Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa
File:                     3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          wcpjGnjOg3FWrT1Y3LjT2FZ9aVTHBentaazs1djMRNU=
Subject key identifier:   0A:11:10:93:82:C3:9C:74:13:39:E5:FD:1A:FF:9F:87:FB:02:09:79
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       188CB3B030ECA7DD75B633F63F1C66171984F0DD
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:42 +0000
ROA not before:           Mon 02 Oct 2023 22:50:42 +0000
ROA not after:            Mon 30 Sep 2024 22:55:42 +0000
asID:                     36236
IP address blocks:        103.254.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8c:b3:b0:30:ec:a7:dd:75:b6:33:f6:3f:1c:66:17:19:84:f0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:42 2023 GMT
            Not After : Sep 30 22:55:42 2024 GMT
        Subject: CN=0A11109382C39C741339E5FD1AFF9F87FB020979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:48:31:25:04:40:6a:76:ad:41:c0:8b:42:
                    64:41:c2:53:1c:d2:35:3f:a2:d3:a6:bf:64:14:70:
                    4c:88:7f:ff:88:c0:95:78:6c:e0:b1:8f:0f:d8:89:
                    70:2d:7b:95:ec:07:f2:22:6d:2c:e7:24:4b:83:fa:
                    95:52:2e:3a:5b:1e:ac:5d:68:c9:e5:92:30:24:4f:
                    3a:af:ed:f3:78:0a:37:1a:1b:1e:4c:30:40:94:e2:
                    e3:4e:d7:28:26:e5:e6:20:dd:6d:c8:3c:7f:e1:0f:
                    31:72:8c:89:9b:32:97:19:a6:58:f1:09:a9:ad:61:
                    e8:54:4f:90:6f:cd:af:5c:23:58:00:84:2c:15:68:
                    b4:01:8b:67:64:ad:37:c4:6e:92:e9:5a:be:ef:a0:
                    18:56:df:34:32:2f:d6:d3:28:1f:11:cc:3b:e2:48:
                    f8:b2:3a:a0:bc:8d:9c:bd:17:95:20:a6:e5:b9:4d:
                    fc:16:e8:be:10:66:e1:eb:11:6a:fc:5e:c4:d9:8e:
                    ac:71:d0:4f:9f:20:73:43:01:57:9b:9a:97:a0:fa:
                    cc:46:a0:eb:75:bb:c1:7d:a4:1d:b0:10:6c:a5:d9:
                    84:5e:78:6f:dc:a0:39:1e:e8:cf:c1:ad:9a:f1:a0:
                    a4:a8:87:2a:26:aa:6b:e8:e9:a8:7d:28:3e:ce:37:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:11:10:93:82:C3:9C:74:13:39:E5:FD:1A:FF:9F:87:FB:02:09:79
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:8a:2a:d2:71:14:48:5c:90:44:d3:10:35:54:56:f4:cc:37:
         c8:27:42:4d:42:9d:a9:1c:ed:e0:72:75:1f:d0:d5:8b:73:9a:
         83:dd:5b:34:04:ba:98:1c:51:93:7d:14:fe:8c:26:02:f8:f1:
         09:05:59:25:c8:f3:3b:78:68:5f:7d:35:a0:1e:fc:a0:86:fa:
         f9:e0:dc:86:cc:8f:1b:ab:f1:97:db:59:94:db:38:a0:a9:78:
         84:13:5a:85:5f:52:02:00:25:75:35:36:ae:3c:5c:d7:9d:f6:
         a5:d0:8c:a8:13:78:02:f4:ca:dc:30:8a:f8:c1:a7:67:da:d5:
         2e:38:3b:58:a4:1d:88:2b:7d:39:a3:68:ed:57:3f:87:64:b2:
         c9:54:0d:1a:30:2c:2e:e3:75:c0:06:74:8e:78:64:cd:21:af:
         ae:68:f0:05:2e:fa:76:04:f4:06:d7:9c:26:75:92:be:cc:a9:
         f0:72:59:91:69:85:bd:22:e8:78:8a:b6:7f:74:4f:2a:08:9f:
         d2:eb:c8:2e:54:94:8b:60:f2:07:bb:47:6d:af:a4:a4:93:9b:
         ec:0a:f3:82:a0:c7:e9:84:b6:bf:0b:d6:9d:ee:ec:18:7d:0c:
         c3:9f:19:21:e9:4b:32:4e:1f:bc:d1:50:dc:2c:44:62:3d:c4:
         ff:c2:7f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:54 2024 by rpki-client on console-fra.rpki-client.org