Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa
File:                     3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          dA5C/ghcJmeUIcPVxDbHWt5zXD7Ln9f1Ny2FyoeP4Oc=
Subject key identifier:   C8:42:36:6D:4D:DB:DF:47:F9:51:CE:55:2D:70:9D:6A:FB:55:5F:2C
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       6C955B1D07AD7B188A207CB3A6B7FFDE4F92B660
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:13 +0000
ROA not before:           Mon 02 Sep 2024 23:08:13 +0000
ROA not after:            Mon 01 Sep 2025 23:13:13 +0000
asID:                     36236
IP address blocks:        103.254.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Feb 2025 21:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:95:5b:1d:07:ad:7b:18:8a:20:7c:b3:a6:b7:ff:de:4f:92:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000
        Validity
            Not Before: Sep  2 23:08:13 2024 GMT
            Not After : Sep  1 23:13:13 2025 GMT
        Subject: CN=C842366D4DDBDF47F951CE552D709D6AFB555F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:df:f4:a6:09:dc:90:8c:ce:6c:0a:7e:c1:
                    66:b4:0b:db:81:1e:cc:aa:36:e7:ec:64:3e:98:73:
                    dc:60:36:31:23:99:87:3b:de:78:a6:5f:aa:84:88:
                    ec:42:8f:33:27:17:dc:bd:99:92:7d:47:b9:00:b0:
                    be:5a:4d:d2:b1:09:13:67:e0:e1:c6:b0:97:70:e3:
                    c9:91:4f:92:b3:a9:c9:3e:8d:8e:95:0c:90:b5:1b:
                    28:90:35:59:12:cf:df:ed:b9:13:3b:6c:a5:39:2d:
                    7f:5a:86:6f:f4:36:8e:9c:2e:9f:99:4b:b4:46:07:
                    25:a5:c2:9d:d6:0b:6f:ce:02:42:3f:64:40:2d:6f:
                    91:fd:d7:7b:5a:1d:41:49:5b:f8:57:62:9e:5c:29:
                    ac:ba:4a:de:26:e4:ef:6f:4b:4f:0b:79:9d:94:00:
                    e0:2c:ea:47:7d:71:1c:d4:47:c5:90:b7:c5:f8:dd:
                    16:33:4c:5b:31:c4:74:90:43:d6:16:63:16:1a:cb:
                    30:d7:fb:35:76:52:1b:fd:c7:7a:93:a4:64:b3:8e:
                    fd:ce:58:66:76:80:5e:25:b6:a6:41:b5:77:58:17:
                    4c:0e:1c:5c:d1:c5:aa:3e:0e:cd:f0:75:75:a8:d7:
                    8a:9f:2d:e2:b4:3e:5a:e3:f5:a2:de:29:a8:22:69:
                    4d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:42:36:6D:4D:DB:DF:47:F9:51:CE:55:2D:70:9D:6A:FB:55:5F:2C
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:e7:80:b2:1b:d8:ae:d8:71:a1:08:a1:98:f2:de:b4:4d:70:
         a1:f7:b5:f9:0e:4b:53:c8:15:2c:40:a8:42:9b:0f:68:3b:49:
         05:e9:c2:64:b7:ed:99:92:21:5b:9a:89:62:35:cc:51:47:a9:
         c1:ba:61:b8:86:68:31:0a:5d:0d:75:6d:9a:cb:95:69:ab:b3:
         6f:49:a4:78:30:b6:7a:d9:33:b4:ac:a9:85:0c:40:71:c2:25:
         6f:3a:2d:a3:e4:66:e7:da:7c:30:f9:0b:5f:55:8a:6a:92:b7:
         99:c0:f0:b0:2b:3c:13:8e:2b:37:f3:e7:20:8e:b1:ae:b3:5e:
         c6:0d:04:5a:3f:56:44:ae:8a:85:0b:53:21:ad:16:45:ed:ac:
         0f:e9:dc:1f:eb:fd:d8:22:35:76:73:5c:1e:a0:bc:28:30:cf:
         37:dc:e9:f4:dc:73:03:1c:9e:57:84:40:2e:5e:02:b6:5d:96:
         70:42:33:a4:42:f8:7f:b3:b7:ef:42:57:1d:02:6c:6e:c7:3f:
         cd:4d:a7:7c:4a:c8:39:d2:6b:96:98:59:47:41:9e:41:46:43:
         2a:01:f4:3c:48:a7:10:76:23:8a:21:41:dd:3c:dc:70:6d:37:
         8e:7e:f2:86:a5:bd:2d:73:9c:06:19:8a:98:a8:1d:13:93:3d:
         4f:6d:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:25 2025 by rpki-client