Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa
File:                     34332e3234352e35302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          MMytxxqRVP+h82mgAaV8An5ovYuZdJwtxKvKIZcJVcg=
Subject key identifier:   DD:3D:0F:D2:CF:09:0E:8B:F0:F2:9F:B5:0D:27:42:3F:49:D3:E7:78
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       6589FF3BB11AF35197FC3BC10E84FA2D653641F5
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 21:13:09 +0000
ROA not before:           Mon 02 Sep 2024 21:08:09 +0000
ROA not after:            Mon 01 Sep 2025 21:13:09 +0000
asID:                     36236
IP address blocks:        43.245.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Feb 2025 21:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:ff:3b:b1:1a:f3:51:97:fc:3b:c1:0e:84:fa:2d:65:36:41:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000
        Validity
            Not Before: Sep  2 21:08:09 2024 GMT
            Not After : Sep  1 21:13:09 2025 GMT
        Subject: CN=DD3D0FD2CF090E8BF0F29FB50D27423F49D3E778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:b0:5a:15:77:6a:04:5c:06:13:b4:d4:36:
                    9d:36:8e:d6:e8:40:9e:dc:5d:dd:3a:d5:90:55:e1:
                    fe:9e:ec:99:2f:b3:a0:a9:14:fb:a1:ec:cb:2c:c3:
                    4f:75:7d:7d:ba:cf:05:de:fe:b3:9b:87:85:67:e2:
                    3a:7d:96:13:ca:1a:5d:cb:2d:cb:93:80:bd:d3:c0:
                    2f:d1:91:8c:6a:c7:71:f5:9a:3b:95:c2:55:b6:63:
                    5d:d9:2a:84:3b:c2:13:40:95:24:e8:a0:ea:73:0e:
                    1b:15:77:93:34:d8:ff:dd:da:9e:58:90:90:2c:f1:
                    ec:03:dc:69:52:9e:0a:63:82:4d:f3:11:6a:67:3e:
                    0d:c3:c4:0d:ae:47:ae:9f:05:da:d9:1f:0b:96:81:
                    f4:92:15:00:bc:a3:e4:7a:7a:fd:fc:bc:38:62:28:
                    b6:48:33:06:07:54:df:49:21:9a:58:ff:1c:1c:99:
                    9c:13:25:6c:45:26:89:ef:f4:14:04:07:1a:ca:43:
                    59:15:2f:67:10:dc:57:31:65:ef:d8:6c:cb:03:c0:
                    31:a8:c1:de:d4:33:24:e7:12:de:3d:6b:59:92:74:
                    95:93:77:5d:83:76:d3:e1:df:6d:aa:48:d2:18:ba:
                    94:e0:ce:29:a2:4d:62:29:1c:6d:70:0e:38:da:a4:
                    df:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3D:0F:D2:CF:09:0E:8B:F0:F2:9F:B5:0D:27:42:3F:49:D3:E7:78
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:39:67:ec:20:fe:5d:e7:85:c4:96:f5:13:1d:45:54:39:57:
         8c:f8:2f:e6:42:1f:65:c8:07:12:07:d5:fe:e3:97:3e:63:48:
         eb:21:3d:9e:99:5f:5c:2c:8c:fc:40:39:31:d0:7f:8c:5e:e7:
         d3:3f:8b:f1:47:5a:7d:22:86:d5:4a:bc:51:fd:63:da:5d:bf:
         a1:2f:45:c6:56:c2:a0:27:dc:40:18:f7:a2:0c:c2:07:00:57:
         c0:07:2e:0b:fb:87:36:25:df:05:ea:da:de:c5:cd:49:2f:49:
         29:71:79:09:4a:bd:cb:98:14:ca:6d:c6:78:bb:3b:4b:87:ad:
         a0:8b:96:15:03:af:3a:27:1c:b1:f2:62:fa:0d:ba:8f:a3:bf:
         c9:61:29:51:20:57:b5:e3:cb:79:25:62:dd:d8:f6:fa:72:a5:
         9b:9d:28:d7:6d:8f:86:b7:b1:ca:7a:2c:2f:e6:10:4c:b6:b9:
         42:ef:bf:70:77:92:ac:f5:c1:b4:9a:4c:d0:cb:69:3d:81:76:
         85:3b:70:92:c9:74:70:a9:61:5b:fd:10:e9:50:e5:0e:4e:3f:
         86:56:03:74:c8:8f:b5:95:ec:5b:4b:70:f2:43:15:1e:fa:dc:
         f7:d5:9e:67:03:c0:60:08:ff:2e:d9:10:53:df:c2:75:51:11:
         51:6c:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:22 2025 by rpki-client