Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32342d3234203d3e203336323336.roa
File:                     3130332e3235342e3136302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          M5RgRwrdPQBHA80KknCWrG5obRPNMnsd7pVcdFDD/1c=
Subject key identifier:   C3:F1:C2:36:74:05:FC:11:B9:FC:B5:5F:6B:E9:F5:2C:2F:91:A9:1B
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       242ACE8539A7B12697F17CD26FB6D68D18CDE853
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:42 +0000
ROA not before:           Mon 02 Oct 2023 22:50:42 +0000
ROA not after:            Mon 30 Sep 2024 22:55:42 +0000
asID:                     36236
IP address blocks:        103.254.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2a:ce:85:39:a7:b1:26:97:f1:7c:d2:6f:b6:d6:8d:18:cd:e8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:42 2023 GMT
            Not After : Sep 30 22:55:42 2024 GMT
        Subject: CN=C3F1C2367405FC11B9FCB55F6BE9F52C2F91A91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:63:16:0f:b9:33:f6:33:82:ac:a9:26:1d:
                    62:4d:45:cb:e8:8c:c7:cc:80:63:0e:86:02:1a:98:
                    8f:e6:0e:58:ac:99:11:63:8a:09:f5:60:19:65:ef:
                    65:e3:ff:6c:7c:73:c4:77:82:a1:2f:c9:15:eb:bf:
                    25:0d:94:83:e0:51:f8:87:2c:76:56:a8:fa:b6:66:
                    60:3e:a0:8b:b1:ad:7f:f3:af:b2:00:26:05:80:82:
                    d9:40:ff:aa:e3:cb:d8:75:68:1c:80:3b:14:b9:af:
                    22:97:92:93:97:c4:bc:8d:2d:96:53:42:cb:b2:4c:
                    3c:a3:fa:68:26:30:1e:dd:80:ca:63:2b:0d:51:17:
                    77:65:8b:c2:23:c6:c5:fb:77:55:2c:c8:37:91:09:
                    9e:7f:2f:cb:e6:95:f7:35:b5:71:61:bd:43:15:db:
                    fa:94:c3:97:5b:44:05:69:1b:8a:28:f3:ff:99:9a:
                    3e:c1:92:e9:96:b3:78:78:6c:c4:42:b8:bf:dc:87:
                    0c:70:f1:7b:2f:c1:93:80:0d:f7:b0:07:9c:68:72:
                    ff:b1:45:05:ae:80:b1:0e:31:26:8d:38:2b:aa:8c:
                    c0:6d:c3:ef:40:cf:47:9b:9b:f6:ad:67:66:1c:fb:
                    70:8d:3f:82:53:4f:d6:d5:a8:37:4a:f9:69:88:ba:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F1:C2:36:74:05:FC:11:B9:FC:B5:5F:6B:E9:F5:2C:2F:91:A9:1B
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e1:3a:98:28:6f:fb:39:b4:5f:bb:73:b2:fc:6a:a6:20:9d:
         9a:f2:3e:b0:54:61:d7:05:69:7a:2f:73:42:3d:3f:37:9d:d8:
         ba:7b:df:30:65:e0:b2:23:6f:8e:f6:60:fc:ec:3e:ac:b9:6c:
         6e:5a:c9:b4:a2:40:a9:83:6f:0b:3a:a1:5f:4d:22:50:4c:7c:
         10:b4:44:aa:06:25:32:33:1a:81:e8:de:f0:e0:aa:67:4a:87:
         9f:bf:8f:16:6b:6a:4a:9e:6b:a0:36:12:ce:ae:67:81:f0:d9:
         ae:d8:69:c0:59:84:df:13:ae:7a:ad:a8:e0:80:9b:52:67:67:
         c1:1a:11:d3:fe:10:19:8e:f3:e5:98:66:89:fb:72:a7:58:8c:
         76:89:c8:c0:01:ff:cd:dd:f8:ac:e1:93:f0:01:0b:03:71:65:
         38:c6:11:87:e9:07:4c:64:b0:a9:b9:a2:c2:08:ef:f4:82:49:
         86:43:48:2c:ad:a9:89:41:9e:83:fd:28:8d:12:3a:28:79:be:
         f3:5c:3a:a3:ca:86:1d:e6:a8:c3:4c:56:85:b1:e8:70:97:f7:
         d2:cd:1f:ce:d9:6b:50:a9:b2:7b:36:32:d0:15:bd:0e:4f:da:
         14:a9:d1:eb:e9:31:bf:fb:63:e6:bb:fc:af:92:21:5f:38:5e:
         8b:b3:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:54 2024 by rpki-client on console-fra.rpki-client.org