Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa
File:                     3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa (raw, json)
Hash identifier:          cBj/lV9ykHpDve0SlOunAjOv63W6lQnE0JSnuuq0t44=
Subject key identifier:   0F:96:51:36:DA:6B:F9:C2:74:5E:1F:A6:85:1D:48:48:41:27:7B:04
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       427826F580FE6E6B49CB9BC02B1E2C360E033B11
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:13 +0000
ROA not before:           Mon 02 Sep 2024 23:08:13 +0000
ROA not after:            Mon 01 Sep 2025 23:13:13 +0000
asID:                     36236
IP address blocks:        103.254.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:78:26:f5:80:fe:6e:6b:49:cb:9b:c0:2b:1e:2c:36:0e:03:3b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  2 23:08:13 2024 GMT
            Not After : Sep  1 23:13:13 2025 GMT
        Subject: CN=0F965136DA6BF9C2745E1FA6851D484841277B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:7e:17:98:05:e4:86:39:99:ab:d2:75:05:
                    5b:9f:3d:50:dd:e7:bb:68:1a:ce:8f:34:82:6c:82:
                    f1:46:e0:3a:8b:c4:9d:24:64:6f:22:46:db:18:a2:
                    f8:b4:9f:2c:1a:67:d7:fb:cb:69:60:17:6d:98:c1:
                    b7:81:d7:dd:70:04:4a:c6:7e:d7:3d:a3:86:d4:d2:
                    7b:fa:55:74:be:ae:fd:53:5e:5b:9e:d9:45:a4:30:
                    e0:82:09:97:e6:99:fd:f9:d5:61:87:7a:30:3f:ab:
                    4f:39:1b:6f:d8:f8:1b:6c:49:73:14:b6:f6:ef:92:
                    19:79:1b:9e:09:ee:f2:5b:fa:f2:26:dd:fc:5a:83:
                    6a:dc:ec:3b:87:d9:e8:32:1c:ac:48:44:a5:09:3b:
                    47:b7:7b:22:b8:bb:33:9a:52:b9:73:4b:73:17:55:
                    28:48:ae:16:2c:d2:ae:b5:e0:d2:d1:6a:3f:52:5f:
                    45:c0:27:45:9c:ba:8a:ae:a0:b2:c9:03:98:82:dd:
                    27:61:df:59:99:12:d5:f5:76:a3:f6:63:52:c6:28:
                    e1:8e:41:4a:cc:29:46:d3:e0:0c:16:1e:52:37:2b:
                    a3:fb:f7:50:e0:4b:80:96:05:d8:28:b2:4e:c4:63:
                    4b:2d:65:68:7c:53:c6:0b:06:af:27:af:df:7b:8c:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:96:51:36:DA:6B:F9:C2:74:5E:1F:A6:85:1D:48:48:41:27:7B:04
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:01:97:6d:c1:e4:32:87:15:ee:34:43:26:fa:53:1d:22:be:
         b4:b1:79:af:a3:bb:d0:fb:66:bb:7e:24:20:75:ac:f6:0f:3e:
         09:78:13:d0:a3:b6:e0:d6:e2:06:2d:a6:80:0c:31:75:d2:76:
         1c:17:c4:4c:91:43:ef:46:04:e9:92:ee:eb:4f:1c:77:c6:d3:
         fd:a8:0a:b5:94:f9:71:f8:ea:a5:bf:83:d7:d2:a8:fe:b3:b3:
         48:c4:97:1c:05:e4:0e:ed:fa:e0:e5:88:cb:94:e8:fa:11:30:
         ef:b1:2e:92:87:26:37:64:6d:0a:6d:d3:98:c9:78:d9:a7:70:
         af:90:87:f7:c4:d4:41:08:7d:a0:42:69:aa:bb:5c:a6:8b:35:
         2a:bb:57:1c:38:7b:d2:f0:77:3a:87:3b:e4:72:4b:ad:3f:c3:
         ff:73:be:1e:b6:b7:20:4c:60:4b:03:fc:01:a1:1a:ec:5d:f8:
         10:5f:5d:54:bb:fb:9e:3c:d0:77:7e:15:42:8e:d4:d7:96:a7:
         e1:74:bd:f7:52:29:ec:39:55:bd:40:a3:d4:d5:d7:cc:10:0c:
         3d:aa:ea:5f:be:c5:a1:de:c0:9a:ae:0c:bc:58:4d:20:d2:f7:
         4c:06:c9:3b:13:9c:4e:68:d1:7d:71:e0:58:47:21:56:18:38:
         c0:7b:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org