Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa
File:                     3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          fqzD4hzeAspyscgHjxuKV3XgOsz6bOsf/o6shMvgiQ4=
Subject key identifier:   4D:E5:E1:B9:80:2E:99:28:BA:28:F0:1C:F6:EA:BF:E4:2F:D5:0C:7F
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       45B9A14B48D6B1C30782DF092696C564B94D2823
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 22:13:10 +0000
ROA not before:           Mon 02 Sep 2024 22:08:10 +0000
ROA not after:            Mon 01 Sep 2025 22:13:10 +0000
asID:                     36236
IP address blocks:        192.64.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b9:a1:4b:48:d6:b1:c3:07:82:df:09:26:96:c5:64:b9:4d:28:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Sep  2 22:08:10 2024 GMT
            Not After : Sep  1 22:13:10 2025 GMT
        Subject: CN=4DE5E1B9802E9928BA28F01CF6EABFE42FD50C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:03:85:44:d3:87:4c:60:72:eb:7b:43:cb:
                    02:fc:cf:8f:1f:44:7a:0d:dd:9a:2c:01:ce:08:5f:
                    f6:ed:e4:cb:d1:3b:ab:d8:41:99:f6:a9:a7:6f:b4:
                    04:43:32:ce:7e:23:d4:46:23:03:5e:dc:48:6b:29:
                    f0:02:dc:29:3f:71:9c:e4:4a:9d:86:f5:ba:ec:28:
                    f8:54:68:74:f3:32:5e:50:67:c0:f4:44:5a:bb:bb:
                    29:b4:bc:96:94:ac:33:4b:97:3d:fd:b7:59:4c:2e:
                    6c:61:9e:c9:25:38:69:e9:ba:d4:89:58:c1:21:70:
                    34:b3:92:21:62:e4:3d:3c:b8:95:b9:10:ff:6f:a0:
                    1d:e2:7a:99:2d:a0:71:60:b1:1f:c0:0a:4f:3b:64:
                    4b:86:1d:85:fd:37:da:0f:80:d3:1a:8a:cc:32:a2:
                    af:d7:40:e7:d8:c3:0d:03:3c:94:41:95:aa:b4:c5:
                    8b:65:82:45:f8:10:4c:8c:b8:b5:90:5c:e1:0c:94:
                    af:f5:aa:3f:cb:f7:7d:f3:1d:c4:3b:cb:bc:65:d1:
                    ce:aa:8e:15:31:52:de:87:01:ff:b4:cb:87:1f:da:
                    e5:e7:1a:af:b0:6c:f8:30:2f:87:33:7a:a2:97:64:
                    75:10:f4:ec:07:9e:d2:9f:d5:aa:48:72:b4:d2:98:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E5:E1:B9:80:2E:99:28:BA:28:F0:1C:F6:EA:BF:E4:2F:D5:0C:7F
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:85:b7:ee:56:07:38:67:77:36:74:76:55:1a:bf:de:74:93:
         b7:57:9c:fb:ee:b5:34:9c:cf:0c:35:4f:7f:54:be:d3:a0:27:
         29:44:c5:71:1a:3b:55:dd:6d:c4:24:8a:14:1b:90:4e:00:0c:
         82:b1:bd:bc:96:a7:79:26:2d:87:93:95:29:81:3b:a2:e2:08:
         24:7f:a9:23:b1:11:94:8f:10:4e:13:a5:60:15:c6:7c:68:f1:
         78:11:26:62:54:93:fe:54:f9:e2:5a:39:36:fa:f6:f3:52:17:
         a1:e3:01:67:78:e3:e6:13:7c:7f:11:f2:e4:ec:e7:b1:34:5f:
         28:59:cb:3e:07:d4:ab:34:20:1a:ce:72:03:07:48:e5:f8:75:
         61:02:f7:80:e1:72:0d:8a:f6:a6:57:a5:74:4a:1a:fb:5b:6e:
         e4:65:82:c8:2c:dc:4d:90:af:5c:ab:76:30:cf:16:6a:cc:51:
         f2:c0:5e:1b:53:37:eb:55:22:71:99:00:29:e2:49:95:6a:93:
         8c:f9:81:61:24:fa:8a:bd:31:f1:78:b7:55:d6:48:b9:25:37:
         40:c8:75:c4:68:df:77:4d:ed:9c:53:9d:a8:24:b2:12:3e:e3:
         d1:ea:8a:54:44:84:9b:ec:69:32:91:b6:f7:20:1c:a4:06:97:
         4f:09:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:32 2024 by rpki-client on console-fra.rpki-client.org