Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa
File:                     323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa (raw, json)
Hash identifier:          6PecK1sDQj10JB8kBpgfqwj5wlL2zxEgu+0aLiFiWVs=
Subject key identifier:   DF:89:6B:62:8B:0D:60:28:DD:25:B3:84:72:43:C6:46:82:76:96:08
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       4F5CCC434A82375C38FF01C61432E0F855730024
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa
Signing time:             Sat 06 Jan 2024 11:34:17 +0000
ROA not before:           Sat 06 Jan 2024 11:29:17 +0000
ROA not after:            Sat 04 Jan 2025 11:34:17 +0000
asID:                     399164
IP address blocks:        2403:2500:8000:12::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5c:cc:43:4a:82:37:5c:38:ff:01:c6:14:32:e0:f8:55:73:00:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Jan  6 11:29:17 2024 GMT
            Not After : Jan  4 11:34:17 2025 GMT
        Subject: CN=DF896B628B0D6028DD25B3847243C64682769608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:a6:69:43:28:46:3e:4b:81:05:35:14:0e:
                    7c:7f:cc:9e:76:80:85:be:bd:41:0c:0e:47:bc:f8:
                    e2:b7:2b:97:29:94:8e:a2:34:e6:b2:ca:d9:30:b8:
                    21:a7:34:b8:2d:d5:16:66:8a:50:84:f2:1d:45:5f:
                    7e:69:05:6a:06:1d:cc:28:81:7e:55:f1:64:de:1a:
                    40:20:88:c4:46:c4:46:b7:c9:8d:36:60:62:cb:11:
                    20:aa:54:24:83:a1:18:c0:1b:28:fb:93:8e:45:24:
                    fc:87:19:d0:1b:ca:16:5f:06:6c:86:3a:bc:e9:6e:
                    ec:6a:17:02:10:12:8b:70:29:56:31:46:fe:9e:47:
                    3b:96:69:07:ff:b6:f2:88:ef:48:80:44:70:e3:35:
                    4c:0e:0f:8c:40:7f:18:c1:d7:d5:0e:80:02:5c:f7:
                    ab:c2:4b:17:a0:a5:20:dd:7c:e7:b4:af:f5:12:54:
                    8f:b9:c1:3b:51:8c:ae:a2:bb:b9:12:b6:8a:9d:30:
                    d9:bc:53:44:a3:e9:f0:33:28:70:27:4e:c7:07:51:
                    7a:91:68:f6:f0:cc:19:d2:a6:99:12:2a:af:71:3a:
                    e0:7a:34:9a:bc:50:89:7b:2d:6c:c9:8a:ad:17:b5:
                    6e:f1:68:0a:35:03:38:2d:ac:32:88:76:6e:d0:f6:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:89:6B:62:8B:0D:60:28:DD:25:B3:84:72:43:C6:46:82:76:96:08
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:8000:12::/64

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:77:e7:46:dd:ab:1e:ea:14:f3:c5:4b:c7:98:4f:91:74:
         3b:9b:ca:75:cd:26:e2:11:f4:59:19:1f:b6:79:4a:a5:3b:c5:
         5b:bf:74:48:8e:98:fc:a9:0d:9b:94:90:75:c2:27:48:1c:e2:
         ac:15:c0:82:48:7a:a3:26:98:d4:44:c2:a0:ed:e4:66:65:74:
         c5:e5:95:92:a4:f9:ea:0e:ec:ec:c6:9e:9a:6c:72:f9:31:77:
         44:97:1e:c9:1d:db:a5:6e:64:73:36:6a:e3:a3:bc:a3:a5:d7:
         48:54:44:ca:83:82:27:55:2d:94:1c:56:43:9c:a5:6e:cf:c5:
         c6:9f:23:e9:68:e1:05:73:32:03:70:75:ea:62:35:7f:b7:7e:
         94:a3:20:d2:b6:6d:cb:f0:01:16:5a:e6:5c:da:9b:e1:51:96:
         ad:3e:5e:34:43:76:a6:c1:73:12:b2:ab:b5:8f:a2:62:62:85:
         0b:b2:10:2c:45:9b:a9:07:d3:c3:01:ab:6f:1e:f2:5e:e9:ea:
         05:39:2c:5d:3c:7e:d2:f0:53:e7:93:26:a4:be:1f:d8:09:ee:
         7e:53:ce:f7:a3:77:5a:60:17:2c:d0:9f:99:78:24:f4:64:72:
         7b:71:9c:ac:4b:86:ea:52:d2:58:00:29:1a:c0:01:89:74:1b:
         ee:06:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:50:16 2024 by rpki-client on console-ams.rpki-client.org