Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa
File:                     3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier:          C3BLqytrmhsIpuLk6eks9HYqHz2W9Lw1aghgPz9P8/Y=
Subject key identifier:   74:87:84:7C:49:B3:CF:DE:57:80:A2:44:74:05:D9:6B:F7:8E:8C:59
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       53AA97C6EEB94978163A8620869C87C72DACA983
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa
Signing time:             Fri 01 Dec 2023 20:49:19 +0000
ROA not before:           Fri 01 Dec 2023 20:44:19 +0000
ROA not after:            Fri 29 Nov 2024 20:49:19 +0000
asID:                     36236
IP address blocks:        103.254.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:aa:97:c6:ee:b9:49:78:16:3a:86:20:86:9c:87:c7:2d:ac:a9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Dec  1 20:44:19 2023 GMT
            Not After : Nov 29 20:49:19 2024 GMT
        Subject: CN=7487847C49B3CFDE5780A2447405D96BF78E8C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:72:5b:4d:03:65:62:b9:89:f4:02:5d:b0:
                    ca:a6:17:b3:65:2f:fa:d2:29:4a:b2:4b:6a:cc:be:
                    66:78:1e:17:f3:78:0c:fd:c3:66:1b:05:3b:19:95:
                    77:b2:c2:4e:99:80:11:cb:cb:2f:45:aa:ee:59:88:
                    43:98:d8:e7:1c:19:3a:e1:1b:61:e8:12:b2:c7:6a:
                    ed:41:c5:90:0a:05:b9:62:10:c3:2a:14:47:b0:61:
                    2f:9a:54:35:76:56:5e:ef:49:bb:f7:04:47:5a:e2:
                    78:8e:12:9b:5e:c2:9f:25:54:a6:da:38:06:89:f6:
                    e9:eb:02:0c:9e:b0:5d:58:ee:bc:2d:27:43:82:e0:
                    b3:4b:89:ae:89:c5:ca:b4:25:86:ac:3a:ce:a5:15:
                    d2:03:42:2c:9d:6c:a0:4e:08:ec:26:67:6f:85:01:
                    3a:cc:6d:f9:30:b1:a3:93:f0:69:d0:57:d4:f5:7a:
                    c4:3b:37:c5:d5:77:d9:37:5f:ea:23:a4:3b:fd:f3:
                    bf:a6:11:40:ee:80:f4:9e:24:16:cb:51:73:17:48:
                    a9:9d:1b:c8:24:7d:83:7f:d6:08:e7:09:b3:6c:02:
                    01:dc:21:18:00:62:cd:c4:54:9f:92:02:14:8e:3a:
                    a4:d8:44:aa:9a:c4:ba:c8:3c:7f:46:f6:25:5c:44:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:87:84:7C:49:B3:CF:DE:57:80:A2:44:74:05:D9:6B:F7:8E:8C:59
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:0e:69:9f:0c:82:82:4b:5a:8a:45:d3:fd:9e:64:61:64:
         c2:af:1d:75:89:b5:c6:e7:38:0f:be:d5:c0:14:08:32:17:3a:
         c7:7e:9f:88:d2:05:b2:31:94:19:cc:c4:9a:fd:bc:5c:05:e6:
         b4:31:ef:f5:5a:f4:59:bd:0e:a7:b5:2f:4d:db:8e:28:52:81:
         b3:16:0c:70:0b:e0:d9:a9:56:19:ce:7a:1e:82:87:4f:53:1d:
         ad:a1:7a:e9:c2:e5:da:0c:3b:8b:0f:cf:ef:dc:70:96:6e:57:
         c0:da:b1:ec:1d:8a:29:57:67:ad:63:d2:fb:fb:2b:32:d8:3a:
         d2:0e:e6:d8:86:e8:47:88:c5:dd:49:18:51:19:26:70:ce:bf:
         60:1e:22:a1:c7:e6:2f:8f:ea:93:f7:79:b9:2a:df:1b:81:d6:
         ef:00:d9:60:26:15:4a:9a:47:74:bf:1a:76:d5:8b:78:84:db:
         18:04:8a:9b:73:27:e4:bb:cc:ff:ca:b8:56:b3:29:df:89:e0:
         5b:f7:94:aa:64:06:66:34:a9:bd:a1:d5:2b:9e:34:a6:5e:d0:
         5c:25:fa:2f:51:ee:83:1d:d0:bc:b8:7c:ec:7f:99:3b:71:65:
         1b:60:3b:dd:f7:63:54:5a:6e:b4:e5:ee:32:5a:ff:a8:b5:21:
         b6:85:d2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:54 2024 by rpki-client on console-fra.rpki-client.org