Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa
File:                     3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          Ai42w/GFKLJSrAg5e7DiQz6cj5dsSUa7sDKHuFDN5uw=
Subject key identifier:   DF:93:DA:19:F7:9B:FE:04:91:17:C4:1A:25:9F:EA:57:45:B4:2E:91
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       71C444177D4B1B89F507603AE380901D08A82A0E
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 21:13:09 +0000
ROA not before:           Mon 02 Sep 2024 21:08:09 +0000
ROA not after:            Mon 01 Sep 2025 21:13:09 +0000
asID:                     36236
IP address blocks:        205.147.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c4:44:17:7d:4b:1b:89:f5:07:60:3a:e3:80:90:1d:08:a8:2a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Sep  2 21:08:09 2024 GMT
            Not After : Sep  1 21:13:09 2025 GMT
        Subject: CN=DF93DA19F79BFE049117C41A259FEA5745B42E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:5c:11:4f:eb:e6:d0:32:68:63:13:08:7f:
                    d9:33:ab:31:39:86:c9:5c:77:42:b7:3e:7c:e9:a0:
                    07:0d:b7:20:49:99:74:76:27:7b:65:2a:e0:2e:4d:
                    06:5a:f1:f5:98:83:2d:38:39:0b:7a:0d:28:78:cf:
                    68:be:47:f5:3f:60:b5:6c:ab:82:79:90:f0:88:88:
                    56:f7:bc:ab:83:44:4c:50:cd:ba:7c:9a:e4:1c:41:
                    03:43:60:5f:54:5e:a4:1d:27:53:f8:5c:03:5d:a9:
                    9b:6f:dd:d8:94:82:66:93:ad:51:67:a1:2c:97:92:
                    33:11:8c:ec:ad:aa:85:e1:ed:a5:3d:2d:0a:f4:19:
                    92:fc:fc:ce:b1:7f:9e:df:63:27:5e:84:4b:d7:4a:
                    71:27:d6:c2:4e:fc:eb:16:19:5f:58:4b:32:e7:46:
                    e3:2e:38:7d:d2:0d:43:48:6d:b5:f9:a8:b5:8a:38:
                    2a:f4:b3:23:71:6f:2b:13:23:af:39:b7:f3:cd:c7:
                    46:c3:a9:f1:fd:66:1e:e8:17:79:07:a1:56:c4:de:
                    8b:ef:aa:c0:95:0f:ca:1d:f8:05:32:36:e1:45:1f:
                    79:70:57:c6:cb:7b:9d:59:77:d2:91:b4:3a:7c:17:
                    29:8e:66:94:18:39:a0:f7:20:67:5d:29:48:50:bd:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:DA:19:F7:9B:FE:04:91:17:C4:1A:25:9F:EA:57:45:B4:2E:91
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:9a:af:b2:59:11:92:0c:ab:c2:ca:9c:89:58:77:ee:23:
         ca:30:d8:ca:89:18:5d:2b:9b:6b:eb:11:c7:fc:70:52:b6:67:
         62:7c:be:83:74:fe:06:9e:62:18:5f:e2:46:98:41:35:e6:12:
         c3:78:04:0e:9e:72:d7:b5:27:7b:a5:f3:72:30:d4:db:56:78:
         60:21:ab:b4:50:3f:ca:1a:7c:48:34:5a:ae:0d:b2:44:3a:29:
         e5:89:59:04:96:33:24:ed:b2:16:c2:34:22:50:14:d6:c3:3a:
         34:62:c4:84:b6:d9:ec:46:67:93:0b:ff:5b:54:f2:bc:b2:07:
         39:94:42:76:7a:74:5f:96:05:87:ba:fb:86:e9:3c:41:1b:79:
         d9:68:ab:1a:83:83:4f:84:0f:47:7a:e4:d4:ba:93:f0:79:88:
         e5:34:ca:51:cb:7d:47:e7:75:f7:2d:1e:15:43:ec:bc:94:15:
         cc:fe:62:fa:b0:a6:f6:75:af:0e:bc:c9:69:4b:4b:20:2d:e2:
         9b:27:49:e7:9d:7e:7d:cf:80:05:da:de:66:4c:e6:e5:65:a2:
         03:67:25:b3:ef:6c:95:d1:19:5a:81:ac:05:8c:78:b9:72:e9:
         de:e9:ae:7c:c1:8b:d1:d5:ef:c9:26:a6:14:8c:55:10:58:61:
         1b:e3:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:32 2024 by rpki-client on console-fra.rpki-client.org