Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa
File:                     3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          M8grLJ43vF5nCvvrn+fcrMrk9IDJplf/duxy1gvQmU4=
Subject key identifier:   63:F4:E3:27:58:31:52:59:49:D8:79:F4:BF:97:D2:0B:EF:27:EF:74
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       25FBD29B5B546D829DD404FB1CA6F44627693B72
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 21:55:37 +0000
ROA not before:           Mon 02 Oct 2023 21:50:37 +0000
ROA not after:            Mon 30 Sep 2024 21:55:37 +0000
asID:                     36236
IP address blocks:        192.64.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 07:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fb:d2:9b:5b:54:6d:82:9d:d4:04:fb:1c:a6:f4:46:27:69:3b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Oct  2 21:50:37 2023 GMT
            Not After : Sep 30 21:55:37 2024 GMT
        Subject: CN=63F4E3275831525949D879F4BF97D20BEF27EF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:28:42:61:4c:73:b2:dd:13:e2:fc:9f:47:
                    29:54:45:26:20:5e:89:ce:fd:ab:d7:9a:88:37:2e:
                    8c:a4:d9:cf:9c:b4:af:c2:d5:be:3c:a9:16:73:e2:
                    5b:47:26:1f:fc:82:21:32:da:e7:1b:8e:45:bc:cf:
                    48:cf:e6:bb:8d:b5:4a:48:7d:37:e7:86:81:b9:ec:
                    51:49:e8:ca:4e:1a:3a:ad:0b:18:2f:04:26:d9:e2:
                    5c:28:c2:7a:b0:15:b7:ac:1e:c5:e9:98:ea:fc:58:
                    e4:d8:eb:25:bc:ab:87:a6:7b:0d:31:e7:3b:be:93:
                    f4:da:7e:69:da:d2:b5:25:aa:4b:0a:04:2b:04:c0:
                    56:4c:87:37:76:3b:10:86:92:4f:0e:68:12:67:c6:
                    5e:66:6f:b6:d2:2d:5f:79:11:77:e9:58:18:90:71:
                    c9:38:f8:f8:2b:ce:0a:f5:38:e8:aa:bb:ee:86:e0:
                    ee:3c:cb:8e:ba:82:89:7d:c7:30:22:d0:44:d1:64:
                    6a:5b:8b:36:8a:71:50:e4:cc:c8:27:38:05:01:31:
                    92:77:b0:62:af:6d:61:d7:03:c0:07:48:b1:8a:ed:
                    ba:13:20:3e:9d:44:3b:93:a2:df:6f:ae:f4:47:47:
                    19:c3:77:75:c2:1f:e8:3e:d9:26:53:6d:56:24:87:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F4:E3:27:58:31:52:59:49:D8:79:F4:BF:97:D2:0B:EF:27:EF:74
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:80:2d:53:c6:e1:16:f7:45:25:12:98:22:61:2d:f6:02:5d:
         61:8f:39:5f:ca:60:62:0c:26:ad:a2:f1:e0:a3:39:bf:90:84:
         6b:8d:99:33:28:ee:7c:85:b8:8b:76:d9:6e:9a:ce:d6:a1:34:
         de:a2:0a:7b:97:ab:64:6b:93:60:b2:c4:39:c9:3e:1c:4b:cc:
         6a:0c:99:56:bb:ff:33:23:4c:42:2f:46:cd:9f:c4:d3:79:bc:
         3e:a7:c9:ab:c8:fe:5a:c4:d7:27:92:3b:95:a2:5e:b9:be:f5:
         13:5d:fa:98:19:79:ac:6c:9d:07:7d:83:b5:d0:2c:7c:15:53:
         69:83:ee:7b:85:d5:f6:d3:d4:09:e9:2b:07:14:af:95:2c:30:
         94:1a:3e:0c:c4:7a:4b:b6:70:49:ec:95:04:6e:d0:a2:10:6a:
         26:1b:a0:9c:b9:92:b5:52:5a:16:01:16:b5:a1:11:69:d4:58:
         99:80:5c:7d:fa:6d:b5:98:a7:0b:af:7e:ab:3e:67:94:ac:c1:
         8e:98:e6:de:01:46:cc:53:fc:88:f6:fa:6f:42:e1:19:76:05:
         d8:d4:d2:7f:8f:d5:e4:7b:0b:df:d2:0e:bb:6d:73:8d:1c:c9:
         89:53:5f:3e:85:76:cc:d6:b5:c9:c8:fa:45:11:43:20:56:c2:
         0c:c5:e6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:50:16 2024 by rpki-client on console-ams.rpki-client.org