Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa
File:                     323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier:          HFixgECdPxl1vIbwGE/8UEK89qCAHNJLd2OLxrf/YPU=
Subject key identifier:   0B:93:E8:42:F1:AA:99:F0:23:52:76:83:54:99:63:04:1C:6A:1F:B9
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       67264192AED2D92DD3A381A0E62764AB8CF96C97
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 20:13:05 +0000
ROA not before:           Mon 02 Sep 2024 20:08:05 +0000
ROA not after:            Mon 01 Sep 2025 20:13:05 +0000
asID:                     36236
IP address blocks:        2403:2500:400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:26:41:92:ae:d2:d9:2d:d3:a3:81:a0:e6:27:64:ab:8c:f9:6c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  2 20:08:05 2024 GMT
            Not After : Sep  1 20:13:05 2025 GMT
        Subject: CN=0B93E842F1AA99F023527683549963041C6A1FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:9c:b6:1d:09:3c:a0:33:e8:e8:b9:91:b5:
                    76:c0:84:45:56:6b:81:79:85:6a:e5:09:ba:40:54:
                    96:41:cc:c6:4d:0d:3c:27:f6:e1:5f:d5:32:b4:c5:
                    de:b9:bf:12:d7:97:18:7e:de:2a:8b:43:71:55:dc:
                    c7:d7:a5:75:c7:35:9a:7e:a6:23:9a:c5:9c:ff:69:
                    34:61:ee:90:db:c2:59:6d:15:a9:ad:fb:99:49:91:
                    1c:91:95:03:7a:4d:b4:57:89:97:fc:a8:53:ea:a6:
                    70:71:94:c8:15:f0:7c:e1:2b:32:3a:97:7e:89:12:
                    50:f5:af:f1:81:9a:12:a4:ca:be:e9:68:7d:fb:2a:
                    37:2b:9d:c9:51:6b:f4:5e:af:a2:71:17:f7:2d:3f:
                    c4:2d:8b:29:0e:6b:b4:a9:4c:84:48:4d:dd:bf:58:
                    e8:6d:9b:83:14:85:0d:37:48:ee:4f:8a:b4:25:09:
                    1a:ae:89:ad:d9:59:de:7e:fd:4d:7c:58:76:b2:50:
                    16:74:d1:dd:69:a4:7b:ff:45:e3:77:81:7f:ea:8b:
                    58:c3:72:71:16:9f:f2:3f:e3:7d:d7:41:38:87:36:
                    80:0e:94:2c:54:bc:0d:0a:da:74:5b:32:45:45:65:
                    1a:df:04:d8:2b:0e:e9:93:d6:47:f9:1d:87:79:d7:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:93:E8:42:F1:AA:99:F0:23:52:76:83:54:99:63:04:1C:6A:1F:B9
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:27:c0:03:0d:73:b8:9f:ef:22:34:ac:75:4f:00:cb:a5:fb:
         cd:03:80:77:39:11:c1:fd:fa:7f:d1:6d:4a:7d:d6:99:b5:57:
         98:03:15:f7:d4:c0:4e:58:97:7c:0d:c5:87:1a:28:94:9b:46:
         15:ab:44:81:08:e7:f0:97:e3:30:d3:36:6a:92:a1:ef:5e:35:
         d0:06:fe:48:bd:33:d0:8a:7f:1e:8f:d4:6b:0e:b3:cd:5d:ab:
         32:a3:2f:a8:13:c8:9d:ce:50:c9:34:67:1b:56:36:aa:5c:e1:
         a0:5e:a6:26:82:77:1c:a4:cc:6e:dc:85:c0:1b:69:2a:c3:aa:
         8c:c6:00:c2:31:6e:88:78:c3:dd:72:c2:89:85:63:0c:81:f4:
         9f:a9:2f:6b:71:4c:04:89:63:a5:41:9b:47:af:c8:d6:b0:9b:
         26:d1:b8:54:37:eb:9a:4c:34:1a:bd:2b:e8:06:28:f3:70:57:
         a4:41:96:c6:22:d6:ed:84:98:e4:07:d4:15:d0:4a:ea:92:de:
         ae:b5:ad:ae:d1:4a:1c:a6:1a:94:55:35:b3:5a:8b:0c:d9:c7:
         e5:19:95:08:84:4c:e1:21:13:66:73:7a:e5:d1:06:8a:ca:0c:
         d8:df:e6:64:cc:07:bc:18:0f:11:ce:b1:18:37:ed:f7:25:16:
         96:f9:f9:fa
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUZyZBkq7S2S3To4Gg5idkq4z5bJcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI0MDkwMjIwMDgwNVoX
DTI1MDkwMTIwMTMwNVowMzExMC8GA1UEAxMoMEI5M0U4NDJGMUFBOTlGMDIzNTI3
NjgzNTQ5OTYzMDQxQzZBMUZCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYXnLYdCTygM+jouZG1dsCERVZrgXmFauUJukBUlkHMxk0NPCf24V/VMrTF
3rm/EteXGH7eKotDcVXcx9eldcc1mn6mI5rFnP9pNGHukNvCWW0Vqa37mUmRHJGV
A3pNtFeJl/yoU+qmcHGUyBXwfOErMjqXfokSUPWv8YGaEqTKvuloffsqNyudyVFr
9F6vonEX9y0/xC2LKQ5rtKlMhEhN3b9Y6G2bgxSFDTdI7k+KtCUJGq6JrdlZ3n79
TXxYdrJQFnTR3Wmke/9F43eBf+qLWMNycRaf8j/jfddBOIc2gA6ULFS8DQradFsy
RUVlGt8E2CsO6ZPWR/kdh3nXIckCAwEAAaOCAkUwggJBMB0GA1UdDgQWBBQLk+hC
8aqZ8CNSdoNUmWMEHGofuTAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgagGCCsG
AQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzQzMDMwM2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQDJQAEADANBgkqhkiG9w0BAQsF
AAOCAQEAzyfAAw1zuJ/vIjSsdU8Ay6X7zQOAdzkRwf36f9FtSn3WmbVXmAMV99TA
TliXfA3FhxoolJtGFatEgQjn8JfjMNM2apKh71410Ab+SL0z0Ip/Ho/Uaw6zzV2r
MqMvqBPInc5QyTRnG1Y2qlzhoF6mJoJ3HKTMbtyFwBtpKsOqjMYAwjFuiHjD3XLC
iYVjDIH0n6kva3FMBIljpUGbR6/I1rCbJtG4VDfrmkw0Gr0r6AYo83BXpEGWxiLW
7YSY5AfUFdBK6pLerrWtrtFKHKYalFU1s1qLDNnH5RmVCIRM4SETZnN65dEGisoM
2N/mZMwHvBgPEc6xGDft9yUWlvn5+g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org