Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa
File:                     34332e3234352e35302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          +jkG/QHoecjh7sJMEL39W/t3emwLctyLV04OPopbl0U=
Subject key identifier:   68:14:CC:20:10:D5:8C:92:90:0B:7A:A7:42:4E:56:D1:CE:52:AE:B9
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       29DBE4C79FFB728FD90F680BD1332FC027E91601
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 20:55:35 +0000
ROA not before:           Mon 02 Oct 2023 20:50:35 +0000
ROA not after:            Mon 30 Sep 2024 20:55:35 +0000
asID:                     36236
IP address blocks:        43.245.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:db:e4:c7:9f:fb:72:8f:d9:0f:68:0b:d1:33:2f:c0:27:e9:16:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 20:50:35 2023 GMT
            Not After : Sep 30 20:55:35 2024 GMT
        Subject: CN=6814CC2010D58C92900B7AA7424E56D1CE52AEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:2a:ee:df:03:7c:0b:bc:cc:07:af:b5:2f:
                    e0:b6:f1:85:4c:d8:26:2f:dc:70:e5:e4:9d:36:c2:
                    0a:0d:82:07:12:09:66:5a:d7:33:c8:35:e1:e0:33:
                    a8:2d:70:df:57:e0:82:00:40:a1:37:ee:a3:0c:ea:
                    75:b5:8c:a5:cc:c0:72:88:27:bd:4f:0c:61:e1:a8:
                    a0:cc:8b:18:ca:53:61:99:2a:7a:94:4f:db:e1:da:
                    48:21:ea:ef:c7:7e:7d:6f:b1:e1:26:81:fd:8d:a2:
                    0c:1e:e4:bb:fd:b6:29:f5:ea:a5:5d:fd:aa:89:4d:
                    88:d8:b3:16:e0:7d:33:ff:ab:91:82:92:a6:a9:6d:
                    b6:46:d1:01:42:55:ac:1f:91:d2:75:7d:e7:a3:22:
                    63:a4:72:bb:47:6a:67:1b:cc:31:44:cb:62:69:ab:
                    d5:b6:ff:75:94:9c:d0:9b:54:55:61:d8:2e:34:45:
                    68:e7:1b:8c:e9:74:a2:2b:7a:05:a6:f0:cf:04:d6:
                    10:80:d2:1e:f3:85:b0:2f:ea:f4:5c:09:65:22:1f:
                    0b:c6:df:db:04:e8:f7:de:86:5c:b5:9c:62:24:94:
                    e7:1d:78:f5:73:d5:1d:35:ec:7c:21:60:13:a1:49:
                    3f:d4:2b:5d:b0:e1:b1:6a:eb:41:be:d5:80:88:fa:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:14:CC:20:10:D5:8C:92:90:0B:7A:A7:42:4E:56:D1:CE:52:AE:B9
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c1:bc:8e:96:bd:2a:09:83:b4:90:23:0f:36:6b:45:e6:50:
         07:3e:fc:fd:6f:41:bd:e3:9e:e7:4e:a6:0f:70:d5:cd:92:8a:
         5d:8f:3c:32:8e:97:3c:f1:25:82:29:b3:28:3f:1f:0d:93:6e:
         d2:b2:89:8c:6f:ef:fa:d6:06:73:d1:d7:4a:7a:95:2b:c6:44:
         51:9c:14:64:7e:cc:97:8e:97:8d:b2:8c:97:64:8b:5b:0b:a4:
         72:65:0b:e0:d1:3f:c4:ba:a4:d8:2b:66:9e:2f:51:09:a5:28:
         53:d5:66:e8:9f:d2:a5:a0:0b:87:35:95:76:bc:c3:8e:d2:92:
         38:c7:94:3b:77:98:24:0d:62:0c:54:8d:7b:bb:72:9c:d6:da:
         17:5d:78:34:d8:8b:d8:e9:6c:10:50:31:55:44:25:eb:1b:9f:
         9a:94:78:a8:f9:ae:e6:68:1e:8a:9c:13:dc:46:f5:f2:2d:0f:
         32:02:3d:52:cc:c6:bb:a1:e9:cf:b0:81:1d:36:3a:91:66:b3:
         e8:17:8d:9e:70:fb:cb:af:d1:ff:07:2d:94:09:88:65:1f:1b:
         b5:93:0a:e8:2e:10:3c:1d:42:6b:2f:c4:7c:16:cd:0b:4b:71:
         be:e0:9e:3a:3e:47:ea:31:65:98:44:b1:fe:f4:4c:b7:f0:21:
         0b:98:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:02:54 2024 by rpki-client on console-fra.rpki-client.org