Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3330303a3a2f34382d3438203d3e203336323336.roa
File:                     323430333a323530303a3330303a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier:          ZdpXvYRs5OaiTvXYuysFzYebc14i9WshVihMhVs2F8I=
Subject key identifier:   51:2F:A8:3E:DE:AC:F2:49:94:4D:87:AE:D1:51:95:41:B6:0F:27:74
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       4803A090D94152D394D02C379E1B0B24A0B689B8
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3330303a3a2f34382d3438203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 19:55:33 +0000
ROA not before:           Mon 02 Oct 2023 19:50:33 +0000
ROA not after:            Mon 30 Sep 2024 19:55:33 +0000
asID:                     36236
IP address blocks:        2403:2500:300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 03:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:03:a0:90:d9:41:52:d3:94:d0:2c:37:9e:1b:0b:24:a0:b6:89:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 19:50:33 2023 GMT
            Not After : Sep 30 19:55:33 2024 GMT
        Subject: CN=512FA83EDEACF249944D87AED1519541B60F2774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:e5:4b:4c:1c:74:17:88:8f:5e:b1:ad:a4:
                    80:b5:b4:35:4b:df:57:52:11:a6:33:1a:00:27:67:
                    7f:b7:03:76:63:23:11:da:29:ac:b9:3f:d8:05:85:
                    8d:2b:48:ac:a5:55:09:86:85:9f:48:27:87:89:bc:
                    22:73:d3:f1:ee:41:f7:7b:d7:ee:3c:93:01:16:63:
                    77:39:39:31:17:04:4e:26:95:d6:04:80:20:fd:20:
                    8d:03:30:b6:c3:53:01:b2:d8:50:aa:f8:87:8f:13:
                    f7:17:1c:c2:9b:23:43:e4:ca:45:71:9a:84:13:4e:
                    ed:65:87:7b:5b:f7:81:39:b2:d4:7e:5f:9f:f1:32:
                    47:d9:9a:ba:ca:7c:af:65:50:bc:1a:9d:69:a8:02:
                    ac:95:36:bd:7a:75:bf:f5:98:f4:c2:44:92:13:6d:
                    d6:81:44:ee:66:d6:14:d8:60:d4:21:d2:26:c6:6f:
                    11:47:31:35:b8:52:ac:a6:29:97:87:76:d7:ce:17:
                    eb:88:44:34:d2:d5:fa:a6:8e:cd:cf:65:48:b2:2d:
                    01:a3:55:df:00:05:62:52:c3:38:1a:09:ee:9a:2f:
                    64:f5:1c:a3:94:a9:0d:6c:fe:6f:0d:8f:48:77:2a:
                    ce:f4:9a:46:aa:7b:fc:f7:a3:5b:d9:d6:55:b3:6d:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:A8:3E:DE:AC:F2:49:94:4D:87:AE:D1:51:95:41:B6:0F:27:74
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3330303a3a2f34382d3438203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:61:4d:dc:29:53:05:cc:0b:04:5e:03:95:6c:fa:20:c0:b3:
         ca:d8:5d:e0:e4:e9:d5:69:c1:bd:a5:6f:f3:35:82:d2:9b:1c:
         a1:d3:d5:59:f4:33:ef:9b:3c:04:9f:d2:04:26:23:40:49:88:
         a8:9f:7f:f9:0e:36:f4:9a:38:ff:5c:38:80:14:f6:d1:71:28:
         00:48:f6:be:a7:24:91:ac:b3:5c:bd:fa:9b:d2:e3:ec:3d:18:
         e6:0c:ee:86:26:78:34:5c:d6:d1:6a:ab:53:9d:63:d1:40:ff:
         ad:0a:8f:db:68:f4:49:c1:56:00:89:5a:0a:d2:5e:6b:ef:b3:
         c8:22:38:bc:ed:8a:ed:b7:17:7a:f7:26:97:85:78:5a:3d:04:
         1f:32:6a:b1:0d:55:cc:83:c4:84:33:bb:0a:8d:85:b1:55:f8:
         47:94:19:c6:ef:ff:d9:a9:a9:ec:56:b3:38:9a:e1:f0:f5:60:
         d4:93:74:42:f3:1a:5c:6a:7c:53:b0:9e:a9:ea:4c:76:71:b9:
         27:f5:66:c9:29:17:88:46:af:6c:1c:42:22:7a:e6:f2:bc:6e:
         79:95:48:5c:52:ac:b9:46:ab:5b:dd:0a:51:18:83:b2:b9:95:
         9b:23:c7:4e:56:ea:db:c4:e1:4b:4b:08:8c:9a:e5:d6:2c:05:
         25:53:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:01:18 2024 by rpki-client on console-ams.rpki-client.org