Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa
File:                     3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          u1M8CWpzkYroFwDnYHO4TJtAFW5kUjOa+CM03gfbNR8=
Subject key identifier:   1A:36:E5:65:8D:B3:B1:41:D5:B0:A7:3C:3C:C0:5E:ED:6E:60:CA:3A
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       44201A70FE52DED6F267F650FEC83313D91C224E
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa
Signing time:             Fri 01 Dec 2023 20:06:12 +0000
ROA not before:           Fri 01 Dec 2023 20:01:12 +0000
ROA not after:            Fri 29 Nov 2024 20:06:12 +0000
asID:                     36236
IP address blocks:        103.254.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:20:1a:70:fe:52:de:d6:f2:67:f6:50:fe:c8:33:13:d9:1c:22:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Dec  1 20:01:12 2023 GMT
            Not After : Nov 29 20:06:12 2024 GMT
        Subject: CN=1A36E5658DB3B141D5B0A73C3CC05EED6E60CA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bb:eb:a4:f9:fa:02:aa:62:bd:72:eb:15:26:
                    4d:03:24:fa:6a:57:8b:89:42:4a:f5:a4:22:73:08:
                    a6:18:57:93:7a:42:ea:41:09:a7:cd:44:b7:e9:33:
                    66:14:4b:c0:02:bd:39:7c:54:37:b9:a7:34:b9:c5:
                    e7:81:61:d9:5b:86:92:4b:48:27:4d:14:ad:3d:9d:
                    b6:c0:6b:30:03:a5:1b:6f:22:60:44:86:e8:d8:55:
                    c3:db:d3:3e:4a:20:62:d8:a0:d3:7f:7e:df:53:29:
                    ec:29:16:32:3d:85:1f:72:a4:53:0d:9c:6d:13:2d:
                    7e:89:30:21:7d:3b:73:77:73:76:c3:8b:78:e3:12:
                    cb:39:36:be:e6:10:95:ee:c8:17:54:dd:41:de:38:
                    b8:4b:21:52:c1:7f:bb:d6:bb:c8:8d:25:36:b5:76:
                    4c:6c:18:26:a4:e5:da:10:ab:54:b7:bb:86:81:98:
                    65:d7:3e:7b:66:c2:84:bc:69:e1:15:92:1b:03:71:
                    a7:ff:30:e9:56:0a:8c:bf:c3:ad:a6:bb:1d:3a:6f:
                    1d:8b:02:77:c6:93:1b:fe:3d:01:6c:26:ba:fd:90:
                    68:70:cb:51:f0:9a:bc:ef:d7:2e:90:6f:f6:48:86:
                    9e:b9:29:68:ee:c2:f0:77:65:57:2f:14:8a:e6:dc:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:36:E5:65:8D:B3:B1:41:D5:B0:A7:3C:3C:C0:5E:ED:6E:60:CA:3A
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:08:c6:da:0a:47:0d:88:97:90:ab:2b:af:7a:6e:aa:64:62:
         53:46:ba:91:0a:50:24:bf:13:7f:0e:e6:07:01:3e:9c:77:ea:
         38:7e:bc:1b:ad:df:07:6a:df:a0:1d:b0:c8:34:72:27:54:d1:
         97:b9:c6:b5:71:1d:83:36:c5:80:3a:06:a8:41:56:de:18:12:
         b7:29:d6:3b:ff:4a:45:1a:e2:8f:cc:7c:31:4e:c9:2a:b3:20:
         c2:e9:43:5b:21:43:0c:4d:11:2a:c8:ee:66:f8:3f:87:e5:00:
         f5:41:d7:a0:f3:54:bc:05:25:9c:6b:f7:e9:cd:ad:48:84:b3:
         ae:9b:da:22:24:e8:c1:ab:cc:a0:fc:e3:76:8c:11:50:21:7a:
         f2:22:e2:b6:bb:81:8b:87:ed:5a:38:12:3c:fd:fa:04:f9:26:
         57:2c:27:6e:a1:f7:6c:37:2c:99:4e:76:4e:85:96:a1:11:f7:
         d3:43:65:3f:67:ca:78:b5:d9:bc:dc:57:eb:04:43:25:b7:e7:
         39:4c:96:d4:21:28:ea:79:97:de:b8:a1:fe:7e:7d:13:36:37:
         e7:4b:86:74:5b:b3:d4:07:17:12:21:64:35:da:d2:c8:5b:57:
         69:8f:a8:59:fe:a2:c5:cb:47:b9:66:25:cf:f2:dd:6c:aa:2f:
         88:b4:77:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:54 2024 by rpki-client on console-fra.rpki-client.org