Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          uFqU2hmVcCfp9x7/Fi2FryGdOJ7cxVWpM8n8BvflyPk=
Subject key identifier:   48:60:36:12:65:C8:37:08:C0:28:FE:E5:1C:B7:C1:A2:B7:99:CD:97
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       758525151AD2926DF482553D8E8DB9F1D38F8DCA
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:13 +0000
ROA not before:           Mon 02 Sep 2024 23:08:13 +0000
ROA not after:            Mon 01 Sep 2025 23:13:13 +0000
asID:                     36236
IP address blocks:        103.84.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:85:25:15:1a:d2:92:6d:f4:82:55:3d:8e:8d:b9:f1:d3:8f:8d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  2 23:08:13 2024 GMT
            Not After : Sep  1 23:13:13 2025 GMT
        Subject: CN=4860361265C83708C028FEE51CB7C1A2B799CD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1d:82:93:29:d9:7e:05:ae:ad:f7:bb:92:19:
                    b1:56:e9:d3:06:79:9c:83:f1:30:e3:35:92:f6:30:
                    b9:8c:70:e9:32:d2:24:30:82:19:26:6f:58:4b:c4:
                    71:cb:0c:62:e5:1a:c7:4d:89:a1:6b:d9:c6:c6:78:
                    e0:ff:fa:75:e1:4f:78:b3:90:69:f2:91:c2:f7:25:
                    1f:06:44:75:6c:f6:2a:ed:6b:3d:09:9b:a6:4d:c0:
                    08:82:64:e3:97:7e:62:f6:0d:e6:06:f4:49:76:5d:
                    94:d7:72:d4:48:76:37:e3:cc:62:68:51:34:8a:ae:
                    8d:d9:62:0c:2e:b5:b2:d4:31:db:74:82:54:47:07:
                    60:64:19:4b:8e:b8:b3:b0:f1:e8:1e:4d:d6:a3:7f:
                    79:5a:17:3e:e2:02:04:4e:70:60:f2:d3:8f:e8:50:
                    28:e0:a0:3d:7c:68:01:9f:a6:87:5b:28:45:f0:36:
                    3e:c7:5c:5e:49:a4:85:2a:ba:63:20:16:ee:62:bd:
                    ce:e7:a8:bf:74:0c:9c:35:ce:cf:53:85:86:de:cb:
                    ba:d1:58:6c:ed:dc:f6:62:3b:4a:60:87:e2:c5:98:
                    c2:c0:9b:2c:0c:f6:94:a1:c6:14:6f:88:00:ab:3a:
                    32:3e:5a:90:ce:65:c8:d8:1e:06:ff:a8:ac:79:6f:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:36:12:65:C8:37:08:C0:28:FE:E5:1C:B7:C1:A2:B7:99:CD:97
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:e2:52:4a:6a:26:6f:fe:3f:a4:c0:04:1f:2f:94:22:37:
         c8:f2:0a:69:af:27:90:b0:f9:b5:a6:2e:21:bb:63:4c:32:4c:
         d5:d2:2f:47:b8:9a:94:74:6d:f8:d1:8b:26:bd:7c:a2:87:e3:
         f4:7a:d4:43:dc:05:6b:37:6c:c6:33:2e:af:3c:35:c5:96:92:
         85:9e:fc:18:f5:17:4e:db:b4:a6:ab:10:65:cc:f9:aa:98:25:
         46:54:48:c6:50:81:c7:c7:0b:8e:ed:6c:c9:e5:bc:b8:46:de:
         72:4e:8e:29:f6:73:f5:58:73:9d:3c:97:e7:fc:a8:99:e4:ac:
         f9:39:16:97:74:b7:78:26:f9:10:d7:1f:0a:c4:1d:eb:3c:3f:
         94:2a:ce:2d:84:1a:f9:93:ec:e4:31:eb:b7:69:0c:7a:5c:b6:
         46:2c:74:1a:d7:94:e6:e9:5f:31:8b:f5:53:01:35:17:9a:20:
         bb:a0:f0:41:bb:31:db:71:2b:2e:45:ee:ed:29:8d:51:a2:61:
         f5:ff:e0:e6:54:f8:b8:18:45:b8:7e:31:f2:10:f4:82:d3:64:
         57:fd:ab:4b:4a:4b:c1:99:bc:be:2d:df:b7:38:05:ce:c2:a1:
         d6:62:28:a7:d1:4e:24:e6:e5:cd:e8:32:c6:9a:50:75:68:2d:
         07:03:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org