Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38362e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          1qNvrW30kJ2E81PqeNIyrzEkt/sVoZF/0LmO8TKm3QM=
Subject key identifier:   F9:1C:F8:AF:A4:DA:91:06:2D:F2:27:BA:F7:9A:CB:1A:D1:AB:B9:90
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       4F60D5F8FDBD855BF5726122DC2237942B56932E
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:13 +0000
ROA not before:           Mon 02 Sep 2024 23:08:13 +0000
ROA not after:            Mon 01 Sep 2025 23:13:13 +0000
asID:                     36236
IP address blocks:        103.6.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:60:d5:f8:fd:bd:85:5b:f5:72:61:22:dc:22:37:94:2b:56:93:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  2 23:08:13 2024 GMT
            Not After : Sep  1 23:13:13 2025 GMT
        Subject: CN=F91CF8AFA4DA91062DF227BAF79ACB1AD1ABB990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:d9:1b:e3:a0:e5:c0:36:99:ae:be:7c:bf:
                    27:35:58:31:36:95:9c:1b:04:2d:cd:3c:4e:7a:f8:
                    cd:0c:71:89:7b:39:9c:6b:d1:53:90:98:48:71:35:
                    2b:db:36:98:13:d5:d3:ca:85:5f:e8:9f:b5:dc:c3:
                    cc:ec:e2:c1:51:a8:9d:cb:2e:98:ea:ec:53:df:ec:
                    14:7b:d9:d7:a6:ff:46:4d:60:cb:22:3d:ec:e7:6b:
                    5c:56:bf:bb:bc:bc:03:8e:3e:52:d6:05:95:f6:f0:
                    8c:2f:aa:76:35:81:0f:91:fc:c2:8c:ca:d7:24:8e:
                    72:48:26:61:30:2d:ac:e2:24:10:7f:21:f2:fa:fc:
                    9c:dc:49:cd:52:ed:03:41:ce:97:e8:11:7c:c5:d4:
                    fa:cc:e6:ea:a8:7d:b8:71:3a:07:97:8b:e9:19:ff:
                    1c:84:e2:0a:33:5a:4a:45:ef:e1:24:89:1f:4c:b3:
                    d1:6f:2c:af:a5:01:41:39:87:c8:ee:7a:33:0f:03:
                    fe:3e:8a:b4:56:64:f8:c5:c2:39:46:8d:fe:3f:5a:
                    f3:a0:65:6c:e4:37:5e:31:36:44:c0:52:63:31:d8:
                    0a:32:5c:d0:09:f4:a3:0f:e2:84:1c:1d:9a:09:49:
                    54:da:c2:25:8e:15:31:0f:6a:45:de:a2:1b:b8:46:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1C:F8:AF:A4:DA:91:06:2D:F2:27:BA:F7:9A:CB:1A:D1:AB:B9:90
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f7:95:23:ae:25:ef:f1:26:65:22:c3:05:07:29:a6:32:64:
         ef:45:ad:17:ff:cd:66:60:26:b5:5d:22:20:de:99:36:70:5f:
         4e:31:d1:5f:6d:88:06:19:16:43:e4:b5:a1:d6:e8:7e:fd:af:
         22:03:fa:cf:ea:ba:ab:a3:12:b0:76:f4:a2:e6:0c:ee:86:91:
         c1:7f:48:fc:c3:8c:d8:0e:06:c4:eb:92:47:83:19:5d:bd:d7:
         19:a7:7e:34:36:66:f4:36:67:be:ec:a7:77:65:45:6a:a4:e2:
         2d:78:5c:b0:0c:09:23:7b:4b:b0:6c:0d:0f:21:cc:4a:95:c1:
         dc:39:f4:6b:1f:2a:9b:60:de:84:56:39:fe:75:df:61:7c:18:
         24:7a:c1:58:25:5b:0a:6f:08:4d:be:38:b9:c8:27:e2:6b:ba:
         e8:fe:ca:1c:b8:00:58:8c:28:1d:12:34:72:79:75:24:f1:44:
         4f:a3:75:93:b0:03:aa:d3:c8:6f:e2:e5:72:1e:d1:51:03:04:
         07:b5:7a:fc:94:06:7a:42:04:2c:2b:31:fb:33:cd:5f:c0:f8:
         b5:7e:4c:7f:e0:41:d0:32:e2:83:5a:6d:f0:6d:db:6c:a1:46:
         9c:b1:f2:df:51:08:a6:b2:d7:06:5f:38:cb:6a:47:e4:4e:89:
         5d:85:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org