:45:c0:39:0a:25:2e:73:
                    8f:39:4a:b2:37:21:72:9b:7f:fb:69:fa:5b:0f:c7:
                    94:d6:cf:02:99:4f:af:1b:ad:09:71:76:4f:c7:7b:
                    1d:73:82:84:33:df:43:b3:88:db:6e:5f:fc:b5:3f:
                    be:64:c2:56:3a:b9:a9:f5:d5:95:47:2c:fe:ba:24:
                    ae:2c:db:dc:89:3b:f4:9a:7a:ec:a5:7d:25:db:35:
                    eb:f8:ea:7d:5c:41:b9:95:f8:d6:a1:ca:c9:85:a4:
                    66:58:36:81:5e:a4:88:42:27:f6:7e:83:a7:3f:7b:
                    15:35:80:4e:c0:e1:1b:b6:43:f5:fe:53:5c:42:f3:
                    26:a8:ec:36:7b:34:69:42:6c:0f:a7:62:6a:80:a5:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:C5:8E:15:FB:13:4D:72:7A:6C:4B:44:DB:BC:5A:69:7C:BC:D6
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:19::/48
                  2a06:a005:840::/44
                  2a06:a005:ba4::/46

    Signature Algorithm: sha256WithRSAEncryption
         c6:da:a7:07:4d:a5:15:5e:c4:3f:49:f0:a7:97:8c:b0:fd:39:
         95:fa:f3:af:24:c7:a4:54:7f:ae:12:0a:73:a4:27:d2:b2:bc:
         c4:d4:38:c1:e0:ef:d2:41:7c:90:49:bb:b0:75:33:a7:31:61:
         66:c7:c7:67:84:3b:bd:a6:cd:f4:d1:5f:b3:23:57:19:c1:f8:
         4a:d5:76:2e:b1:d9:6b:d9:71:d9:6a:e2:40:1d:49:89:7e:46:
         d5:b8:61:a9:cc:b2:44:c1:2e:7e:2d:1d:5a:cb:fb:e7:f2:0b:
         21:f3:f0:f9:1d:e2:af:a3:0e:e4:f4:75:b8:3b:21:b8:3f:58:
         8a:76:26:9b:21:7f:cf:e5:a6:04:68:a4:fe:ae:97:7f:39:21:
         28:89:97:30:31:3b:dd:4a:fd:7b:45:16:52:84:6c:d9:13:2c:
         a0:42:5b:c5:9a:76:b4:10:24:51:d7:7d:01:80:2a:f3:f5:3f:
         22:a8:b0:3e:a5:af:3a:65:a3:ff:a1:a7:11:45:88:48:e9:21:
         80:aa:0c:b2:d7:aa:00:90:9b:68:63:5b:c0:b6:9d:58:ad:fe:
         63:50:d2:d0:db:79:73:e4:4a:3d:64:a8:80:be:83:d4:33:f0:
         26:14:e2:56:5c:4b:79:36:d7:89:bb:a7:6b:43:dd:0d:dc:6f:
         cd:33:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org