Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
File:                     34332e3234352e35312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          J4mg4tcQSCEz3epVAH65aqXzk1myTM04z+mjh/4wlxs=
Subject key identifier:   41:E8:EB:4D:B7:C9:5C:B1:B6:42:73:4A:F2:94:71:D5:CA:D2:8E:1A
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       56733E8C378785E0636EADD6AC30DAF44E3D4ECD
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 21:13:09 +0000
ROA not before:           Mon 02 Sep 2024 21:08:09 +0000
ROA not after:            Mon 01 Sep 2025 21:13:09 +0000
asID:                     36236
IP address blocks:        43.245.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Feb 2025 21:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:73:3e:8c:37:87:85:e0:63:6e:ad:d6:ac:30:da:f4:4e:3d:4e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000
        Validity
            Not Before: Sep  2 21:08:09 2024 GMT
            Not After : Sep  1 21:13:09 2025 GMT
        Subject: CN=41E8EB4DB7C95CB1B642734AF29471D5CAD28E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:5e:0d:28:2d:b2:6d:16:28:19:b9:9d:a5:
                    7d:de:be:f1:32:63:93:ee:aa:a0:af:1d:5e:5e:99:
                    45:14:1b:31:29:85:a4:14:c9:ae:72:b1:2d:6f:8d:
                    3b:14:b3:f3:ce:94:2f:dd:82:8a:0c:0c:3f:86:4d:
                    4b:ce:c9:fa:7f:90:1d:72:e3:b4:c2:ff:a0:7a:da:
                    2a:cf:de:f2:fc:bc:30:28:2d:ba:a1:a1:17:18:66:
                    26:8e:40:f7:bd:f7:76:f3:18:e6:de:8e:58:dc:35:
                    ba:bd:2f:46:b5:df:2b:ef:66:90:65:62:4a:a3:64:
                    8f:c3:16:cd:d2:e0:bd:ab:a3:9a:f6:5c:51:0b:df:
                    c8:c6:a9:91:45:53:25:18:a4:e4:32:f2:f0:41:2f:
                    3c:48:dc:ed:d5:ac:42:43:39:b6:be:26:5e:6c:a7:
                    11:46:3d:d2:29:23:6f:19:d9:cb:9f:50:c8:37:0a:
                    d8:d3:ee:a9:6a:cb:a4:a5:a4:48:49:d8:0f:00:7a:
                    b2:04:e8:29:db:c7:4c:22:e2:ab:e2:3c:34:d3:da:
                    ef:e9:f9:67:3b:7f:3c:8f:2f:a4:aa:0e:69:87:0b:
                    03:88:59:72:83:02:35:f1:7f:c7:e1:98:ec:b6:fd:
                    0f:41:8d:18:7b:a3:56:79:61:fa:37:fc:3f:46:78:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:EB:4D:B7:C9:5C:B1:B6:42:73:4A:F2:94:71:D5:CA:D2:8E:1A
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:1e:ce:03:26:75:65:f8:12:10:56:73:c0:94:18:4e:38:f2:
         93:ff:25:43:9a:8d:2c:13:78:00:f9:b0:c0:65:0e:19:da:53:
         b5:a8:a3:e6:fc:9c:75:25:7b:c1:73:40:f3:16:75:b6:83:a6:
         28:86:f9:2e:9a:48:79:c8:df:4b:0d:92:92:b9:6a:7d:4f:f5:
         6c:17:5d:fe:8b:ca:f3:d1:84:5a:ca:dd:78:82:62:94:a8:76:
         74:4d:96:5e:7f:f3:16:a9:75:29:63:b1:27:8c:d5:a7:0a:93:
         a9:46:e7:5e:39:3d:25:cc:df:fd:aa:f9:56:a3:6f:7b:28:57:
         96:85:2f:a3:33:07:87:0e:ff:3c:72:94:05:e0:73:5d:4d:31:
         dd:35:06:58:14:ef:2b:57:3b:9f:f5:25:da:9b:d9:2c:63:d0:
         0e:cb:7c:00:73:89:ed:cd:ac:d3:08:bd:45:18:c3:08:a1:d8:
         44:db:8f:b0:41:6a:12:59:43:75:5d:f9:27:ce:08:63:d8:3c:
         cf:ec:e3:8d:95:a3:d9:8e:49:64:96:33:fb:7c:b5:66:bb:52:
         41:2f:16:80:f9:d3:0f:30:7a:07:4c:4b:f7:3f:4f:4b:f7:d5:
         0d:13:f4:63:d4:ba:60:4e:a3:de:b5:46:ba:b2:e2:b7:c2:6b:
         12:87:a5:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVnM+jDeHheBjbq3WrDDa9E49Ts0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI0MDkwMjIxMDgwOVoX
DTI1MDkwMTIxMTMwOVowMzExMC8GA1UEAxMoNDFFOEVCNERCN0M5NUNCMUI2NDI3
MzRBRjI5NDcxRDVDQUQyOEUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALBHXg0oLbJtFigZuZ2lfd6+8TJjk+6qoK8dXl6ZRRQbMSmFpBTJrnKxLW+N
OxSz886UL92CigwMP4ZNS87J+n+QHXLjtML/oHraKs/e8vy8MCgtuqGhFxhmJo5A
9733dvMY5t6OWNw1ur0vRrXfK+9mkGViSqNkj8MWzdLgvaujmvZcUQvfyMapkUVT
JRik5DLy8EEvPEjc7dWsQkM5tr4mXmynEUY90ikjbxnZy59QyDcK2NPuqWrLpKWk
SEnYDwB6sgToKdvHTCLiq+I8NNPa7+n5Zzt/PI8vpKoOaYcLA4hZcoMCNfF/x+GY
7Lb9D0GNGHujVnlh+jf8P0Z43M0CAwEAAaOCAjowggI2MB0GA1UdDgQWBBRB6OtN
t8lcsbZCc0rylHHVytKOGjAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzM0MzMyZTMyMzQzNTJlMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMz
MzYzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAr9TMwDQYJKoZIhvcNAQELBQADggEBAJoezgMm
dWX4EhBWc8CUGE448pP/JUOajSwTeAD5sMBlDhnaU7Woo+b8nHUle8FzQPMWdbaD
piiG+S6aSHnI30sNkpK5an1P9WwXXf6LyvPRhFrK3XiCYpSodnRNll5/8xapdSlj
sSeM1acKk6lG5145PSXM3/2q+Vajb3soV5aFL6MzB4cO/zxylAXgc11NMd01BlgU
7ytXO5/1Jdqb2Sxj0A7LfABzie3NrNMIvUUYwwih2ETbj7BBahJZQ3Vd+SfOCGPY
PM/s442Vo9mOSWSWM/t8tWa7UkEvFoD50w8wegdMS/c/T0v31Q0T9GPUumBOo961
Rrqy4rfCaxKHpf4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:10:03 2025 by rpki-client