Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa
File:                     3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          b/KyMGcqWbHgHmrVkPKxig+HqIKUT3v9kv9K3GT4bNw=
Subject key identifier:   2B:B8:87:2D:62:BE:24:0F:FC:5E:41:98:3F:5D:22:02:25:06:B6:13
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       63AE9020B9DEF9519D41CFC6B1C447907E9A871F
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 21:55:37 +0000
ROA not before:           Mon 02 Oct 2023 21:50:37 +0000
ROA not after:            Mon 30 Sep 2024 21:55:37 +0000
asID:                     36236
IP address blocks:        198.179.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ae:90:20:b9:de:f9:51:9d:41:cf:c6:b1:c4:47:90:7e:9a:87:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Oct  2 21:50:37 2023 GMT
            Not After : Sep 30 21:55:37 2024 GMT
        Subject: CN=2BB8872D62BE240FFC5E41983F5D22022506B613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:07:5d:1f:88:d2:57:20:b3:39:dc:2a:ab:
                    89:f8:94:4a:b6:15:c2:88:e7:5a:85:4f:9f:59:7c:
                    b5:98:e6:e7:9c:d6:54:d0:db:a5:2c:4b:12:e9:89:
                    74:c4:bc:a2:aa:fe:71:1e:cb:1d:57:e9:d6:35:0e:
                    18:02:01:7b:1b:c1:b4:55:70:d6:89:4c:0b:14:0e:
                    ec:78:cb:19:93:ee:bc:22:09:90:1a:bd:e0:a3:1a:
                    9c:ca:db:6c:d6:e2:c5:58:8b:20:d8:51:b1:8d:3f:
                    87:46:c4:a6:a8:ce:79:35:61:11:3a:f5:43:2c:66:
                    a7:d0:c7:66:d7:f6:85:ee:96:37:0e:01:ce:6e:5d:
                    ad:d8:3a:22:0f:65:93:0b:89:72:50:a3:c7:20:65:
                    5a:23:cc:bf:67:0e:76:d1:48:34:38:b2:03:90:6e:
                    86:60:8b:af:18:8f:d6:27:a8:96:54:e9:2f:6c:24:
                    45:b9:d2:8a:dd:2c:ef:42:1b:d6:71:b6:49:40:57:
                    b0:ca:b9:a3:2e:3c:2d:7e:56:0e:28:6d:7d:fb:cd:
                    83:7f:e9:ee:f4:ff:0c:b7:75:d0:1d:ee:26:c6:a6:
                    46:73:71:87:f0:8d:23:0b:98:3f:d6:f4:39:56:c2:
                    1e:84:4d:c4:1e:42:46:e0:78:a6:c3:81:6f:3b:84:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:87:2D:62:BE:24:0F:FC:5E:41:98:3F:5D:22:02:25:06:B6:13
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:3e:1f:4b:fe:fa:d1:7a:1e:e4:09:22:d3:a1:a1:f4:6b:ba:
         20:79:02:d9:23:ed:03:f8:ec:40:ed:dd:4b:be:2b:7f:bd:2c:
         57:59:43:4b:c5:a5:e6:87:c7:58:af:da:e3:82:33:f7:ca:c5:
         60:36:73:e2:e7:6b:d3:7f:c8:9b:58:01:0a:3c:f3:0b:41:cd:
         4d:29:43:96:d0:d2:ce:63:81:0a:6b:88:ec:e4:21:aa:08:b6:
         be:e0:27:03:4c:61:dd:dc:2b:f4:2c:6d:6e:70:05:39:87:18:
         19:b0:68:15:d3:34:3d:23:34:a3:db:67:84:2c:41:fa:f0:9e:
         5d:3d:f5:e3:4c:64:63:8c:60:44:3b:50:a0:2c:ca:e4:42:29:
         16:bd:3f:98:70:2b:f9:fa:56:3c:56:0b:97:27:45:19:c0:4b:
         fc:88:f0:20:d3:b9:79:a3:59:18:5f:40:2a:ff:92:8d:a4:0a:
         7b:59:41:f5:29:45:43:ba:5d:87:4c:11:e4:79:fb:d1:e9:e4:
         c1:87:22:55:ec:c4:4b:dc:6c:a5:8c:5a:9a:08:93:0a:0b:86:
         4d:f6:17:3c:c0:c4:28:81:bc:0f:16:6f:07:b3:39:87:4c:c2:
         1b:f2:36:ab:c1:a0:31:19:f0:9c:d7:a9:8c:25:47:dd:57:46:
         ae:8a:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 00:12:55 2024 by rpki-client on console-ams.rpki-client.org