Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          n3+A7XsweO1KIfwMXk6d4tTpUXINfb9elT2PmpspauA=
Subject key identifier:   F6:9B:E7:C7:29:FE:BF:C7:83:AE:BE:B7:50:D9:69:C3:B0:73:E6:EC
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       2BAF5968D0DE14A2660ADCC1372F42132C4016A1
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:43 +0000
ROA not before:           Mon 02 Oct 2023 22:50:43 +0000
ROA not after:            Mon 30 Sep 2024 22:55:43 +0000
asID:                     36236
IP address blocks:        103.6.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 14:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:59:68:d0:de:14:a2:66:0a:dc:c1:37:2f:42:13:2c:40:16:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:43 2023 GMT
            Not After : Sep 30 22:55:43 2024 GMT
        Subject: CN=F69BE7C729FEBFC783AEBEB750D969C3B073E6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:fa:1c:f3:b3:10:3b:54:1f:81:00:00:10:
                    80:c2:a5:7e:3c:5b:f6:79:e6:a2:da:5d:97:21:bf:
                    94:92:44:56:35:0e:74:37:a4:fd:5e:1d:7e:fa:8c:
                    03:ac:19:35:02:ac:70:56:73:26:03:df:11:b0:54:
                    50:85:79:13:99:c2:dd:68:6f:c3:43:d4:9b:3c:c2:
                    64:22:37:bb:a9:20:57:8a:98:ff:0a:7f:ea:83:85:
                    d6:f1:04:50:40:1e:99:e8:ca:13:7a:02:29:28:75:
                    78:03:c9:80:35:00:6e:49:4b:7a:12:56:66:6a:ac:
                    04:ae:64:b2:14:75:ed:00:cd:ce:fb:22:01:f7:c8:
                    31:ce:38:fb:f5:07:47:48:6d:2f:d9:45:70:83:99:
                    27:a3:5a:2e:64:27:1f:a6:88:88:05:6c:94:d9:6f:
                    c3:da:68:bc:4b:ab:3c:1e:b2:4e:05:9e:59:bd:83:
                    1a:16:dd:04:f9:b2:f5:26:39:30:65:f1:2a:e9:54:
                    c0:fb:78:05:46:14:57:5c:29:0a:bf:65:3c:62:e6:
                    76:72:8c:77:74:31:1c:af:a9:c6:33:b4:62:6f:26:
                    1f:52:c9:55:db:f9:10:9f:a9:e9:76:6a:4e:11:55:
                    10:22:28:2b:f9:34:4f:14:d6:1d:d8:cb:6f:e9:99:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:E7:C7:29:FE:BF:C7:83:AE:BE:B7:50:D9:69:C3:B0:73:E6:EC
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ee:69:f0:79:4b:30:a5:9b:50:33:e7:43:84:7f:1d:91:98:
         79:b6:7f:85:94:e1:f5:b0:6a:6c:d7:ac:cc:4c:d8:c7:17:ce:
         e6:b4:46:52:f0:65:28:d5:08:ef:bb:a2:3c:69:4d:11:6b:84:
         53:09:23:f7:3a:7a:2f:ab:bf:0a:50:a1:2f:69:da:cd:47:20:
         b9:49:08:0a:f3:63:c2:33:8c:77:75:c3:e4:f5:75:51:e1:24:
         28:c2:c5:56:62:4d:5e:0e:79:19:22:c2:6e:24:bb:6a:b3:e3:
         c1:22:f8:07:d8:c7:d0:f1:34:4c:a4:ee:93:6b:ba:4d:0e:91:
         d5:f3:31:28:26:dd:06:df:6b:12:c3:5f:5a:35:04:1a:9d:6d:
         c2:b2:fe:41:57:30:38:d1:42:05:9f:44:84:70:0b:df:27:fd:
         64:b2:c4:87:f1:f8:8b:f7:30:a8:3a:de:f8:32:89:52:eb:a4:
         74:4b:c6:98:0d:7c:3a:62:b7:fd:4d:bd:15:ed:0f:3f:37:da:
         64:ec:16:00:1e:68:70:dd:09:98:ee:68:21:c0:2e:28:9d:02:
         a7:72:f3:9e:ae:db:c9:de:ca:d8:a5:16:a3:b6:31:42:2a:a7:
         3b:35:2f:f0:c5:47:43:7d:eb:18:20:98:1e:24:81:ea:ab:38:
         de:c0:e8:be
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUK69ZaNDeFKJmCtzBNy9CEyxAFqEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTIzMTAwMjIyNTA0M1oX
DTI0MDkzMDIyNTU0M1owMzExMC8GA1UEAxMoRjY5QkU3QzcyOUZFQkZDNzgzQUVC
RUI3NTBEOTY5QzNCMDczRTZFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9K+hzzsxA7VB+BAAAQgMKlfjxb9nnmotpdlyG/lJJEVjUOdDek/V4dfvqM
A6wZNQKscFZzJgPfEbBUUIV5E5nC3Whvw0PUmzzCZCI3u6kgV4qY/wp/6oOF1vEE
UEAemejKE3oCKSh1eAPJgDUAbklLehJWZmqsBK5kshR17QDNzvsiAffIMc44+/UH
R0htL9lFcIOZJ6NaLmQnH6aIiAVslNlvw9povEurPB6yTgWeWb2DGhbdBPmy9SY5
MGXxKulUwPt4BUYUV1wpCr9lPGLmdnKMd3QxHK+pxjO0Ym8mH1LJVdv5EJ+p6XZq
ThFVECIoK/k0TxTWHdjLb+mZc08CAwEAAaOCAjcwggIzMB0GA1UdDgQWBBT2m+fH
Kf6/x4OuvrdQ2WnDsHPm7DAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgZ0GCCsG
AQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzMvMzEzMDMzMmUzNjJlMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzYz
MjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABnBlQwDQYJKoZIhvcNAQELBQADggEBAA/uafB5SzCl
m1Az50OEfx2RmHm2f4WU4fWwamzXrMxM2McXzua0RlLwZSjVCO+7ojxpTRFrhFMJ
I/c6ei+rvwpQoS9p2s1HILlJCArzY8IzjHd1w+T1dVHhJCjCxVZiTV4OeRkiwm4k
u2qz48Ei+AfYx9DxNEyk7pNruk0OkdXzMSgm3QbfaxLDX1o1BBqdbcKy/kFXMDjR
QgWfRIRwC98n/WSyxIfx+Iv3MKg63vgyiVLrpHRLxpgNfDpit/1NvRXtDz832mTs
FgAeaHDdCZjuaCHALiidAqdy856u28neytilFqO2MUIqpzs1L/DFR0N96xggmB4k
geqrON7A6L4=
-----END CERTIFICATE-----
Generated at Fri May 10 14:18:16 2024 by rpki-client on console-fra.rpki-client.org