Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          vB0P586zbl/ViYNJfjB9vkPkF5GWjN9aCTqmYmMTE8E=
Subject key identifier:   9C:5B:A4:16:92:42:78:AB:BD:50:72:9B:4D:62:34:3A:A0:FE:B1:46
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       1DF98CD3F83A832BEBFB2B4967613A24C3135E33
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:42 +0000
ROA not before:           Mon 02 Oct 2023 22:50:42 +0000
ROA not after:            Mon 30 Sep 2024 22:55:42 +0000
asID:                     36236
IP address blocks:        103.84.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f9:8c:d3:f8:3a:83:2b:eb:fb:2b:49:67:61:3a:24:c3:13:5e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:42 2023 GMT
            Not After : Sep 30 22:55:42 2024 GMT
        Subject: CN=9C5BA416924278ABBD50729B4D62343AA0FEB146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:cd:ec:36:fd:1b:1f:82:9a:25:ae:e3:8c:
                    5d:75:c8:c6:e6:97:e5:3c:d9:ce:cc:b9:10:34:e7:
                    7e:f2:37:0e:3f:cd:a3:06:b1:f6:4a:42:a3:fa:10:
                    b8:11:94:b1:30:ef:b5:ea:9f:f2:e3:28:98:66:e6:
                    53:23:11:10:7b:6a:7e:f9:68:95:86:8d:24:f5:29:
                    9f:3d:f5:ca:79:7d:0b:42:a0:72:35:bc:71:82:91:
                    5e:60:56:1c:80:7e:ed:c5:a4:1d:52:f8:91:4f:3b:
                    23:95:85:f8:a8:08:c7:8e:16:fc:1f:09:09:9d:b2:
                    60:78:ee:f7:af:93:34:bc:c3:b2:bb:26:4b:9f:e3:
                    1b:7b:c6:05:93:9c:ef:72:51:52:78:dc:38:00:d1:
                    a0:df:9c:f8:c0:45:97:17:ef:2b:c2:3c:73:0e:7a:
                    a3:79:cb:e9:07:a9:85:cd:ba:9f:6c:1a:b4:8c:ab:
                    7f:ee:12:19:32:63:ef:ec:5e:8f:70:d8:52:2d:b8:
                    84:0c:83:f7:75:a6:ab:82:67:59:e8:35:d9:62:da:
                    4a:b8:d4:49:f3:37:13:17:0d:76:4a:54:74:23:b9:
                    aa:14:61:9f:74:7b:fa:55:4f:64:48:60:bd:2c:9c:
                    d3:5c:45:4e:8c:b5:36:dd:d7:c9:e6:fc:18:4d:d0:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:A4:16:92:42:78:AB:BD:50:72:9B:4D:62:34:3A:A0:FE:B1:46
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:08:6f:f3:1e:f7:85:d8:0c:97:80:4e:4f:d0:ac:aa:7f:
         41:d1:69:41:05:e9:96:78:fa:c2:ca:ad:d7:60:48:37:70:7e:
         2d:cc:b8:5d:0f:61:c6:f9:08:9e:95:47:c0:ce:03:1a:fb:7d:
         eb:00:d0:d1:3f:3e:d7:05:94:ba:98:48:22:a4:4b:fa:c1:19:
         4d:64:6a:e8:79:c2:77:5a:0b:4a:81:f3:66:11:99:ca:0d:7c:
         11:3a:76:07:43:d5:ee:db:03:c9:63:4f:b8:f6:cd:09:a9:7b:
         3c:99:21:16:47:13:a9:5c:e0:30:ce:6d:0e:15:fe:d1:0d:4d:
         77:82:ad:f7:26:10:6d:0d:17:b3:5c:19:95:e0:9c:03:c4:db:
         05:c4:b1:ce:5b:71:4d:ab:5d:a3:ad:20:18:be:26:17:b4:68:
         dd:80:ec:ef:1f:01:09:82:23:87:36:53:75:a7:e0:07:b3:96:
         78:63:68:9e:66:55:1f:85:3c:c8:a0:4e:f6:3c:23:fa:03:5f:
         3a:c1:4c:78:89:5b:eb:19:20:7c:3c:13:23:e2:e5:33:83:bd:
         81:b1:f3:9c:d9:c1:89:aa:12:90:54:db:e6:dc:43:50:ec:bf:
         2d:07:d0:38:94:fe:fe:d3:ac:93:3c:af:e2:d6:5f:47:07:1b:
         b4:5b:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:54 2024 by rpki-client on console-fra.rpki-client.org