Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
File:                     34332e3234352e35312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          r/rr/rP8TkyDtXsgKy0L2oIswRa+8lE4zsDley4H2Ho=
Subject key identifier:   43:D9:38:64:CD:AA:CA:28:AC:32:65:86:82:C3:5B:9A:B3:B3:E3:EC
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       2D59D281D6947D3D3F18B77739A9F5779499B67E
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 20:55:36 +0000
ROA not before:           Mon 02 Oct 2023 20:50:36 +0000
ROA not after:            Mon 30 Sep 2024 20:55:36 +0000
asID:                     36236
IP address blocks:        43.245.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:59:d2:81:d6:94:7d:3d:3f:18:b7:77:39:a9:f5:77:94:99:b6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 20:50:36 2023 GMT
            Not After : Sep 30 20:55:36 2024 GMT
        Subject: CN=43D93864CDAACA28AC32658682C35B9AB3B3E3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:24:7f:90:9f:42:0d:4d:11:e2:f3:e3:04:
                    9f:bd:17:6b:19:e0:fc:0f:10:12:fc:bd:3e:eb:ca:
                    33:00:4c:25:c5:f0:2f:95:d0:16:8a:f3:d7:d7:11:
                    3f:30:fd:3f:76:b3:98:45:f0:d6:a3:27:81:22:32:
                    d8:dc:cd:77:e5:5c:97:47:9f:bf:f2:7b:4f:51:cd:
                    4a:47:63:58:d9:23:31:74:6f:46:17:b7:41:b9:2d:
                    4e:8e:35:ca:e9:94:91:c3:95:aa:bd:43:5c:f3:cc:
                    9e:7f:9b:6f:62:5b:a6:9b:5e:6b:4b:89:75:61:b5:
                    50:96:6a:7c:2c:71:61:df:72:61:b3:01:9d:8a:fe:
                    59:05:c8:2f:48:32:13:12:c8:ab:ff:70:71:c6:e4:
                    c8:c4:a8:48:b4:de:a0:73:4a:a9:d6:00:d5:98:70:
                    ae:2f:59:ae:44:94:0f:22:9f:65:73:b7:2b:90:42:
                    70:75:73:14:ba:ac:c9:39:0b:69:c6:b8:d5:e5:52:
                    91:09:4d:ff:23:3c:f9:ac:5c:21:e5:f0:91:9b:5b:
                    bd:c1:16:61:81:7a:2d:95:79:a0:79:92:a3:ef:8b:
                    ce:1b:1d:7c:71:14:bc:a4:e8:b9:06:9f:6f:8e:61:
                    13:0b:a8:85:a2:1b:2d:37:5a:0c:86:f3:0c:72:7c:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D9:38:64:CD:AA:CA:28:AC:32:65:86:82:C3:5B:9A:B3:B3:E3:EC
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:8c:7d:be:26:a2:55:25:c3:b3:62:e7:9c:33:e4:62:cb:
         58:f4:ad:e3:e7:49:a7:83:71:cf:10:46:81:3e:33:9d:7c:75:
         f9:1c:8a:f7:e6:e7:e1:b9:32:0e:3d:fc:15:e1:92:48:61:78:
         b5:39:32:b9:08:a6:bc:82:30:cb:14:f4:86:e5:dc:d2:63:e1:
         f9:83:c3:2e:51:fa:95:37:3e:ad:b3:c0:9b:95:cd:a4:0f:f5:
         f6:1b:2a:20:02:c7:55:96:81:52:e7:28:c4:7b:49:0c:cf:0e:
         dd:77:21:da:3f:c3:5e:ff:38:dc:41:6a:b5:7a:4e:ff:3e:2e:
         a9:32:58:d8:33:b3:e5:dc:47:43:66:d7:68:82:4f:8c:2c:70:
         35:7c:c6:31:46:a3:60:15:77:7c:c6:f1:05:85:cd:a1:a0:63:
         36:2b:d7:f4:a3:84:9f:9d:6b:6f:d4:9f:39:61:b8:e7:65:fb:
         3c:b3:a5:f1:a9:84:6b:2b:5b:a7:1a:db:8f:e2:f7:47:38:4f:
         8e:57:16:46:30:30:28:94:5c:c2:77:39:69:cb:53:03:cb:13:
         9d:8f:1e:c6:98:4b:34:32:36:aa:85:a9:3c:dc:b5:82:e1:9a:
         42:b3:17:39:c3:a2:50:f3:ab:15:67:89:70:01:3b:a5:a1:00:
         d5:67:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:50:16 2024 by rpki-client on console-ams.rpki-client.org