Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
File:                     323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (raw, json)
Hash identifier:          n5uPnfkcCO8fVZkw0jcChrQgZ0IUF0T5R1JM1gPg/sM=
Subject key identifier:   A4:44:26:6B:80:0E:90:6D:11:93:C4:02:DE:33:79:C8:AB:E4:7B:81
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       6DC63E7301E9DD1D738219E912492077C3F36BF5
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
Signing time:             Mon 31 Jul 2023 12:16:58 +0000
ROA not before:           Mon 31 Jul 2023 12:11:58 +0000
ROA not after:            Mon 29 Jul 2024 12:16:58 +0000
asID:                     151642
IP address blocks:        2001:df2:c1c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 23:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c6:3e:73:01:e9:dd:1d:73:82:19:e9:12:49:20:77:c3:f3:6b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Jul 31 12:11:58 2023 GMT
            Not After : Jul 29 12:16:58 2024 GMT
        Subject: CN=A444266B800E906D1193C402DE3379C8ABE47B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:2c:84:b8:e5:65:f8:5d:4e:9f:9e:5c:ef:
                    c9:97:d5:45:63:61:28:90:4f:fe:17:15:3b:bd:a4:
                    c7:92:49:26:79:ca:3a:af:a5:fe:b6:da:81:09:f1:
                    f7:c3:98:11:b6:b8:72:1d:58:78:e1:6d:0f:0b:2c:
                    ee:22:51:f9:2a:46:59:7a:9b:aa:ec:90:1b:a3:51:
                    c7:3f:45:fe:e9:42:fa:3b:4f:ca:65:d4:39:13:1d:
                    64:bc:8a:d5:8a:e7:1f:c1:e9:54:92:cd:ed:4a:31:
                    38:23:b2:1c:63:ae:f5:30:33:d0:37:0f:c7:c4:38:
                    b3:db:e4:f1:b1:53:69:a8:d2:8a:99:d8:b1:91:57:
                    b1:e1:77:94:b8:37:ac:8b:b1:1f:2a:b4:07:07:a5:
                    0d:dc:16:25:3c:1e:1e:41:c1:fe:e3:85:24:a3:96:
                    1d:95:a5:18:99:39:2f:81:96:15:78:50:86:56:14:
                    23:31:37:1f:d6:18:58:7e:12:85:7d:19:64:8f:f6:
                    de:72:62:a3:c6:dc:b4:f7:e8:e1:da:24:79:7f:7b:
                    1d:d2:18:f8:7d:01:a7:60:ff:39:46:84:a3:11:ca:
                    40:84:40:81:4e:2f:81:8f:f3:8b:12:a2:62:7d:2d:
                    60:58:1c:53:a7:8b:6d:d3:73:8c:2e:55:55:1f:41:
                    fa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:44:26:6B:80:0E:90:6D:11:93:C4:02:DE:33:79:C8:AB:E4:7B:81
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:c1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:08:26:8c:ef:61:a1:26:50:61:2b:53:f8:27:2f:8b:47:9f:
         8e:6b:8a:2b:e7:c7:ca:82:4d:f7:d0:25:b0:b6:ea:26:b6:c8:
         7b:51:9b:5a:40:28:13:63:34:27:60:a9:b1:ac:c9:ae:d2:6e:
         66:56:c9:8c:1f:05:2e:d4:6e:bf:1b:b4:87:3e:46:4b:ac:2b:
         23:24:f6:8e:5b:f4:d2:7f:0b:e4:d6:bf:0c:05:0c:12:3c:17:
         d9:d6:11:8a:26:1b:34:75:e0:68:6e:7e:0d:d0:c1:a1:bc:d4:
         9f:63:f5:35:f3:9b:a5:7d:33:ef:bf:b9:52:6b:bb:50:64:47:
         8b:26:40:34:5e:cc:7a:81:64:10:69:76:35:b2:c8:a5:5f:37:
         dc:fd:4e:50:53:36:3f:ac:a5:64:04:90:fe:a9:bd:04:bd:ca:
         6a:dc:7d:56:ec:20:44:96:1d:c1:8c:d2:42:de:b3:82:c8:96:
         aa:2e:2d:b7:72:eb:98:45:ce:1c:53:f7:39:dd:39:97:15:21:
         f9:26:97:b3:c4:76:d3:c1:61:82:be:d6:1a:63:51:b6:43:54:
         b1:16:53:ca:0c:0d:b1:10:54:24:40:67:3e:6c:7d:de:7f:bf:
         12:94:da:4c:cf:5c:68:1c:87:42:46:0d:d7:8a:86:ea:43:16:
         ce:9f:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 00:28:07 2024 by rpki-client on console-fra.rpki-client.org