Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3a2f34312d3431203d3e203336323336.roa
File:                     323430333a323530303a393030303a3a2f34312d3431203d3e203336323336.roa (raw, json)
Hash identifier:          ngG28+YGkyZrocEwfD56XufSwKSMRbQDUt0dR4KcVOw=
Subject key identifier:   29:13:F7:DC:48:4B:BD:54:59:BF:79:AE:FD:90:17:16:66:80:27:30
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       438BFDF625A4516032DDCB210864C27E5B696DFB
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3a2f34312d3431203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 19:55:33 +0000
ROA not before:           Mon 02 Oct 2023 19:50:33 +0000
ROA not after:            Mon 30 Sep 2024 19:55:33 +0000
asID:                     36236
IP address blocks:        2403:2500:9000::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 03:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8b:fd:f6:25:a4:51:60:32:dd:cb:21:08:64:c2:7e:5b:69:6d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 19:50:33 2023 GMT
            Not After : Sep 30 19:55:33 2024 GMT
        Subject: CN=2913F7DC484BBD5459BF79AEFD90171666802730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3f:61:52:ba:4f:ea:39:ec:31:32:67:4c:26:
                    c1:a0:78:cb:e8:b0:1a:2a:fb:81:0b:21:66:70:45:
                    48:17:3d:33:f4:ee:9a:8d:a4:91:7c:b5:a8:f4:ca:
                    ff:14:ac:3b:3c:3e:ed:fa:4f:ac:6d:e0:a7:aa:1d:
                    c3:40:5f:33:d2:9a:0f:19:52:f7:6e:89:f7:e9:9c:
                    70:61:ff:d0:fc:db:ff:ce:b1:18:a1:39:ff:fb:17:
                    a0:5a:d4:ca:18:40:17:e7:8c:a7:b7:48:e9:15:cb:
                    57:91:5a:3c:e9:47:64:15:03:b1:8c:43:d5:12:76:
                    ad:0f:cf:c5:03:05:21:1e:07:d6:82:e4:02:0e:67:
                    32:e9:cf:67:a9:36:fb:68:f9:2d:90:c8:d8:21:f2:
                    74:b2:39:df:f5:45:90:85:3e:e2:6f:93:ef:f8:a5:
                    46:70:17:cb:c3:79:67:73:9a:0a:0a:b0:01:41:9c:
                    46:20:c5:3b:a9:48:22:42:61:2a:1c:ef:f4:d7:44:
                    cf:f7:1e:3d:ad:30:43:25:e4:36:21:b0:ba:b2:c7:
                    4b:1c:5b:5d:9e:0e:a6:1b:86:73:1f:2c:37:1e:ea:
                    ac:93:85:30:51:c2:c6:ea:c9:79:e1:4f:03:eb:a0:
                    56:55:7e:ef:15:cb:37:3e:4b:d0:5d:e0:9f:f8:7f:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:13:F7:DC:48:4B:BD:54:59:BF:79:AE:FD:90:17:16:66:80:27:30
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3a2f34312d3431203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:9000::/41

    Signature Algorithm: sha256WithRSAEncryption
         00:83:64:2a:58:98:d1:c5:ab:2a:5c:b5:c6:84:10:aa:fd:af:
         c2:20:30:97:f4:3d:94:07:bb:3a:86:01:d6:03:ec:74:46:76:
         18:41:fc:28:8e:eb:91:50:e3:fb:3c:d8:06:b1:a2:c6:6d:20:
         53:f6:ab:fd:27:fb:e2:9b:f5:69:08:32:e9:59:e7:8c:28:23:
         de:e4:f4:d8:87:c2:b6:a5:91:d2:34:6a:d0:4e:e3:43:04:7d:
         2d:66:e5:a3:51:73:a2:54:6e:63:10:44:60:52:d7:66:cc:1c:
         1f:57:04:ac:1b:55:6f:55:de:bc:04:f3:47:e9:da:ff:fc:68:
         8f:e0:d6:21:cb:52:80:b2:74:e6:a7:2d:60:65:b4:f4:29:15:
         28:77:f8:39:5a:bb:fa:b8:bf:25:82:ea:ca:49:75:66:bd:01:
         53:ee:6e:e1:bf:c8:61:8c:85:f5:27:ae:59:46:c3:7f:8e:31:
         ed:1e:1d:04:b2:49:6b:81:b3:15:c8:ca:5a:6b:7c:d8:4a:bc:
         7e:52:49:2d:b3:95:b7:7b:82:21:a1:09:43:84:d0:a4:e8:c2:
         e4:58:a6:1c:c5:46:ec:5b:7c:a9:1e:19:92:06:31:dd:70:ec:
         1c:f3:9b:7e:76:b4:10:bc:5a:af:4e:79:03:ac:35:cc:dc:a3:
         aa:68:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:01:18 2024 by rpki-client on console-ams.rpki-client.org