Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa
File:                     323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier:          BVZEC3yde0uv5Myrkn0sh5LwV/7Lvw1V/rDg5s7Nl6A=
Subject key identifier:   0A:22:67:67:31:44:CE:7D:39:A2:BF:EF:05:BF:86:52:CA:72:9E:A3
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       32B6380530020DCE61CBB1E38615A6B233EA8B30
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 19:55:33 +0000
ROA not before:           Mon 02 Oct 2023 19:50:33 +0000
ROA not after:            Mon 30 Sep 2024 19:55:33 +0000
asID:                     36236
IP address blocks:        2403:2500:400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 03:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b6:38:05:30:02:0d:ce:61:cb:b1:e3:86:15:a6:b2:33:ea:8b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 19:50:33 2023 GMT
            Not After : Sep 30 19:55:33 2024 GMT
        Subject: CN=0A2267673144CE7D39A2BFEF05BF8652CA729EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:61:84:af:4b:8e:7c:3f:42:ae:20:fc:af:
                    77:ba:63:d2:1e:56:5f:5a:34:29:6d:96:ff:1a:59:
                    68:99:e6:fd:8f:f1:98:0c:93:fe:c2:a8:51:72:e7:
                    66:84:a1:c9:88:58:08:f0:3e:ac:6f:28:e2:bd:f1:
                    29:d3:e5:fd:33:b7:53:9a:3b:de:94:12:30:a0:91:
                    8e:aa:f5:c2:76:fe:9b:0a:9a:f5:0e:e6:f4:9e:e5:
                    2d:67:e2:51:14:e0:3a:67:54:64:89:34:7e:f4:66:
                    dd:8c:a9:ab:99:06:3b:32:bf:a0:66:f6:2e:17:53:
                    c1:3e:7b:6d:db:a8:94:11:34:77:e3:92:70:b6:90:
                    dd:dc:44:e7:1f:ef:e7:b6:28:45:cf:db:e9:27:64:
                    84:50:28:fa:44:2f:47:76:d7:37:7e:d0:57:d7:43:
                    1d:69:2c:35:b7:99:2e:e0:bd:4c:19:c4:0c:6a:38:
                    e9:bd:27:c7:6a:3b:d3:2b:4a:92:34:37:3a:16:d4:
                    3d:2c:21:37:16:9a:b9:f0:b3:93:07:6a:88:2c:a8:
                    49:37:e0:f5:fd:b9:4f:5e:63:d0:5e:29:63:9e:1c:
                    b8:1e:48:c5:c5:ee:88:f8:b0:a5:f4:a6:84:81:86:
                    be:0a:ac:f9:22:ba:0c:5d:3a:d3:0e:6f:d1:83:79:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:22:67:67:31:44:CE:7D:39:A2:BF:EF:05:BF:86:52:CA:72:9E:A3
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a3a2f34382d3438203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:90:6a:78:be:5c:d2:2b:fa:6f:39:54:85:65:a6:4a:bd:de:
         7d:d8:58:20:d2:ab:0d:23:0f:8b:14:de:a2:38:19:80:ea:84:
         54:fe:e7:e9:5b:cb:6b:65:72:36:b4:dd:a2:74:ae:6f:f4:ed:
         2c:b3:8d:92:b9:06:86:5e:08:8c:65:12:4a:62:8d:67:31:73:
         be:67:ac:8b:6d:fa:67:f3:97:b2:a3:aa:ef:71:4c:02:08:5f:
         e6:a2:77:82:1f:11:ff:c0:3c:d8:ef:a7:11:33:e4:ba:8d:ee:
         87:db:06:29:6c:33:08:1f:c8:4e:ab:d2:42:ff:28:95:71:d9:
         dc:f7:60:14:55:d1:5d:19:13:ad:e8:11:4a:b1:4d:fe:0b:2b:
         47:70:6d:a2:7e:83:4d:b1:52:a4:db:2c:a8:a4:d6:7a:5d:b6:
         ae:34:a7:a4:49:1e:17:9b:29:5f:14:19:5b:45:9c:17:95:6b:
         0e:37:4c:23:f3:12:f5:da:23:94:c0:65:19:49:cc:db:8c:47:
         b2:1b:00:78:03:f0:f2:c7:dd:ac:6d:69:b7:26:af:b1:0c:66:
         dd:f2:5c:9a:ed:99:ee:2c:c4:c1:0c:a5:17:55:b0:e5:f0:6b:
         18:8b:65:0a:22:f3:ba:f2:3f:e1:fa:d4:32:2d:d5:bb:1e:11:
         47:24:5b:44
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUMrY4BTACDc5hy7HjhhWmsjPqizAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTIzMTAwMjE5NTAzM1oX
DTI0MDkzMDE5NTUzM1owMzExMC8GA1UEAxMoMEEyMjY3NjczMTQ0Q0U3RDM5QTJC
RkVGMDVCRjg2NTJDQTcyOUVBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALx1YYSvS458P0KuIPyvd7pj0h5WX1o0KW2W/xpZaJnm/Y/xmAyT/sKoUXLn
ZoShyYhYCPA+rG8o4r3xKdPl/TO3U5o73pQSMKCRjqr1wnb+mwqa9Q7m9J7lLWfi
URTgOmdUZIk0fvRm3Yypq5kGOzK/oGb2LhdTwT57bduolBE0d+OScLaQ3dxE5x/v
57YoRc/b6SdkhFAo+kQvR3bXN37QV9dDHWksNbeZLuC9TBnEDGo46b0nx2o70ytK
kjQ3OhbUPSwhNxaaufCzkwdqiCyoSTfg9f25T15j0F4pY54cuB5IxcXuiPiwpfSm
hIGGvgqs+SK6DF060w5v0YN5b4cCAwEAAaOCAkUwggJBMB0GA1UdDgQWBBQKImdn
MUTOfTmiv+8Fv4ZSynKeozAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgagGCCsG
AQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzQzMDMwM2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQDJQAEADANBgkqhkiG9w0BAQsF
AAOCAQEAcJBqeL5c0iv6bzlUhWWmSr3efdhYINKrDSMPixTeojgZgOqEVP7n6VvL
a2VyNrTdonSub/TtLLONkrkGhl4IjGUSSmKNZzFzvmesi236Z/OXsqOq73FMAghf
5qJ3gh8R/8A82O+nETPkuo3uh9sGKWwzCB/ITqvSQv8olXHZ3PdgFFXRXRkTregR
SrFN/gsrR3Bton6DTbFSpNssqKTWel22rjSnpEkeF5spXxQZW0WcF5VrDjdMI/MS
9dojlMBlGUnM24xHshsAeAPw8sfdrG1ptyavsQxm3fJcmu2Z7izEwQylF1Ww5fBr
GItlCiLzuvI/4frUMi3Vux4RRyRbRA==
-----END CERTIFICATE-----
Generated at Sun May 12 02:01:18 2024 by rpki-client on console-ams.rpki-client.org