Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa
File:                     3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          iYsuy9QWEHTexN2EmIlyx5FX384fNK35GbIklNm1+p4=
Subject key identifier:   AD:3B:99:11:20:D6:16:CE:D4:8D:0E:A5:EF:8D:50:D2:1B:7B:0C:78
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       040AB79210C3AB47E6789887AD6A215510EFF58F
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 20:55:35 +0000
ROA not before:           Mon 02 Oct 2023 20:50:35 +0000
ROA not after:            Mon 30 Sep 2024 20:55:35 +0000
asID:                     36236
IP address blocks:        205.147.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0a:b7:92:10:c3:ab:47:e6:78:98:87:ad:6a:21:55:10:ef:f5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Oct  2 20:50:35 2023 GMT
            Not After : Sep 30 20:55:35 2024 GMT
        Subject: CN=AD3B991120D616CED48D0EA5EF8D50D21B7B0C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:1a:05:ab:bd:bf:0d:f1:55:6d:19:dd:1d:
                    09:8d:4f:10:91:6f:cc:92:58:3c:29:cc:66:6b:c3:
                    87:5e:b7:40:5a:22:c3:75:2c:86:31:5c:6f:1b:86:
                    9c:c0:2b:fe:34:b2:2a:2c:01:dd:4d:2d:ee:c5:c7:
                    4a:4e:64:9f:2e:80:8f:a5:35:a2:82:7b:8c:a0:7a:
                    62:05:67:70:a4:60:42:3f:73:c1:79:70:88:43:0d:
                    c1:b6:a2:c2:e5:ed:85:01:87:98:dc:d5:39:6c:b3:
                    13:5c:ff:5d:3d:88:89:5b:70:dc:9b:42:ce:33:77:
                    30:1a:79:da:82:8d:60:37:0e:29:14:01:f7:55:5e:
                    cc:29:fe:3e:a8:c1:09:9e:3f:e9:4a:86:03:86:54:
                    d4:d7:43:f0:f9:10:69:43:51:f3:8b:73:45:96:42:
                    d2:3c:a6:f0:52:8e:9f:6c:2d:59:5f:84:52:1d:a2:
                    ce:ba:81:a7:1e:3a:55:8e:27:0a:79:83:43:1a:e0:
                    4f:a1:2e:74:05:8f:02:9d:c2:e1:25:7a:54:d7:f2:
                    03:81:1e:c1:8f:c8:ad:6e:86:cd:15:62:09:01:86:
                    87:19:30:13:e6:66:de:d8:a0:ed:5c:69:22:c3:48:
                    b6:4b:a7:13:e0:aa:28:7e:0e:e3:01:fe:35:bd:82:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3B:99:11:20:D6:16:CE:D4:8D:0E:A5:EF:8D:50:D2:1B:7B:0C:78
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:63:42:c0:e0:5a:ae:1c:5d:62:c8:93:ba:42:dc:84:04:
         f9:a4:7d:db:22:52:ef:c8:1e:26:83:b3:2e:04:26:e3:2c:45:
         1f:ce:70:75:06:06:ef:b3:93:22:a9:96:00:f7:55:7e:04:4f:
         4c:ad:b4:2b:6e:82:34:ca:ac:03:49:83:f2:16:48:95:f1:17:
         fa:ce:1b:8c:23:30:0b:84:19:f2:fb:41:70:fb:fd:59:9a:d2:
         6b:2b:ee:61:52:43:01:19:19:c0:86:00:a5:5b:ae:ce:ec:d4:
         9a:a2:40:ba:25:9c:ce:34:ed:51:63:2d:0c:4a:7d:ff:85:c4:
         7a:e6:81:6f:b0:1d:dc:d7:33:86:de:e5:6c:a9:ba:ae:f0:f5:
         a6:a1:00:cf:56:57:3c:0e:26:38:69:24:c2:03:97:ab:5a:b2:
         1d:55:fb:0b:75:ec:30:80:66:cf:c5:77:94:f9:b2:c2:92:e5:
         59:f5:ba:40:cd:07:f0:e3:26:95:5b:11:1e:4f:52:59:f0:1b:
         7b:1a:a8:80:d7:db:8a:c9:7e:44:b6:a4:0d:75:da:ca:b5:9e:
         4f:ec:54:e1:94:21:53:06:77:dc:07:19:03:1b:90:a5:6e:1f:
         06:b5:52:6c:eb:bd:ba:ec:da:4d:8e:f0:c8:8b:1d:cc:3c:3a:
         ad:1b:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 00:12:55 2024 by rpki-client on console-ams.rpki-client.org