Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa
File:                     3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa (raw, json)
Hash identifier:          7Q0IK6HCzblYtbG4PcetkKCOo7U5pO3TRGvUb8u1omE=
Subject key identifier:   E1:22:4B:02:D6:D5:0B:7A:FC:9C:B3:2A:0A:79:5F:03:A0:16:9F:36
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       0FADEC347141F4C3B91EBDDF22E92171756FF14A
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:42 +0000
ROA not before:           Mon 02 Oct 2023 22:50:42 +0000
ROA not after:            Mon 30 Sep 2024 22:55:42 +0000
asID:                     36236
IP address blocks:        103.254.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 03:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ad:ec:34:71:41:f4:c3:b9:1e:bd:df:22:e9:21:71:75:6f:f1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:42 2023 GMT
            Not After : Sep 30 22:55:42 2024 GMT
        Subject: CN=E1224B02D6D50B7AFC9CB32A0A795F03A0169F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:ea:6a:b9:31:4e:38:4b:c3:70:dc:e1:02:
                    cb:e7:2e:ba:f5:5c:99:20:f4:54:0d:9f:4a:88:00:
                    8b:ad:80:66:93:0e:b4:3e:17:25:94:ac:55:40:92:
                    6e:01:44:01:3e:f8:60:43:7c:36:a0:d8:f7:5a:e7:
                    6f:3b:98:59:18:1e:e0:81:08:11:9f:ff:14:34:34:
                    61:2e:83:fc:d0:db:f6:64:4d:02:c4:ae:c0:12:3b:
                    c4:74:94:6f:23:36:e5:bc:e8:77:2b:7d:ae:8c:e3:
                    8a:12:30:cb:d2:1f:ab:63:87:f9:9c:7c:08:2a:7c:
                    b7:33:09:e9:23:ca:d3:cd:07:be:d1:2e:01:80:cb:
                    d3:58:6e:d7:26:de:bb:d0:9b:4e:fa:e2:52:48:fa:
                    24:5a:8f:de:b3:c6:f4:d1:5e:e0:87:76:6d:d1:42:
                    e9:58:dd:19:6b:e8:63:eb:f2:75:ca:50:ff:0c:56:
                    62:8c:98:83:f2:9f:d7:2b:ce:07:5f:6a:1d:72:e7:
                    26:bd:de:24:f9:a9:c8:b5:23:ea:2c:79:ba:42:a6:
                    84:fd:8f:b2:27:35:af:e9:81:4a:26:30:7b:1e:7a:
                    74:be:52:d9:d4:bc:69:66:ca:fa:47:b4:35:ea:0e:
                    60:dc:d9:ce:82:2c:a7:98:90:d9:65:cc:13:aa:31:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:22:4B:02:D6:D5:0B:7A:FC:9C:B3:2A:0A:79:5F:03:A0:16:9F:36
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32322d3232203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:0e:7f:ab:ec:b7:ce:50:b8:8d:e2:10:77:4e:bb:41:94:01:
         7b:9c:88:32:95:10:dc:8a:4c:cb:f1:52:af:a7:de:c8:34:0a:
         2a:2d:d4:d2:36:78:57:36:e4:b6:e1:0b:87:c3:c5:d5:c3:8b:
         2b:07:63:f2:69:33:a7:2b:41:96:58:9b:cf:00:3a:ac:1b:50:
         27:9a:ab:56:d1:47:65:bc:cc:0e:10:88:1a:dc:09:46:bd:13:
         7d:43:21:fb:13:a7:79:a4:61:4e:38:8e:0b:f6:b1:ef:91:c5:
         77:a1:a5:a5:e0:ef:54:6a:d4:fc:b7:52:70:1a:cc:f0:99:14:
         d6:d4:ce:fd:9f:a2:7d:1c:c5:cd:58:18:84:0e:0c:0f:c9:7c:
         74:b6:77:f6:62:7e:5e:9e:8e:58:64:2a:48:fb:5f:a4:a2:97:
         3e:21:59:7a:25:a3:cf:0f:c1:d6:4c:26:e4:38:d4:82:02:52:
         76:92:d7:d9:9c:0b:9b:61:f4:57:a9:16:c1:94:bd:45:84:20:
         96:6c:42:6b:fd:82:ab:1a:ed:ef:c8:70:25:55:0a:7c:48:79:
         db:9e:41:a5:71:84:80:92:23:52:d6:10:9c:ee:6a:05:16:4c:
         90:d4:d8:81:3f:3a:c3:02:24:5a:1e:b8:36:a6:99:ec:6a:07:
         df:7e:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:19:05 2024 by rpki-client on console-fra.rpki-client.org