Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32342d3234203d3e203336323336.roa
File:                     3130332e3235342e3136302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          iRrLC/XUJw+erbhl4jRHILZvL6YqXfGp1cFDU6iWW44=
Subject key identifier:   7E:F2:36:E0:3E:1F:8D:11:25:26:AA:75:53:20:1A:15:00:C7:D2:DB
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       71F90BBEA6175DF85C2750F3F37B98AD9CE031F7
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:14 +0000
ROA not before:           Mon 02 Sep 2024 23:08:14 +0000
ROA not after:            Mon 01 Sep 2025 23:13:14 +0000
asID:                     36236
IP address blocks:        103.254.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f9:0b:be:a6:17:5d:f8:5c:27:50:f3:f3:7b:98:ad:9c:e0:31:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  2 23:08:14 2024 GMT
            Not After : Sep  1 23:13:14 2025 GMT
        Subject: CN=7EF236E03E1F8D112526AA7553201A1500C7D2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:05:db:0f:47:8a:16:5e:41:32:b9:f9:67:
                    68:10:62:25:fb:d3:7c:97:83:7b:aa:0c:38:18:4b:
                    af:a2:9b:e1:07:61:4c:75:49:20:51:58:da:a4:6c:
                    ba:f2:e9:11:f4:fb:bb:58:0a:b9:ef:a5:a2:f5:a2:
                    af:fb:ea:cf:3b:19:2d:37:b0:29:50:ca:98:67:a3:
                    99:06:82:4d:7e:c5:37:fe:0b:9b:c4:05:1f:1f:1b:
                    8d:71:b3:63:9e:1b:9f:e7:7d:5a:d4:12:04:3a:b6:
                    34:35:fd:3a:22:57:ac:4a:50:72:70:da:b7:44:75:
                    c3:24:0e:bf:d5:62:5e:71:a7:b5:70:d4:05:c1:79:
                    c5:cd:e4:c8:19:69:e1:08:ae:da:c4:7c:4e:1e:0e:
                    49:52:8f:e1:71:c2:a3:21:c9:b4:0b:96:ba:d9:1a:
                    32:b8:b6:7d:13:11:40:20:28:17:33:0c:7a:87:b4:
                    7f:b0:d6:6a:06:2e:ad:81:a4:ba:35:cc:5a:3a:91:
                    13:3e:b5:21:45:66:59:eb:29:55:84:5a:98:70:a2:
                    11:2b:d6:27:e9:fa:74:50:d5:c8:f9:ee:68:ed:97:
                    2d:56:db:b5:d6:19:cc:9c:7f:59:ec:5d:f5:1c:f0:
                    17:95:e9:8d:b2:7c:33:06:70:06:13:77:32:00:ee:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:36:E0:3E:1F:8D:11:25:26:AA:75:53:20:1A:15:00:C7:D2:DB
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:49:84:43:ea:ad:32:c8:1a:7f:53:09:5b:ea:07:39:df:ea:
         45:f8:2d:97:b8:50:8e:82:a5:28:bf:6a:f6:b8:51:00:45:63:
         97:f2:dd:05:e1:cc:27:04:a0:45:a1:b2:21:67:cb:99:28:e4:
         00:43:55:92:eb:34:b3:46:4c:76:26:e2:22:b9:9a:d7:6c:94:
         ef:b4:97:59:e3:83:d4:03:87:d6:7a:36:5e:f9:65:86:a8:d2:
         a5:58:89:14:e9:d0:73:b4:9c:6b:27:e5:7e:ec:d5:e0:be:ed:
         36:b9:b1:93:26:4d:97:8f:88:7b:99:5e:2d:6e:fc:57:3d:49:
         64:b2:bd:0f:00:32:e2:e7:cc:3f:b0:67:a3:a5:01:77:38:14:
         b6:5b:7b:a7:73:45:30:f4:a9:0d:37:73:f8:28:b3:d1:67:9a:
         31:e7:44:a0:1d:bf:3a:0c:ac:24:bf:07:4c:9d:99:c2:f0:d1:
         5f:72:db:4e:66:6c:98:67:85:9d:20:1f:2b:d8:e7:c5:5a:82:
         d2:53:5d:bb:32:bc:ac:e8:cd:0d:b2:7b:8f:63:9d:fa:24:6b:
         40:aa:44:b4:51:63:e8:41:29:cc:61:f2:a4:7c:84:14:01:f3:
         06:30:19:2b:64:91:32:16:04:27:75:1c:40:b3:0d:a0:ff:ed:
         57:5c:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org