Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          sudmsy91VZSJwL+7LCnEJ+o3H/jwlNfHDffKtivd950=
Subject key identifier:   05:17:00:36:2B:35:14:52:32:2C:F1:91:0C:B9:07:97:7B:6F:9C:EE
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       20F33BEEAA343BE9E35272B838B9F7FB5A6462B0
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:12 +0000
ROA not before:           Mon 02 Sep 2024 23:08:12 +0000
ROA not after:            Mon 01 Sep 2025 23:13:12 +0000
asID:                     36236
IP address blocks:        103.84.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f3:3b:ee:aa:34:3b:e9:e3:52:72:b8:38:b9:f7:fb:5a:64:62:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  2 23:08:12 2024 GMT
            Not After : Sep  1 23:13:12 2025 GMT
        Subject: CN=051700362B351452322CF1910CB907977B6F9CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:d7:a3:68:1f:7a:a4:04:11:ce:9d:50:cb:
                    61:92:aa:3b:48:71:7d:27:d4:a3:fe:b1:7f:34:19:
                    a8:b3:fb:b8:4c:71:f4:e8:1b:c2:57:77:15:ea:0d:
                    a5:b4:6f:d6:a4:38:d0:b0:77:ff:d8:bd:3b:c0:66:
                    9c:07:1f:22:87:46:20:57:e4:70:f0:38:8d:d7:33:
                    93:b1:3c:ab:c8:81:0f:29:36:38:a7:f8:b4:d7:fe:
                    a5:14:a4:d4:c2:be:1a:8d:5f:48:ac:02:4e:53:db:
                    48:b3:14:88:12:64:24:dd:fd:05:f5:6a:2e:23:5a:
                    7e:5d:37:77:3e:02:ed:1a:3b:8f:bf:c7:9a:bd:b1:
                    57:be:5b:16:65:5b:5f:0f:86:e6:a1:66:74:eb:16:
                    8a:40:7f:40:6a:10:d6:5e:ce:99:db:d9:dd:67:c5:
                    b7:52:48:70:ef:65:5d:d5:24:04:a0:9c:8c:d5:97:
                    43:dc:89:63:f6:68:c2:07:27:14:e4:6a:dc:93:4e:
                    1e:7f:78:ba:54:89:fd:35:e2:c6:f6:d9:09:34:dc:
                    56:45:96:a9:6b:df:04:13:ca:63:2c:92:8d:71:12:
                    ac:70:08:f0:a2:db:a6:86:42:1c:c7:55:69:80:03:
                    01:ec:50:c6:68:40:05:64:53:40:16:f3:5e:01:e8:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:17:00:36:2B:35:14:52:32:2C:F1:91:0C:B9:07:97:7B:6F:9C:EE
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:8a:9f:fb:01:83:32:68:8e:59:e2:ed:78:8b:23:c5:b1:
         84:b0:48:45:f5:87:6a:a5:7d:47:2b:c0:0d:bc:a4:77:a2:41:
         ff:5c:6e:2f:87:60:20:c2:16:82:61:11:f4:c4:aa:84:ca:e7:
         5c:0b:1c:36:57:71:dc:60:5b:83:11:49:db:33:be:d7:af:45:
         7a:73:31:84:5b:92:2c:fe:f9:6e:8f:7e:ea:b9:a0:31:2e:93:
         05:e7:11:11:5f:76:f8:71:d7:28:5d:d3:67:cd:4d:2f:f4:23:
         44:e8:c4:79:39:ef:b2:86:af:ad:51:83:e3:bf:aa:5e:e9:81:
         0a:0f:43:28:5b:d4:f4:5b:bc:1a:e6:4d:e3:d7:bd:2f:56:57:
         68:10:78:57:f7:18:df:1b:fa:60:90:ad:09:4d:17:3b:d4:0b:
         62:08:3f:1d:c8:88:1d:f1:7b:c3:30:ba:68:a3:e4:46:41:67:
         8c:e7:7b:59:c8:1c:5e:6e:65:86:c7:8f:65:24:8b:e2:19:00:
         1e:01:06:41:da:79:37:47:7f:86:00:59:b1:ed:84:06:0f:9f:
         22:fb:35:48:fc:03:0f:ae:be:56:0e:52:de:08:cc:f1:d6:0a:
         87:ea:a2:b2:43:14:6f:19:e6:97:6e:28:e0:cd:6b:bc:ba:02:
         5a:e9:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org