Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa
File:                     323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa (raw, json)
Hash identifier:          QFIcFpmNXvvZFajGZik42iLU3TVEu0qJ3bRmkjH3W4w=
Subject key identifier:   45:A1:FA:75:C9:D0:11:B0:55:8D:B0:3E:6C:0E:22:80:73:FF:A4:12
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       0806A31720D185D091664448C9F9E1AA34169BDB
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa
Signing time:             Tue 24 Oct 2023 19:04:29 +0000
ROA not before:           Tue 24 Oct 2023 18:59:29 +0000
ROA not after:            Tue 22 Oct 2024 19:04:29 +0000
asID:                     36236
IP address blocks:        2403:2500:500::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:06:a3:17:20:d1:85:d0:91:66:44:48:c9:f9:e1:aa:34:16:9b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct 24 18:59:29 2023 GMT
            Not After : Oct 22 19:04:29 2024 GMT
        Subject: CN=45A1FA75C9D011B0558DB03E6C0E228073FFA412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:e5:e4:b6:0b:c6:04:b2:6f:9a:d8:ef:64:
                    63:37:08:14:82:c2:14:a7:9a:67:9b:4d:b1:c1:22:
                    f8:c8:44:11:ed:f5:df:d6:ff:75:35:31:db:fb:69:
                    92:db:36:ef:99:df:40:bf:fd:85:5a:e8:af:c3:dc:
                    8c:fe:c6:ac:77:c4:cf:24:34:3f:b9:6d:aa:9d:6c:
                    8f:59:8d:89:00:cb:11:72:e6:dd:2c:c7:5d:21:60:
                    08:b6:24:29:c4:9e:45:d1:ac:ac:67:e4:71:57:cd:
                    d3:d4:3f:36:f5:04:64:dc:fd:a3:8e:8e:4a:81:1e:
                    fc:af:18:a9:d0:d9:25:21:c1:7f:bc:b2:17:cf:be:
                    e6:ee:56:b2:91:68:f2:99:c6:52:ec:5a:6a:74:b5:
                    1b:a6:f5:96:39:c4:55:72:a5:a9:ef:f1:84:0f:2e:
                    06:d0:28:37:ff:a5:bc:37:2d:87:d1:6f:49:66:87:
                    23:16:8c:cc:ed:25:3a:ab:4b:c8:16:fe:74:0d:25:
                    a8:29:36:09:f7:02:91:df:64:a5:5a:9f:49:28:5f:
                    dd:01:71:c4:d0:84:ec:6b:03:d5:e0:2a:1a:f7:35:
                    28:97:77:cd:76:7e:be:e2:4a:1f:96:cc:61:ce:9c:
                    43:34:52:c4:ec:69:f4:78:6a:2c:60:17:1e:2f:f7:
                    51:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:FA:75:C9:D0:11:B0:55:8D:B0:3E:6C:0E:22:80:73:FF:A4:12
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:500::/41

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:3d:ba:3a:1c:db:35:f8:d4:c7:04:8e:d5:30:87:50:0d:
         b3:1f:82:51:98:d6:e6:da:de:e6:a0:27:a6:10:0b:b2:32:ad:
         ad:37:8d:2a:f7:65:e7:07:ff:f3:f1:66:10:66:f9:d4:e9:7d:
         a1:74:4e:f4:7c:41:ff:99:4a:b4:f7:a4:c2:29:e5:09:e9:d2:
         8e:7f:b1:b2:af:81:9c:b0:ac:8f:41:d6:45:b3:28:68:3d:86:
         2f:8b:7c:b5:4b:70:8c:79:26:ef:ed:19:82:e3:3c:97:db:45:
         35:79:7b:7a:56:eb:8a:b1:50:c6:12:d1:03:f0:cb:9b:56:2a:
         04:f6:5c:00:7e:f0:b2:f4:1a:23:87:40:2d:4a:48:c3:fc:4e:
         b5:bc:bc:4e:9f:90:bb:2d:13:d2:4b:b3:94:a1:aa:20:a0:86:
         73:8c:be:1c:c9:7e:70:c4:6d:4e:b2:22:2b:32:e5:a0:d0:69:
         b6:14:fa:bb:1d:2d:d5:ae:ea:d4:f8:80:e2:26:a3:ff:2e:88:
         9e:30:cf:e6:3e:30:5e:65:a4:52:8f:b7:c8:14:fe:bf:54:51:
         8e:f2:aa:ef:5c:12:7b:36:69:46:aa:0f:5f:32:c9:68:50:2c:
         5e:a8:14:8c:58:3a:78:4f:b8:f0:69:c0:89:74:95:ad:0e:82:
         db:72:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:54 2024 by rpki-client on console-fra.rpki-client.org