Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a343030303a3a2f34312d3431203d3e203336323336.roa
File:                     323430333a323530303a343030303a3a2f34312d3431203d3e203336323336.roa (raw, json)
Hash identifier:          0dYUFZc2oq7nFD0BqCv05mSvsn9GkYK2SgBfKr4jfcA=
Subject key identifier:   C7:0B:7C:EB:CC:61:AA:66:AC:6D:03:49:C8:45:B3:1F:F5:BC:5F:D2
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       081A4FB8A4CE982B18B18A69909688CEDDF93DED
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a343030303a3a2f34312d3431203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 20:13:06 +0000
ROA not before:           Mon 02 Sep 2024 20:08:06 +0000
ROA not after:            Mon 01 Sep 2025 20:13:06 +0000
asID:                     36236
IP address blocks:        2403:2500:4000::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1a:4f:b8:a4:ce:98:2b:18:b1:8a:69:90:96:88:ce:dd:f9:3d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  2 20:08:06 2024 GMT
            Not After : Sep  1 20:13:06 2025 GMT
        Subject: CN=C70B7CEBCC61AA66AC6D0349C845B31FF5BC5FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:91:12:14:08:7d:ab:c0:18:43:0f:c7:b6:
                    12:76:50:08:58:46:2f:9e:64:df:c9:83:3d:b2:08:
                    76:4d:8a:2d:d0:49:27:84:b9:b2:c1:2a:aa:cd:73:
                    45:97:9e:49:17:36:d5:42:a4:4e:a4:91:b8:af:d5:
                    76:24:38:ac:5d:30:af:fb:04:d8:9d:ad:90:84:b7:
                    68:30:69:7e:00:85:c4:95:f0:47:08:3a:6a:49:fe:
                    10:07:35:c4:8d:97:bb:e8:9f:87:1f:c7:5a:be:45:
                    00:46:fc:de:75:b0:18:ff:49:f1:b2:0f:06:9d:db:
                    74:23:27:e2:3d:dd:89:a5:ba:1d:66:8a:9a:b6:27:
                    66:ca:af:1d:d7:95:99:66:c5:b7:32:d9:2f:b2:9e:
                    ae:47:53:02:48:34:9d:8c:c8:99:b8:f3:7b:82:8a:
                    d8:7a:27:87:fc:d3:ce:9a:a5:6f:94:eb:ba:db:19:
                    8f:47:22:e6:52:6d:a9:4e:71:6d:b4:25:cc:cd:27:
                    43:c4:ed:38:8c:01:58:5f:ec:e4:ad:72:7a:96:f9:
                    4f:0b:f3:32:56:99:01:a2:b6:0e:c2:33:e1:90:13:
                    ba:38:39:54:d9:af:38:64:f8:b8:50:29:f7:d0:7d:
                    ac:05:74:4a:c6:bb:07:49:a5:52:c7:d5:5e:01:9f:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0B:7C:EB:CC:61:AA:66:AC:6D:03:49:C8:45:B3:1F:F5:BC:5F:D2
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a343030303a3a2f34312d3431203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:4000::/41

    Signature Algorithm: sha256WithRSAEncryption
         df:eb:1b:17:0f:98:8c:72:9c:58:0a:29:e9:2b:d9:0d:ac:b4:
         9f:7a:2e:8f:83:59:bc:97:68:e8:a9:12:c4:57:0f:8b:b3:83:
         8b:c0:29:77:5c:5e:61:94:b5:9b:bd:01:06:fd:ce:e4:76:24:
         95:ad:cc:6c:02:d2:b2:1f:e6:6d:e0:b1:86:c3:46:ba:11:b5:
         95:2a:92:50:f3:af:da:64:fa:8d:5e:fe:db:5d:18:1b:b7:9b:
         e0:6d:be:f5:36:cc:e0:a4:de:fc:59:a6:09:3d:a2:9f:40:31:
         83:55:e6:9d:fa:83:b4:6c:a4:bc:95:5e:88:a8:03:cd:c1:86:
         69:fd:7d:d5:9f:e9:7e:26:e7:24:19:32:af:16:6d:27:ae:e5:
         6b:db:20:89:8a:59:b4:b6:eb:29:6a:48:26:ea:62:9e:5b:ea:
         04:9d:1d:99:11:13:b5:5c:fa:b9:ad:92:ae:67:ac:ff:89:a0:
         2f:e8:c5:f6:72:47:5b:90:16:e9:6d:64:d0:65:f2:67:7c:8e:
         60:5d:1c:f9:b0:53:ee:62:b0:f1:e5:d8:6f:2b:6b:b8:27:24:
         45:d9:94:03:43:fa:c2:50:96:3b:88:8b:f6:16:0b:08:9d:69:
         c2:9a:b1:55:22:37:ba:ce:27:a7:32:54:2b:01:b8:d2:ce:64:
         72:b5:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org