Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa
File:                     AS203199.roa (raw, json)
Hash identifier:          0GTq7lgIC+PWrpbq/UURiNaH3vsugOQw+UjKqZSXe8U=
Subject key identifier:   7D:78:08:88:99:1F:27:BC:AC:5D:B4:69:71:37:02:22:60:4C:FD:2E
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       75A2520195179C44693F7972EBC7EA9A24140C91
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa
Signing time:             Thu 03 Jul 2025 15:52:35 +0000
ROA not before:           Thu 03 Jul 2025 15:47:35 +0000
ROA not after:            Thu 02 Jul 2026 15:52:35 +0000
asID:                     203199
IP address blocks:        2a06:a005:19d0::/44 maxlen: 48
                          2a06:a005:2d90::/44 maxlen: 48
                          2a06:a005:2da0::/44 maxlen: 48
                          2a06:a005:2db0::/44 maxlen: 48
                          2a06:a005:2dc0::/44 maxlen: 48
                          2a06:a005:2dd0::/44 maxlen: 48
                          2a06:a005:2de0::/44 maxlen: 48
                          2a06:a005:2df0::/44 maxlen: 48
                          2a06:a005:2e00::/44 maxlen: 48
                          2a06:a005:2e10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a2:52:01:95:17:9c:44:69:3f:79:72:eb:c7:ea:9a:24:14:0c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 15:47:35 2025 GMT
            Not After : Jul  2 15:52:35 2026 GMT
        Subject: CN=7D780888991F27BCAC5DB46971370222604CFD2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:5f:90:92:1a:19:91:6e:3c:65:0a:99:5d:
                    dc:83:a1:cb:83:8b:1d:5c:1a:02:2d:5b:59:3c:db:
                    c1:5f:9a:5f:8d:99:be:a7:c6:bb:cb:45:39:71:d8:
                    fa:5d:72:b0:6a:2d:55:ff:ce:f2:f3:34:8f:26:61:
                    30:7c:55:d1:d9:7a:19:fc:40:47:fe:f7:95:c1:f8:
                    11:8d:6f:43:86:59:0d:1e:97:7f:91:7d:46:c8:09:
                    a7:55:10:6a:7b:99:05:d2:1a:e9:f9:51:8e:a7:e5:
                    ec:c5:58:97:6a:6c:c6:2d:7b:e5:3b:2a:8a:cb:5d:
                    45:22:40:bb:a7:e2:f7:34:83:c4:ef:ca:36:24:88:
                    ef:8c:ca:14:4f:19:69:52:e0:5d:0a:2e:1b:85:98:
                    4f:11:22:8c:44:34:73:49:a0:74:1b:bb:b2:62:dd:
                    1a:ab:95:b6:0b:7c:60:41:39:ac:7b:d1:13:b5:20:
                    6e:42:10:a8:51:20:60:ab:1a:84:17:7d:7f:5b:65:
                    06:b7:32:90:bd:b8:8a:2b:bc:fc:ec:a9:a4:7d:4a:
                    f1:f8:08:88:3e:e3:d3:79:aa:28:56:fb:89:28:6a:
                    06:20:06:83:ac:ce:45:4c:3b:cf:d1:51:3e:0c:c3:
                    a2:12:46:47:2d:54:0a:f0:18:ba:49:fd:07:c9:a8:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:78:08:88:99:1F:27:BC:AC:5D:B4:69:71:37:02:22:60:4C:FD:2E
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:19d0::/44
                  2a06:a005:2d90::-2a06:a005:2e1f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c4:67:f5:25:44:be:49:f6:d1:ad:3e:d8:ca:8e:f2:7e:43:51:
         c3:9e:99:d9:d4:29:41:b6:4b:12:3d:f6:2a:96:e7:49:35:1a:
         fc:6b:87:e4:d0:2e:44:f8:9c:a6:5e:55:a3:46:cb:84:40:96:
         6f:e6:90:86:44:1c:f0:20:6e:44:60:50:f5:1d:b3:e8:38:ff:
         b4:98:5a:0a:64:27:84:ae:65:e1:4f:41:86:21:92:c6:47:63:
         31:32:68:fb:df:af:76:7b:57:d6:95:6f:e7:67:9a:aa:9e:b1:
         97:7b:80:2f:5a:90:ca:35:d8:5b:1a:ad:a5:0c:d2:50:3e:e6:
         15:60:4b:cd:df:4a:e4:c0:56:a1:91:a3:67:31:eb:c5:c7:6d:
         0e:be:4c:97:3c:f0:3a:d5:85:55:f8:c8:0a:5c:ae:e1:4b:83:
         37:bf:46:8e:b5:a7:bc:ce:47:94:cb:c4:92:d1:7b:72:e3:27:
         4a:1a:2c:22:af:1d:99:39:31:86:26:58:54:5b:43:42:9d:4a:
         07:f5:d9:f1:f6:a9:d0:4d:5d:22:65:c5:0d:ce:5d:82:b8:a5:
         e2:a7:c6:b5:b7:77:f8:9e:31:c3:34:e9:d7:84:0a:20:45:b6:
         73:43:f5:b3:1b:4a:7d:63:a5:87:fb:1f:a9:10:47:c0:c0:76:
         2b:b9:bd:33
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUdaJSAZUXnERpP3ly68fqmiQUDJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ3MzVaFw0yNjA3MDIxNTUyMzVaMDMxMTAvBgNV
BAMTKDdENzgwODg4OTkxRjI3QkNBQzVEQjQ2OTcxMzcwMjIyNjA0Q0ZEMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtF+QkhoZkW48ZQqZXdyDocuD
ix1cGgItW1k828Ffml+Nmb6nxrvLRTlx2PpdcrBqLVX/zvLzNI8mYTB8VdHZehn8
QEf+95XB+BGNb0OGWQ0el3+RfUbICadVEGp7mQXSGun5UY6n5ezFWJdqbMYte+U7
KorLXUUiQLun4vc0g8TvyjYkiO+MyhRPGWlS4F0KLhuFmE8RIoxENHNJoHQbu7Ji
3RqrlbYLfGBBOax70RO1IG5CEKhRIGCrGoQXfX9bZQa3MpC9uIorvPzsqaR9SvH4
CIg+49N5qihW+4koagYgBoOszkVMO8/RUT4Mw6ISRkctVArwGLpJ/QfJqAeDAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUfXgIiJkfJ7ysXbRpcTcCImBM/S4wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjAzMTk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH
AQH/BCcwJTAjBAIAAjAdAwcEKgagBRnQMBIDBwQqBqAFLZADBwUqBqAFLgAwDQYJ
KoZIhvcNAQELBQADggEBAMRn9SVEvkn20a0+2MqO8n5DUcOemdnUKUG2SxI99iqW
50k1Gvxrh+TQLkT4nKZeVaNGy4RAlm/mkIZEHPAgbkRgUPUds+g4/7SYWgpkJ4Su
ZeFPQYYhksZHYzEyaPvfr3Z7V9aVb+dnmqqesZd7gC9akMo12FsaraUM0lA+5hVg
S83fSuTAVqGRo2cx68XHbQ6+TJc88DrVhVX4yApcruFLgze/Ro61p7zOR5TLxJLR
e3LjJ0oaLCKvHZk5MYYmWFRbQ0KdSgf12fH2qdBNXSJlxQ3OXYK4peKnxrW3d/ie
McM06deECiBFtnND9bMbSn1jpYf7H6kQR8DAdiu5vTM=
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:59 2025 by rpki-client