Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38372e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          7ouxnJ3NO5WQIXfoZ0Lx4DgMIoVdfyI6CoKtHml3PhI=
Subject key identifier:   DB:01:DC:0C:F8:CA:C7:E4:3A:AF:76:76:04:35:68:EF:54:E8:4E:4C
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       3950D7417B3BCEFEC84329D522BD36E43D01680C
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:42 +0000
ROA not before:           Mon 02 Oct 2023 22:50:42 +0000
ROA not after:            Mon 30 Sep 2024 22:55:42 +0000
asID:                     36236
IP address blocks:        103.6.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 03:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:50:d7:41:7b:3b:ce:fe:c8:43:29:d5:22:bd:36:e4:3d:01:68:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:42 2023 GMT
            Not After : Sep 30 22:55:42 2024 GMT
        Subject: CN=DB01DC0CF8CAC7E43AAF7676043568EF54E84E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c4:4d:88:36:ff:34:05:92:af:04:77:ed:db:
                    73:80:98:8b:b3:35:1b:4a:7b:02:29:59:c9:bc:4b:
                    77:e6:b7:85:fc:9a:b2:01:6e:15:29:f3:97:89:86:
                    b5:04:74:b3:2a:49:55:0b:27:ee:d7:5c:6d:61:b2:
                    16:a7:7d:4f:61:91:61:cc:05:64:5d:e9:4a:2c:7a:
                    65:19:1f:71:35:35:1d:6c:6e:ac:b9:2e:2f:c9:2c:
                    b6:eb:ca:d8:6f:4a:17:ca:1b:2a:b1:5e:5c:3d:6c:
                    78:1a:2a:c4:b5:7d:13:67:f1:8e:78:3a:a8:df:ab:
                    53:b1:ed:a1:3d:1d:15:77:6f:24:7e:9c:c2:ad:6a:
                    02:04:18:de:c1:9e:c8:2d:6b:1a:5a:3f:ef:0f:28:
                    08:96:19:40:7d:89:78:b1:62:b0:01:06:fd:3d:3a:
                    f4:41:5a:de:38:be:2f:b9:9c:0e:e6:7d:80:4e:3c:
                    bd:ef:c2:d6:a0:f8:c6:44:dc:e0:a7:bd:e2:ba:4c:
                    c5:34:10:19:2f:3f:e7:2b:32:7c:e1:30:ba:21:0c:
                    59:a7:e9:77:3b:a0:a0:d6:0d:b9:cb:35:c1:2e:f6:
                    47:07:84:b6:50:af:36:3c:3b:ae:22:25:0b:c0:24:
                    94:01:b8:8a:af:ba:48:a0:a7:d2:4a:9b:e7:c7:9e:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:DC:0C:F8:CA:C7:E4:3A:AF:76:76:04:35:68:EF:54:E8:4E:4C
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:68:b5:dc:e2:35:19:74:39:99:1d:8e:b4:97:94:53:16:c8:
         4c:1f:ba:76:61:6f:71:ab:0d:5e:18:96:22:8b:10:79:6a:17:
         66:51:8d:eb:83:c4:5e:d7:ab:23:30:ef:ac:87:4c:2f:9a:64:
         c8:0b:7f:94:19:3b:28:b7:86:8b:5e:20:52:ae:36:e6:f6:8c:
         97:66:f7:30:e7:77:d3:2d:d2:75:90:a6:65:c9:aa:66:1d:93:
         31:0f:ef:5a:b9:81:76:2a:c3:54:82:94:04:8f:e1:b1:95:ea:
         ec:b2:c4:83:c2:c3:8e:b4:07:67:1a:50:43:f3:f7:e0:1a:a7:
         c3:5f:f8:f0:9b:e2:f0:fe:af:df:68:97:77:f3:24:cd:8b:64:
         b8:e0:2f:d8:a7:f1:8d:1d:15:8d:5c:b1:61:09:ad:38:b0:a2:
         34:ac:5e:e5:48:94:d3:d4:85:89:cc:4f:d1:82:17:3c:67:b4:
         36:c1:66:1a:a1:57:8c:94:06:d2:6d:a4:45:a9:29:45:4d:b0:
         6f:ec:eb:ac:28:07:c7:a8:4f:6c:f7:84:4e:a0:92:6a:fb:b7:
         28:0a:27:19:e4:45:6e:ab:5f:75:4b:6c:0f:91:8b:01:54:b4:
         07:f3:b1:3a:ef:5b:4a:6d:f1:f9:6f:fc:c6:4d:08:80:3b:4a:
         d2:19:de:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:19:05 2024 by rpki-client on console-fra.rpki-client.org