Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa
File:                     3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier:          S+r2KqDldrYXjflhAgun7cvu5iO1VenN9MQIofxPluU=
Subject key identifier:   21:EE:48:83:9E:96:C4:82:70:C9:29:CE:05:97:82:78:9E:2E:5E:5D
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       783C76BD7203FF4E166D0DC3024AA492206C7F0B
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa
Signing time:             Fri 01 Nov 2024 21:13:24 +0000
ROA not before:           Fri 01 Nov 2024 21:08:24 +0000
ROA not after:            Fri 31 Oct 2025 21:13:24 +0000
asID:                     36236
IP address blocks:        103.254.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Feb 2025 21:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3c:76:bd:72:03:ff:4e:16:6d:0d:c3:02:4a:a4:92:20:6c:7f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000
        Validity
            Not Before: Nov  1 21:08:24 2024 GMT
            Not After : Oct 31 21:13:24 2025 GMT
        Subject: CN=21EE48839E96C48270C929CE059782789E2E5E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:a1:de:fd:b4:fb:d3:9f:f4:d7:f6:8c:e3:
                    29:94:6b:b2:b7:92:90:4f:1b:db:66:4b:06:86:57:
                    a5:b1:ec:b3:e5:57:2a:1b:20:06:8d:c6:38:29:43:
                    f1:6d:fb:6e:65:7e:6e:92:42:61:d9:4b:80:02:4e:
                    41:b6:74:5d:97:be:46:b1:e6:72:be:96:ec:ad:e9:
                    a7:6e:60:e8:eb:1a:3f:a1:b9:a4:ec:4d:86:2c:b2:
                    8b:09:45:e9:4a:11:0b:4b:41:15:db:c0:2a:5f:43:
                    a2:ad:ad:85:46:72:b6:76:38:8a:08:38:ff:57:6b:
                    44:c7:1a:80:87:94:20:fb:df:c4:93:f1:7b:6e:ab:
                    42:f0:d6:1a:20:54:00:bd:0c:f1:4e:d1:ea:24:43:
                    9e:0f:ee:ad:2f:73:e4:5a:07:32:03:5d:17:8b:38:
                    70:df:cb:36:aa:8e:4c:be:24:69:27:48:75:51:0b:
                    94:87:bc:36:79:d6:6e:6b:07:f1:9d:c3:7c:67:ec:
                    e0:11:32:f5:a7:24:e3:bd:f9:59:ed:70:4d:79:ee:
                    0a:0b:43:0d:a8:66:7b:eb:31:76:21:cb:95:ac:d3:
                    76:52:70:c6:7f:5e:18:9a:45:26:fe:df:99:d4:74:
                    fa:7c:68:e4:ee:31:b6:41:83:03:c1:d4:49:d0:75:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EE:48:83:9E:96:C4:82:70:C9:29:CE:05:97:82:78:9E:2E:5E:5D
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:23:b2:68:56:84:cc:a2:90:f3:fd:bb:b5:98:17:c9:6d:13:
         09:e3:14:7a:e9:bf:c1:0b:0b:e3:bc:21:6a:69:b3:c7:32:b0:
         86:78:44:f1:dd:99:b8:88:0e:26:c3:e6:ac:f2:3c:4c:77:b7:
         f9:74:17:14:21:41:bb:46:ec:f7:bd:79:ab:c4:30:4d:fd:1f:
         3c:13:7e:aa:21:79:c7:b6:44:f8:67:76:d3:aa:0b:17:30:21:
         70:4d:dd:d7:9a:ab:ac:d2:f9:3e:73:ec:e9:09:93:f9:cb:97:
         4e:82:54:9d:03:cc:b7:35:07:62:7e:4c:0c:03:26:34:fa:ff:
         cf:50:25:4f:1e:eb:14:af:b8:80:dc:03:48:d2:6b:59:98:b7:
         e4:fa:6d:75:e8:e1:25:4e:08:3c:81:7d:50:f2:61:11:7d:e9:
         5f:be:40:70:61:39:66:c6:69:19:e3:15:f6:4d:43:c1:d8:b0:
         fa:66:93:7b:74:fd:8f:df:60:46:fb:55:bc:e8:3e:6e:ea:79:
         a4:9e:c7:68:35:7e:88:72:c8:88:07:f6:fe:67:5a:11:81:0e:
         53:4c:22:d7:9d:d0:37:31:d3:ab:a5:6d:10:42:7c:d4:57:bd:
         88:31:51:1d:6b:3b:8b:77:86:d0:26:9e:f0:9c:8c:01:c4:24:
         79:05:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:32 2025 by rpki-client