Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa
File:                     35392e3135332e31322e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier:          YtWydwxbEjKduJDZKHEarySpB0NkleXAwRxgV8YLDU8=
Subject key identifier:   53:FC:F2:BD:A8:46:B7:DA:8C:5B:4A:40:0D:62:28:E5:28:C5:B1:73
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       54D83AFA32267E4D988BF6C9F6C8E449C4BDAAB3
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa
Signing time:             Tue 24 Oct 2023 19:04:29 +0000
ROA not before:           Tue 24 Oct 2023 18:59:29 +0000
ROA not after:            Tue 22 Oct 2024 19:04:29 +0000
asID:                     36236
IP address blocks:        59.153.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 03:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d8:3a:fa:32:26:7e:4d:98:8b:f6:c9:f6:c8:e4:49:c4:bd:aa:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct 24 18:59:29 2023 GMT
            Not After : Oct 22 19:04:29 2024 GMT
        Subject: CN=53FCF2BDA846B7DA8C5B4A400D6228E528C5B173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:ec:23:60:85:e1:97:c2:be:2b:85:bd:72:
                    aa:12:fa:df:19:b6:42:a9:1e:49:9c:ac:6e:43:a0:
                    5f:1b:0f:37:4d:49:ae:dc:84:4e:a8:24:e7:85:2d:
                    41:8b:23:a5:bf:42:7b:36:5e:0f:8e:fd:c6:d6:a0:
                    12:ee:c5:d1:fb:84:5d:f0:cc:89:7d:da:a0:2d:87:
                    d6:87:57:d9:56:38:7e:9a:5b:03:d9:59:db:4c:68:
                    08:c4:0d:de:80:38:34:e2:61:e4:0e:44:aa:6b:52:
                    d0:03:4a:9a:a9:88:ec:c6:ce:bd:ac:76:4e:03:84:
                    52:81:b7:d5:7a:33:09:e4:fe:4f:45:66:e7:ae:2c:
                    c0:86:af:ac:4f:de:f4:3b:88:ba:64:1a:98:81:1d:
                    c8:ae:59:0a:a3:bb:c1:23:0c:e1:5a:e4:80:80:69:
                    59:4b:4c:2d:7f:85:7f:49:a3:78:b8:7c:27:d0:79:
                    e5:19:48:fe:a7:3a:27:37:b1:c4:8d:46:10:0e:25:
                    5a:4e:e6:fd:41:32:6d:d0:1b:eb:d2:f4:82:76:8a:
                    2d:c5:4f:9c:75:ff:32:a0:97:07:3a:51:9f:79:e8:
                    3f:0a:e6:43:0b:6e:c4:f2:d6:8a:23:32:14:72:b0:
                    95:29:bc:08:af:be:4d:54:39:3f:99:5b:4a:28:fb:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FC:F2:BD:A8:46:B7:DA:8C:5B:4A:40:0D:62:28:E5:28:C5:B1:73
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:41:91:4e:18:a4:8e:e6:a0:07:16:5b:73:d9:df:7d:8d:2f:
         41:20:f5:0c:3d:17:b4:38:e9:ef:e7:a5:a4:33:7e:ea:1f:80:
         17:ba:9b:fd:6e:0d:a8:0b:48:b0:d3:4a:25:2e:7a:c0:72:64:
         5b:e4:54:45:f7:84:9e:8a:13:75:a7:b3:88:0e:e0:e9:0f:2b:
         a1:ac:dc:c6:c3:36:e7:5e:4e:53:52:bd:af:6f:09:e4:d5:cf:
         63:a7:f6:60:fd:b1:a4:13:3c:e1:ad:0d:a1:25:6a:46:dd:1b:
         1e:73:3d:f3:14:42:3a:7e:9a:f5:55:36:b2:64:22:20:6d:ed:
         b4:3d:83:d8:5e:ef:83:38:e2:73:bc:6f:3d:fc:2a:c5:e8:39:
         2a:36:ab:51:7e:5e:33:6d:ad:c3:9a:6f:f4:98:db:1b:5b:8d:
         c2:9d:9b:ea:5a:0c:9a:8f:82:44:4e:09:1a:c5:41:52:64:4a:
         fe:0b:32:b2:f6:76:1a:f9:9c:e4:16:2d:c6:d6:a8:1d:6b:34:
         83:e8:04:19:c5:f6:d3:5e:d2:7a:10:38:b7:53:3d:7e:dc:ac:
         5a:66:53:6c:34:60:b5:ea:f0:c4:9b:e1:4d:b1:f2:bc:22:f8:
         a2:00:c1:e3:de:8d:6d:38:4f:44:f6:fb:2f:eb:8f:fe:e0:16:
         3b:32:21:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVNg6+jImfk2Yi/bJ9sjkScS9qrMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTIzMTAyNDE4NTkyOVoX
DTI0MTAyMjE5MDQyOVowMzExMC8GA1UEAxMoNTNGQ0YyQkRBODQ2QjdEQThDNUI0
QTQwMEQ2MjI4RTUyOEM1QjE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMN97CNgheGXwr4rhb1yqhL63xm2QqkeSZysbkOgXxsPN01JrtyETqgk54Ut
QYsjpb9CezZeD479xtagEu7F0fuEXfDMiX3aoC2H1odX2VY4fppbA9lZ20xoCMQN
3oA4NOJh5A5EqmtS0ANKmqmI7MbOvax2TgOEUoG31XozCeT+T0Vm564swIavrE/e
9DuIumQamIEdyK5ZCqO7wSMM4VrkgIBpWUtMLX+Ff0mjeLh8J9B55RlI/qc6Jzex
xI1GEA4lWk7m/UEybdAb69L0gnaKLcVPnHX/MqCXBzpRn3noPwrmQwtuxPLWiiMy
FHKwlSm8CK++TVQ5P5lbSij7tf0CAwEAAaOCAjowggI2MB0GA1UdDgQWBBRT/PK9
qEa32oxbSkANYijlKMWxczAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzM1MzkyZTMxMzUzMzJlMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMz
MzYzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAE7mQwwDQYJKoZIhvcNAQELBQADggEBANNBkU4Y
pI7moAcWW3PZ332NL0Eg9Qw9F7Q46e/npaQzfuofgBe6m/1uDagLSLDTSiUuesBy
ZFvkVEX3hJ6KE3Wns4gO4OkPK6Gs3MbDNudeTlNSva9vCeTVz2On9mD9saQTPOGt
DaElakbdGx5zPfMUQjp+mvVVNrJkIiBt7bQ9g9he74M44nO8bz38KsXoOSo2q1F+
XjNtrcOab/SY2xtbjcKdm+paDJqPgkROCRrFQVJkSv4LMrL2dhr5nOQWLcbWqB1r
NIPoBBnF9tNe0noQOLdTPX7crFpmU2w0YLXq8MSb4U2x8rwi+KIAwePejW04T0T2
+y/rj/7gFjsyIQo=
-----END CERTIFICATE-----
Generated at Sun May 12 02:01:18 2024 by rpki-client on console-ams.rpki-client.org