Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135352e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          eF+lU1xPgVBYc2wdb+9n6Bll0S6X/k5VFzh6EdqoVdc=
Subject key identifier:   A4:86:54:C1:06:AA:54:EC:A6:F3:23:E7:6F:77:B1:9A:09:E3:DB:33
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       22A731969BBADB167A7297E459AA965D67F61D37
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:43 +0000
ROA not before:           Mon 02 Oct 2023 22:50:43 +0000
ROA not after:            Mon 30 Sep 2024 22:55:43 +0000
asID:                     36236
IP address blocks:        103.84.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 14:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a7:31:96:9b:ba:db:16:7a:72:97:e4:59:aa:96:5d:67:f6:1d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:43 2023 GMT
            Not After : Sep 30 22:55:43 2024 GMT
        Subject: CN=A48654C106AA54ECA6F323E76F77B19A09E3DB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:7a:87:12:aa:c9:13:96:71:39:bb:2f:42:
                    77:12:62:94:1e:70:4e:dc:43:d9:00:6d:2d:34:0e:
                    03:d7:fd:75:3b:b4:7f:34:3a:3e:e5:88:de:c3:1d:
                    f9:34:b8:9b:35:15:87:b5:b5:9e:7e:2f:4b:19:74:
                    7a:5c:d8:e0:47:33:69:94:b7:6d:cd:3e:49:7b:05:
                    9c:8f:25:9e:bf:4d:6d:f1:17:69:f9:4b:ae:d4:a4:
                    c2:d7:93:aa:32:ea:76:45:fc:22:6d:9e:dd:3b:10:
                    3b:73:23:5e:f6:76:52:ca:38:29:81:43:41:29:76:
                    07:52:17:de:f0:ac:90:19:6f:3c:2e:e5:c3:7e:d5:
                    58:93:d5:30:6d:fe:e8:7a:7b:3c:ee:63:62:1e:d1:
                    b8:d9:e2:80:a9:e5:dd:bb:eb:97:de:5e:8c:ac:a9:
                    92:6f:5b:21:7f:5d:c0:37:f4:63:f7:69:ec:0b:2f:
                    18:f2:3d:be:eb:26:ae:b4:cc:83:91:37:69:43:73:
                    48:45:e6:2f:99:ca:da:17:0b:78:68:15:33:ca:44:
                    84:51:2d:31:08:fc:6c:ca:3a:9a:f1:84:7b:06:b3:
                    09:89:7b:c8:83:5d:18:65:e8:97:7c:7e:7b:bc:c4:
                    d6:ef:98:dc:3b:f2:49:ef:2c:52:36:37:6b:54:54:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:54:C1:06:AA:54:EC:A6:F3:23:E7:6F:77:B1:9A:09:E3:DB:33
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:d6:80:7b:61:dd:1e:53:80:1f:ca:2d:c4:a8:8c:7c:ea:79:
         76:3b:a2:ba:b5:dd:9e:b4:d4:c5:00:3a:75:c0:e5:6e:a4:d6:
         03:8b:87:e1:7b:c0:22:5b:48:71:1e:d1:a1:c7:ea:ae:f7:4d:
         31:a5:b6:48:a4:d7:f9:07:63:9a:76:9e:a1:00:a1:21:4e:0e:
         f6:5f:4b:32:77:86:ab:de:8d:b4:76:4c:4c:c0:ae:f1:5a:d0:
         8c:3c:2b:d8:00:63:2c:0c:91:ec:93:09:95:27:4a:a1:dd:c0:
         68:67:0f:44:7e:53:6f:f4:87:c4:dc:4d:49:08:9d:33:4c:e9:
         44:b5:82:55:71:20:94:7b:ae:35:c6:5f:96:8b:c2:fb:b7:86:
         4f:27:7a:d3:db:04:28:2c:b0:d4:de:7a:78:3a:bd:d2:26:a3:
         34:6d:ce:cb:80:ab:49:b0:2b:a7:d6:8c:83:97:bc:ee:4b:17:
         72:20:32:c3:5e:75:98:c7:55:a4:ef:97:f1:2a:c9:58:d1:5a:
         37:eb:55:8d:ad:d6:4b:ea:12:8e:5b:1d:d7:6e:3b:2b:9b:1c:
         de:22:21:b5:ca:03:f2:0e:ba:13:7a:7b:ec:9c:da:30:da:81:
         30:8a:89:39:5a:96:12:f6:7f:a7:ad:03:1a:c0:f2:e1:0c:3d:
         55:e0:ed:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:36:08 2024 by rpki-client on console-ams.rpki-client.org