Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38372e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          8COOmENs4W3cnSR3V84nuqcH3y+rRDbcvHqAVpOe9Rg=
Subject key identifier:   3F:F8:66:49:A1:C3:F3:6D:5F:89:0D:55:25:55:2B:BB:E8:11:36:B6
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       1200D7E8C77DA26EE124DCF903921F1F471D1991
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:13 +0000
ROA not before:           Mon 02 Sep 2024 23:08:13 +0000
ROA not after:            Mon 01 Sep 2025 23:13:13 +0000
asID:                     36236
IP address blocks:        103.6.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:00:d7:e8:c7:7d:a2:6e:e1:24:dc:f9:03:92:1f:1f:47:1d:19:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  2 23:08:13 2024 GMT
            Not After : Sep  1 23:13:13 2025 GMT
        Subject: CN=3FF86649A1C3F36D5F890D5525552BBBE81136B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e5:72:a3:a3:d6:32:46:6d:4a:63:c7:d6:f2:
                    7d:70:1d:bd:d4:ba:04:c5:85:d7:70:e0:f8:47:83:
                    c8:77:7f:d1:d6:80:42:7e:d1:16:ac:16:fd:6d:72:
                    b1:54:2e:50:73:41:97:ba:5a:b8:d2:e8:33:67:f3:
                    83:fe:a9:72:bd:ce:df:29:83:cb:35:b1:2f:a5:77:
                    6a:97:30:b2:bb:d9:bd:b3:5f:8f:c5:bb:ca:7c:8f:
                    61:9f:e3:d7:a7:fe:db:6d:1c:98:66:71:52:e8:41:
                    d9:fe:01:2f:13:b0:28:d4:31:da:ee:48:f1:ff:66:
                    5f:f2:86:ae:c8:8b:c4:c2:c6:7f:eb:02:a4:eb:6b:
                    9d:b6:cb:93:9c:b7:b4:58:53:12:4f:15:19:e6:9e:
                    76:8e:5a:34:c6:72:9f:d6:c8:33:10:1b:97:4b:d1:
                    dd:35:bb:1c:3a:6b:e2:a1:af:41:4b:5b:27:04:db:
                    54:1e:a8:ed:cc:67:ef:22:fe:10:e1:31:8e:0f:d8:
                    be:0d:d0:30:2e:55:d8:7e:8f:ab:d0:38:4d:de:84:
                    9e:b7:77:cd:a2:ba:5a:f4:ab:3f:5a:81:70:9d:87:
                    46:16:29:01:3b:e1:52:b6:82:2e:a7:5c:5f:13:ce:
                    a1:3c:b4:2c:bb:04:d9:13:9c:b5:a0:ab:bf:f2:87:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F8:66:49:A1:C3:F3:6D:5F:89:0D:55:25:55:2B:BB:E8:11:36:B6
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:39:6e:ef:8c:1d:5a:dd:7e:09:88:9e:90:7f:26:bc:2d:ff:
         d3:71:1f:f6:45:5a:9a:3f:c0:f9:46:ce:ba:8e:fc:f2:4d:b0:
         a5:e0:53:ae:25:dd:d3:1f:c4:40:5d:e6:0d:76:4e:53:ce:1b:
         22:92:ce:cc:a4:d3:2b:06:eb:a8:b6:11:33:d5:62:92:68:fb:
         ac:c7:e6:7f:db:14:61:13:51:54:f1:0c:1e:37:f8:5d:34:ae:
         4c:a6:da:55:4f:ce:ef:98:d1:76:de:29:68:a2:95:96:e6:f0:
         32:cd:44:91:73:18:60:4e:61:bf:c1:23:32:db:5d:82:36:5e:
         81:a8:a1:e7:70:f1:62:8c:39:83:9e:f3:c7:05:d4:16:ea:f7:
         89:89:4f:13:25:13:c1:96:74:44:03:d3:b4:a8:cd:d7:cc:46:
         ac:d2:c1:76:16:3a:f2:84:e4:f3:43:d9:17:c8:46:9f:b6:33:
         74:5a:ce:8a:d8:f2:94:93:1a:0a:04:92:79:d4:e3:bd:c9:5a:
         c5:49:5d:82:9b:d8:27:0e:45:f0:13:47:01:0d:1e:e9:d8:40:
         22:fa:4d:b2:67:7a:5a:47:68:26:3f:c4:d8:26:f8:43:44:84:
         8b:0a:e7:a0:85:34:06:14:72:5e:ad:64:39:62:4d:9b:40:20:
         6c:b7:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org