Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34382e302f32342d3234203d3e203336323336.roa
File:                     34332e3234352e34382e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          G1Il/xhwmVTsObdxJyL2U0aw03Gyb0MV0RSNmj6U6Dw=
Subject key identifier:   54:AC:DE:23:1A:CF:07:2D:12:4D:1A:C6:FF:5A:C5:EB:4F:15:C3:9D
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       57720904B21EB66EE5C6C719E8BF2632491DA715
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34382e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 20:55:35 +0000
ROA not before:           Mon 02 Oct 2023 20:50:35 +0000
ROA not after:            Mon 30 Sep 2024 20:55:35 +0000
asID:                     36236
IP address blocks:        43.245.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:72:09:04:b2:1e:b6:6e:e5:c6:c7:19:e8:bf:26:32:49:1d:a7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 20:50:35 2023 GMT
            Not After : Sep 30 20:55:35 2024 GMT
        Subject: CN=54ACDE231ACF072D124D1AC6FF5AC5EB4F15C39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:76:94:56:42:d5:ec:dc:55:fb:08:a0:df:
                    4d:df:2a:9a:bb:40:72:77:4a:d6:48:3c:88:06:d4:
                    58:c6:ee:bc:22:ed:3e:36:db:1f:fb:c3:ea:02:f5:
                    c9:41:61:fd:a1:46:49:73:69:3b:ed:db:d7:a9:36:
                    87:79:7f:72:04:77:bc:c1:1f:95:79:e0:6b:c6:b9:
                    2a:38:87:2d:c7:03:bd:ac:3e:8c:53:11:ca:5d:f0:
                    d7:73:8a:e1:d6:9c:9b:81:c4:a7:8d:48:10:7c:50:
                    48:da:e0:70:5b:f3:a7:6f:24:38:86:cc:a9:91:53:
                    cf:82:4b:eb:d9:a1:3a:b5:66:06:c8:61:f6:b6:8d:
                    d1:95:fe:96:07:7b:5b:17:24:35:7b:e9:bd:79:68:
                    9c:98:fb:3d:de:27:bb:cd:28:b1:85:06:ba:34:c9:
                    5d:64:55:a1:78:5f:80:41:69:67:0a:ca:bf:51:09:
                    ae:a5:c6:58:6e:a5:c5:1d:41:21:69:5d:d4:55:e9:
                    38:59:3b:bb:ed:5b:f9:6b:26:52:f1:03:d3:d6:59:
                    25:e5:85:9d:9e:6e:68:e2:c8:a5:08:95:f1:8d:4d:
                    ad:67:b1:dc:d8:b1:db:6e:4e:32:3f:30:30:dd:c1:
                    fc:d5:06:02:72:cc:29:33:ff:08:c9:15:0b:c2:b6:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:DE:23:1A:CF:07:2D:12:4D:1A:C6:FF:5A:C5:EB:4F:15:C3:9D
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34382e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:82:76:29:d0:6e:e9:86:73:5c:ad:33:2a:28:1c:2c:24:00:
         6d:16:dd:3b:3c:3d:6f:7d:d1:75:6a:76:35:9c:0a:72:7f:f3:
         8c:af:04:4b:93:67:05:71:5e:7d:d4:93:33:31:1b:95:b5:5b:
         73:d3:53:7e:43:da:35:3b:f6:07:bb:5f:47:81:1f:b6:57:9f:
         40:62:e6:d9:74:c0:45:81:e9:27:13:4d:0d:38:94:b3:a1:27:
         75:b1:61:de:07:d1:0b:3e:15:99:cc:77:4d:a6:f0:65:d4:91:
         ca:ee:83:c3:cb:44:c3:5b:e2:1f:20:30:e1:59:9b:cb:f3:bc:
         cb:2f:a2:67:45:9a:cb:63:48:53:84:1a:e9:ae:cc:2d:4a:7b:
         15:e9:3b:2c:e0:fa:e8:b9:e3:43:1a:3e:70:96:9b:6c:bf:95:
         97:c6:ee:e7:72:2e:cd:ed:68:3b:18:1b:92:2c:e4:71:38:5a:
         a6:82:c2:5d:14:05:b3:ca:00:37:f8:f7:81:5a:70:dc:12:00:
         1f:df:1e:4e:0d:ff:6f:7d:3b:02:76:15:7a:00:d0:ec:d6:55:
         03:c0:ff:c2:28:2b:59:f7:b1:c2:e0:81:dd:63:d8:7d:f0:c4:
         cc:c4:36:3d:a0:00:d1:a3:d6:29:c9:59:a6:21:47:fa:33:e4:
         ea:be:54:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV3IJBLIetm7lxscZ6L8mMkkdpxUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTIzMTAwMjIwNTAzNVoX
DTI0MDkzMDIwNTUzNVowMzExMC8GA1UEAxMoNTRBQ0RFMjMxQUNGMDcyRDEyNEQx
QUM2RkY1QUM1RUI0RjE1QzM5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMaUdpRWQtXs3FX7CKDfTd8qmrtAcndK1kg8iAbUWMbuvCLtPjbbH/vD6gL1
yUFh/aFGSXNpO+3b16k2h3l/cgR3vMEflXnga8a5KjiHLccDvaw+jFMRyl3w13OK
4dacm4HEp41IEHxQSNrgcFvzp28kOIbMqZFTz4JL69mhOrVmBshh9raN0ZX+lgd7
WxckNXvpvXlonJj7Pd4nu80osYUGujTJXWRVoXhfgEFpZwrKv1EJrqXGWG6lxR1B
IWld1FXpOFk7u+1b+WsmUvED09ZZJeWFnZ5uaOLIpQiV8Y1NrWex3Nix225OMj8w
MN3B/NUGAnLMKTP/CMkVC8K21osCAwEAAaOCAjowggI2MB0GA1UdDgQWBBRUrN4j
Gs8HLRJNGsb/WsXrTxXDnTAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzM0MzMyZTMyMzQzNTJlMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMz
MzYzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAr9TAwDQYJKoZIhvcNAQELBQADggEBAHSCdinQ
bumGc1ytMyooHCwkAG0W3Ts8PW990XVqdjWcCnJ/84yvBEuTZwVxXn3UkzMxG5W1
W3PTU35D2jU79ge7X0eBH7ZXn0Bi5tl0wEWB6ScTTQ04lLOhJ3WxYd4H0Qs+FZnM
d02m8GXUkcrug8PLRMNb4h8gMOFZm8vzvMsvomdFmstjSFOEGumuzC1KexXpOyzg
+ui540MaPnCWm2y/lZfG7udyLs3taDsYG5Is5HE4WqaCwl0UBbPKADf494FacNwS
AB/fHk4N/299OwJ2FXoA0OzWVQPA/8IoK1n3scLggd1j2H3wxMzENj2gANGj1inJ
WaYhR/oz5Oq+VIw=
-----END CERTIFICATE-----
Generated at Sat May 11 07:50:16 2024 by rpki-client on console-ams.rpki-client.org