Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa
File:                     3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          smySkFJ7ffo/w/hPcOM1UMrsL3I6EwUjwm/9tgiiS0E=
Subject key identifier:   73:C9:13:DE:1E:2D:F6:94:11:1D:D1:C8:2A:CB:1E:1A:17:1F:0E:E7
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       7A01BEFC38D6217A7D4AFAD701C43E6FAF278E28
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 22:13:10 +0000
ROA not before:           Mon 02 Sep 2024 22:08:10 +0000
ROA not after:            Mon 01 Sep 2025 22:13:10 +0000
asID:                     36236
IP address blocks:        192.64.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:01:be:fc:38:d6:21:7a:7d:4a:fa:d7:01:c4:3e:6f:af:27:8e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Sep  2 22:08:10 2024 GMT
            Not After : Sep  1 22:13:10 2025 GMT
        Subject: CN=73C913DE1E2DF694111DD1C82ACB1E1A171F0EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:b7:2c:ae:f8:ad:89:6d:2a:23:7a:0c:5b:
                    10:32:18:0f:3b:27:63:9e:72:51:c4:21:a0:0c:05:
                    cb:bf:63:7b:13:53:59:aa:6e:02:0d:01:b0:9a:46:
                    33:93:3e:d8:9d:cb:dd:f5:39:ce:de:c6:37:1a:93:
                    e6:fe:c5:97:bd:68:b2:45:bb:5d:45:5c:6a:31:72:
                    6f:47:92:48:c0:19:42:60:3d:18:96:8b:d7:ff:de:
                    f6:1f:c2:3e:08:7a:84:9d:2c:ab:21:66:e4:8f:66:
                    72:45:c8:e2:28:68:8d:fd:fd:de:3a:14:64:e2:2e:
                    c1:d9:9f:fb:33:06:e2:e7:6f:97:96:ea:77:6c:08:
                    45:fa:e5:77:a3:95:04:8c:14:8f:ad:99:72:64:6d:
                    0c:9e:b6:67:62:4d:d5:0f:6e:88:cc:25:24:2a:36:
                    cf:43:41:d1:55:ac:35:fc:40:c5:37:51:e2:b9:65:
                    30:1e:03:d2:1f:7a:cc:b0:6d:62:ae:28:7c:18:27:
                    89:79:cc:3d:aa:b7:9f:18:3d:11:fd:0c:2b:00:89:
                    6f:8a:f3:82:d1:40:fb:a4:b4:60:e2:b5:9b:e6:5f:
                    3c:ea:ba:13:d0:4e:f1:24:bc:32:1c:12:dc:41:88:
                    a6:f4:c3:8b:1a:8b:0a:e6:f5:de:14:a7:10:72:16:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C9:13:DE:1E:2D:F6:94:11:1D:D1:C8:2A:CB:1E:1A:17:1F:0E:E7
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:d4:44:e6:d2:19:15:7f:f7:ad:a4:e0:2b:a8:36:98:02:
         58:49:d7:c0:57:98:17:92:d2:6b:66:92:c9:62:f1:db:76:d4:
         3e:df:94:4d:5c:e8:c9:1c:88:83:19:b7:77:7c:e1:e3:56:3f:
         bc:b1:86:2e:ee:7d:2c:d4:65:4d:6d:e5:f0:7b:0f:5b:32:dc:
         5e:11:4a:c2:46:5b:5c:13:3d:31:46:e8:2b:d7:88:84:13:21:
         b1:b8:36:cb:9b:cc:56:4b:de:da:32:f1:85:45:e6:a5:3f:9c:
         bd:30:0b:38:b4:04:1d:29:5f:04:56:95:6e:09:80:03:81:6b:
         f9:18:cc:a7:53:9a:16:dc:d0:c0:a2:0c:e3:87:ad:dd:8b:5d:
         4f:65:3b:47:74:15:52:63:1b:a0:00:3b:0d:c7:89:0b:76:d5:
         9a:37:6e:ef:97:4e:46:42:ec:7a:8b:de:e3:15:48:fd:08:01:
         5e:2e:64:2c:ea:ce:a7:87:5b:32:ac:09:f3:9b:de:6e:a8:c5:
         63:83:59:c8:84:fd:ce:8e:32:ab:74:1c:97:af:6e:a9:8b:10:
         95:4c:29:72:94:ba:45:9d:6d:33:41:13:da:1c:db:fc:0d:38:
         08:a4:47:05:47:0d:58:bf:d3:27:b4:42:6f:a7:b2:e7:18:78:
         12:b1:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:47:13 2024 by rpki-client on console-ams.rpki-client.org