Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135322e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          gjPS3xDFD/prekFK2ldPoHHcaHWNZGwQ5KvWbfkyXvQ=
Subject key identifier:   0C:BF:EF:B6:D0:1F:28:2A:E2:C5:E5:B6:C6:1E:41:B9:52:CD:60:76
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       333B7904AF8B918EAC34E13169B15B216CB8F71B
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135322e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:13 +0000
ROA not before:           Mon 02 Sep 2024 23:08:13 +0000
ROA not after:            Mon 01 Sep 2025 23:13:13 +0000
asID:                     36236
IP address blocks:        103.84.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Feb 2025 21:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3b:79:04:af:8b:91:8e:ac:34:e1:31:69:b1:5b:21:6c:b8:f7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000
        Validity
            Not Before: Sep  2 23:08:13 2024 GMT
            Not After : Sep  1 23:13:13 2025 GMT
        Subject: CN=0CBFEFB6D01F282AE2C5E5B6C61E41B952CD6076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:78:89:9f:69:72:9f:5f:50:3d:de:d4:ef:
                    14:cd:8c:16:a8:c4:1d:1e:62:46:d9:d5:4d:87:a6:
                    61:0d:f1:79:b1:09:62:09:0c:41:20:a8:cc:ce:9d:
                    94:8e:11:c6:94:93:16:ee:c8:26:10:b5:d4:38:67:
                    a1:00:13:84:f7:f5:94:d7:af:08:30:52:3d:ee:78:
                    52:53:a1:89:8a:f1:85:30:00:7b:69:01:18:29:92:
                    70:44:3b:a5:34:a3:cb:0f:54:7a:ec:66:15:22:c0:
                    26:6e:a4:35:73:ed:9c:13:41:ca:d0:48:01:3d:f4:
                    23:85:7a:f3:66:99:05:e3:9c:b0:aa:53:9b:0e:a7:
                    94:92:ea:90:32:cd:e9:b6:7b:dc:99:dd:e0:07:b0:
                    39:b4:1c:5f:aa:ff:5a:d9:df:e0:6a:a7:2d:84:2e:
                    57:a2:25:48:4d:45:e0:b9:f4:07:b0:0a:ee:88:5f:
                    e7:01:aa:03:df:a5:88:56:00:62:57:1b:70:95:9e:
                    17:1b:92:76:73:14:09:22:02:5c:5a:f6:05:c8:80:
                    f5:50:7c:cc:8c:a2:31:93:ae:db:cd:d0:c4:5c:97:
                    de:c5:6c:0c:5f:0e:cd:0d:b3:dc:06:b3:0e:b6:ab:
                    b3:9d:80:d6:05:70:a8:c9:82:41:76:1f:30:f9:5c:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:EF:B6:D0:1F:28:2A:E2:C5:E5:B6:C6:1E:41:B9:52:CD:60:76
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:06:81:65:60:ac:5c:45:d1:3f:c6:d4:35:de:fa:df:4b:61:
         77:5d:74:a6:09:08:f2:31:2d:8e:d4:5c:85:5a:ab:8c:62:3a:
         37:63:05:06:d2:2e:75:e5:0a:9a:84:b8:a1:c3:1e:e4:09:38:
         22:c1:80:d3:2a:62:f5:ed:7e:29:58:68:06:fd:c2:37:cf:89:
         0b:86:06:e3:cf:35:2f:5a:f5:77:2c:f4:30:db:27:32:43:23:
         62:f6:a5:0e:f6:69:7c:9d:fa:05:03:51:cf:85:1a:4a:a1:e2:
         68:04:ba:ba:c4:be:56:94:17:a9:f1:87:84:0e:e8:46:23:c8:
         3f:ff:53:ee:bc:7f:15:a0:d1:c6:e1:5d:e7:3d:42:a0:16:57:
         8e:17:ec:98:0e:4f:33:b4:bf:0c:36:8b:f6:fc:d7:e2:27:8c:
         42:77:dd:08:70:71:2d:f8:d0:8b:fa:22:e2:86:f5:89:18:41:
         43:cd:e0:ca:ed:48:9c:4c:33:0d:39:c5:fd:a2:81:42:1e:72:
         17:ce:20:26:93:fd:22:3f:f0:59:26:d6:88:9b:3b:21:88:ab:
         b5:93:43:0e:00:22:cb:02:75:ad:28:74:af:05:7c:47:26:7c:
         f1:55:fb:46:47:c0:3d:34:5d:26:e2:5f:cf:63:81:08:2a:13:
         18:b1:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:45 2025 by rpki-client