Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34392e302f32342d3234203d3e203336323336.roa
File:                     34332e3234352e34392e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          L6slJKZm6/mwP5qnXlK+lSSZ/A7GbBX9a36I+aMtIIQ=
Subject key identifier:   9F:21:3F:FB:FF:B5:FD:53:1C:06:26:95:CA:5D:36:DF:69:7A:1E:DD
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       5507D98772747A88681A2BD784E3364E27E2FD32
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34392e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 21:13:09 +0000
ROA not before:           Mon 02 Sep 2024 21:08:09 +0000
ROA not after:            Mon 01 Sep 2025 21:13:09 +0000
asID:                     36236
IP address blocks:        43.245.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Feb 2025 21:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:07:d9:87:72:74:7a:88:68:1a:2b:d7:84:e3:36:4e:27:e2:fd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000
        Validity
            Not Before: Sep  2 21:08:09 2024 GMT
            Not After : Sep  1 21:13:09 2025 GMT
        Subject: CN=9F213FFBFFB5FD531C062695CA5D36DF697A1EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:40:52:7b:98:ba:d3:1f:45:db:d0:15:d1:
                    b2:f4:76:14:5c:59:bf:0b:b2:8c:83:64:dc:73:09:
                    86:91:b5:ba:a4:5f:32:27:fe:99:cd:c3:82:7a:af:
                    28:7d:d2:21:64:4c:aa:87:a9:41:6c:e9:00:8b:31:
                    ba:0e:cc:a0:86:0d:e5:35:af:7d:9f:fe:20:6a:03:
                    f2:57:48:71:51:d9:c0:5a:f6:79:0e:8c:2c:8f:9d:
                    23:eb:1a:29:d3:d9:53:de:c5:1a:13:cc:50:97:85:
                    37:be:76:be:59:ae:ba:c3:5a:f6:b4:d6:99:30:d0:
                    10:d2:96:ab:82:d2:b9:a4:96:76:2b:16:47:46:3e:
                    ab:29:94:a6:da:0a:49:bd:8b:46:77:20:26:e0:da:
                    94:f1:e7:e1:29:cc:58:9a:87:e9:33:94:8c:d7:04:
                    78:d1:81:83:2d:53:65:86:6f:54:59:15:94:96:e4:
                    a9:0f:31:e6:5b:df:51:56:bc:36:bd:e8:70:66:94:
                    f0:ef:3d:16:f8:48:9f:b4:9b:4a:7b:8c:e0:e4:67:
                    b0:ba:36:bf:1d:38:75:7d:c7:c8:3d:2b:b3:15:39:
                    72:31:cc:7e:29:04:05:dc:60:5a:7c:d9:50:b1:ab:
                    71:d9:ce:0f:b2:fe:fb:6b:66:15:22:47:32:96:41:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:21:3F:FB:FF:B5:FD:53:1C:06:26:95:CA:5D:36:DF:69:7A:1E:DD
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e34392e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:60:1f:96:89:bb:9b:0c:da:08:e6:d6:65:88:ff:66:d9:74:
         ad:96:8e:78:55:74:70:5b:6a:88:fb:26:92:2e:72:43:73:9a:
         ff:54:65:1e:7d:46:83:dc:e6:85:a3:f0:05:fb:72:4e:22:74:
         d9:fd:e8:8d:6c:e5:63:33:c8:5a:03:f0:d5:76:54:46:d0:ca:
         c9:33:4c:94:fc:9d:ee:88:e2:d2:17:d4:24:f1:bf:79:0c:eb:
         c0:2f:1b:a5:70:e9:f3:28:7d:44:14:f7:7b:ba:fc:e7:4b:bb:
         76:69:ea:54:88:40:33:0f:12:e2:b6:ed:1c:10:45:7c:22:94:
         f1:9b:fd:ee:80:ee:cb:c4:dc:e2:b4:93:37:c4:b4:b6:a0:be:
         75:13:d6:11:a3:73:1d:24:c7:cb:7c:4e:df:a6:f1:f8:f0:64:
         24:21:20:fb:ba:52:4b:ec:9a:99:46:43:9e:62:5d:01:d4:c3:
         48:68:88:a9:61:5d:1b:1f:bf:13:53:b0:cb:e5:8c:32:47:17:
         69:f2:c6:1f:bc:fd:e9:68:51:44:53:1c:b4:ac:4f:1c:79:41:
         3c:43:07:e1:45:b0:21:37:8c:0d:ab:48:8e:46:d7:47:03:86:
         c0:34:b4:6f:65:1b:89:3b:cf:db:5a:51:45:11:05:b3:57:51:
         10:64:33:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVQfZh3J0eohoGivXhOM2Tifi/TIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI0MDkwMjIxMDgwOVoX
DTI1MDkwMTIxMTMwOVowMzExMC8GA1UEAxMoOUYyMTNGRkJGRkI1RkQ1MzFDMDYy
Njk1Q0E1RDM2REY2OTdBMUVERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALesQFJ7mLrTH0Xb0BXRsvR2FFxZvwuyjINk3HMJhpG1uqRfMif+mc3Dgnqv
KH3SIWRMqoepQWzpAIsxug7MoIYN5TWvfZ/+IGoD8ldIcVHZwFr2eQ6MLI+dI+sa
KdPZU97FGhPMUJeFN752vlmuusNa9rTWmTDQENKWq4LSuaSWdisWR0Y+qymUptoK
Sb2LRncgJuDalPHn4SnMWJqH6TOUjNcEeNGBgy1TZYZvVFkVlJbkqQ8x5lvfUVa8
Nr3ocGaU8O89FvhIn7SbSnuM4ORnsLo2vx04dX3HyD0rsxU5cjHMfikEBdxgWnzZ
ULGrcdnOD7L++2tmFSJHMpZB0zcCAwEAAaOCAjowggI2MB0GA1UdDgQWBBSfIT/7
/7X9UxwGJpXKXTbfaXoe3TAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzM0MzMyZTMyMzQzNTJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMz
MzYzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAr9TEwDQYJKoZIhvcNAQELBQADggEBAHlgH5aJ
u5sM2gjm1mWI/2bZdK2WjnhVdHBbaoj7JpIuckNzmv9UZR59RoPc5oWj8AX7ck4i
dNn96I1s5WMzyFoD8NV2VEbQyskzTJT8ne6I4tIX1CTxv3kM68AvG6Vw6fMofUQU
93u6/OdLu3Zp6lSIQDMPEuK27RwQRXwilPGb/e6A7svE3OK0kzfEtLagvnUT1hGj
cx0kx8t8Tt+m8fjwZCQhIPu6UkvsmplGQ55iXQHUw0hoiKlhXRsfvxNTsMvljDJH
F2nyxh+8/eloUURTHLSsTxx5QTxDB+FFsCE3jA2rSI5G10cDhsA0tG9lG4k7z9ta
UUURBbNXURBkM7o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:32 2025 by rpki-client