Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa
File:                     323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa (raw, json)
Hash identifier:          RWkTFttIuM6tmS9p/GZcwgq9sLr0V/hRTm4x8ZBdShc=
Subject key identifier:   24:5A:F5:AF:02:F5:46:3D:C3:E3:CB:72:28:5F:66:EA:E5:C2:81:F7
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       3D954F807F214DEF7A3BF7F942DEAA1E7A0987A9
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa
Signing time:             Tue 24 Sep 2024 19:13:19 +0000
ROA not before:           Tue 24 Sep 2024 19:08:19 +0000
ROA not after:            Tue 23 Sep 2025 19:13:19 +0000
asID:                     36236
IP address blocks:        2403:2500:500::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 13:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:95:4f:80:7f:21:4d:ef:7a:3b:f7:f9:42:de:aa:1e:7a:09:87:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep 24 19:08:19 2024 GMT
            Not After : Sep 23 19:13:19 2025 GMT
        Subject: CN=245AF5AF02F5463DC3E3CB72285F66EAE5C281F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:39:69:24:bd:e1:6f:4e:43:d9:af:25:10:
                    2c:d3:a3:cc:4a:5e:5e:fe:02:c1:40:0a:08:6d:24:
                    55:20:bf:28:a2:d2:1d:4b:af:c1:71:cb:03:5a:fa:
                    ac:ac:22:8b:ca:35:21:17:84:6e:ed:11:9a:cc:80:
                    f7:57:81:3f:d3:59:28:a7:ff:33:16:73:06:ca:2d:
                    e3:7f:73:d7:cc:5d:fc:20:6f:a7:fa:3a:82:cc:27:
                    c4:28:e6:a6:24:9d:fc:92:1e:a5:a8:ab:ef:f6:bb:
                    ef:3b:1f:63:83:89:94:b6:f8:ed:20:7a:40:bb:6b:
                    c1:64:3d:91:67:a6:f8:61:fa:a3:52:b1:2b:83:09:
                    06:55:2b:ef:e7:17:b6:ad:03:5b:69:cd:b5:59:6c:
                    5b:40:98:4a:e6:46:6a:3e:a4:ca:54:89:c2:54:54:
                    46:47:7c:74:29:ec:53:4e:1b:dd:9e:49:c1:fe:63:
                    34:63:82:4b:63:8e:b5:7d:5b:4d:0c:34:e6:ed:d9:
                    11:c6:ca:b5:47:12:71:77:c5:83:8e:8c:b2:41:7a:
                    af:37:76:56:a3:9c:f9:65:69:54:16:cd:e3:45:60:
                    75:c1:ea:77:69:cd:d3:dd:6d:1c:4b:d0:10:01:e9:
                    74:40:ec:a9:af:2a:aa:1a:5f:de:92:3b:26:da:68:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5A:F5:AF:02:F5:46:3D:C3:E3:CB:72:28:5F:66:EA:E5:C2:81:F7
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3530303a3a2f34312d3431203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:500::/41

    Signature Algorithm: sha256WithRSAEncryption
         16:10:01:fb:97:a2:0b:a3:5a:8a:98:11:bc:83:c2:49:5e:6c:
         e9:1f:ad:27:17:59:f9:43:e1:94:93:42:50:bf:a1:1c:51:b7:
         d3:11:0c:0d:e8:53:01:39:1e:3b:be:f9:23:e0:83:24:d3:ee:
         1b:ad:58:39:bd:a9:4e:d3:83:7c:4c:19:e0:79:6a:08:94:38:
         87:09:4b:c7:cf:79:56:7f:11:13:b6:5e:e2:d1:45:6b:13:5b:
         3c:05:0f:3f:0b:f2:f6:bb:54:03:8f:58:87:f4:18:c5:42:86:
         0f:f0:99:58:00:f6:3a:24:06:df:e4:87:88:4c:58:3f:27:b2:
         aa:c4:45:dd:4b:64:3a:56:42:dc:1a:be:4c:fe:26:53:cd:d3:
         92:19:38:ff:78:a5:61:cf:2c:98:37:2e:9f:88:47:e4:b4:8f:
         a1:60:f1:9e:f6:64:b3:f5:5b:ea:5b:b9:77:7c:af:1d:5d:d2:
         b0:c8:59:47:98:22:eb:f7:1e:81:90:b6:7a:b7:0f:6b:1d:85:
         61:cb:d3:7d:20:e4:e4:89:51:f2:89:71:c3:c3:1b:24:05:8d:
         af:8a:74:db:75:a3:19:77:47:e9:c7:2e:e4:be:ec:e7:df:eb:
         f5:c0:c9:54:f0:da:52:a7:82:40:59:db:e4:39:5c:ee:7d:c0:
         01:93:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:51:28 2024 by rpki-client on console-ams.rpki-client.org