Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa
File:                     323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa (raw, json)
Hash identifier:          E+YRkEOREi4zUVd1y2ikGJBtAWWu7mZEpqr0Ah+uAUo=
Subject key identifier:   44:E3:8C:5F:C2:01:51:90:D7:9D:FD:06:37:7F:98:35:BD:1A:F2:22
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       2EBC1633937B1858F6227DF2CFD32C649C7AAEDD
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa
Signing time:             Mon 25 Sep 2023 03:43:29 +0000
ROA not before:           Mon 25 Sep 2023 03:38:29 +0000
ROA not after:            Mon 23 Sep 2024 03:43:29 +0000
asID:                     147297
IP address blocks:        2404:3d80:200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 05:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bc:16:33:93:7b:18:58:f6:22:7d:f2:cf:d3:2c:64:9c:7a:ae:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Sep 25 03:38:29 2023 GMT
            Not After : Sep 23 03:43:29 2024 GMT
        Subject: CN=44E38C5FC2015190D79DFD06377F9835BD1AF222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:8b:e6:d2:0c:40:c3:f8:93:78:bc:2b:ee:
                    cd:58:31:7f:d5:0c:0f:c4:97:fe:a4:cb:d0:ec:97:
                    e2:cb:17:da:36:90:da:88:73:11:ff:5e:bc:67:85:
                    a6:ae:a7:99:28:b8:6f:00:ef:05:c5:f5:da:87:b8:
                    d6:58:5d:70:e7:cd:b9:b6:19:3c:eb:b6:0a:7b:6a:
                    12:44:86:90:3b:cd:da:4c:0e:c0:23:22:cd:cf:f6:
                    ef:cc:f5:82:69:ad:79:60:5b:c4:c3:9a:e0:29:27:
                    e1:f7:8b:8d:41:1e:0a:50:d3:c3:0b:4b:9a:ad:dd:
                    78:77:63:17:f7:4b:d2:ed:df:9c:82:23:06:d9:07:
                    24:e1:02:18:ce:e7:1b:ae:59:cb:2c:b7:9c:45:2a:
                    13:e9:8b:e6:6a:35:ba:2c:0f:df:60:1e:37:a6:33:
                    c4:0f:bb:bb:dd:fc:68:d8:c9:89:7e:ad:f8:67:e6:
                    ae:b8:a3:19:7e:af:94:f9:71:73:75:5f:e6:cb:a6:
                    06:fd:a6:01:34:bd:51:fa:35:ec:ed:4e:c0:21:0e:
                    b2:82:a9:f9:2a:c1:c5:bf:5b:56:7d:2a:92:e8:07:
                    ea:8a:c6:bd:21:83:fd:92:8e:5c:f2:33:da:83:9b:
                    1f:f0:56:4e:e0:b7:d4:f0:b7:37:5f:a8:13:5f:9b:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E3:8C:5F:C2:01:51:90:D7:9D:FD:06:37:7F:98:35:BD:1A:F2:22
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3d80:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:69:ae:d8:76:72:23:bd:a0:d0:a3:6f:5a:68:61:c2:e9:18:
         52:01:5f:b4:a0:83:fe:a3:2d:37:bb:78:a0:31:41:dd:7e:aa:
         2b:5b:67:09:6f:08:83:79:d0:2a:0d:f4:12:84:3e:98:a4:50:
         df:4c:5f:ba:5a:68:00:fd:f5:f7:56:9c:4e:20:8a:9c:ff:05:
         1a:fb:01:74:12:30:aa:e8:7d:4a:c3:08:42:57:7e:db:b3:39:
         06:92:2f:9b:9e:9f:00:a3:06:77:3d:b6:cb:08:37:ed:b4:a3:
         93:67:8f:50:16:48:1c:70:7a:a3:ec:5c:c6:2a:15:4a:f9:3f:
         28:9e:6a:b1:69:f0:8e:f3:5e:81:f5:1e:5d:73:d1:9f:7a:c3:
         b8:89:7d:90:da:ad:60:92:e6:e5:0f:fe:eb:2c:e8:d7:d7:63:
         0c:df:3e:e6:e1:7c:e5:4a:f1:f9:c5:9e:a0:54:c9:04:47:49:
         ed:ed:e7:f0:9f:ae:27:23:82:0c:d3:12:1d:64:bf:cf:a5:7a:
         b1:29:a1:19:4a:7e:d7:b2:b0:70:b1:91:40:26:23:de:da:2c:
         33:91:76:6a:06:8d:d9:83:ab:4f:71:f6:c1:34:7a:16:01:e9:
         aa:c2:db:14:a7:60:b7:a4:9d:f7:ac:b0:c7:66:98:a1:b3:e0:
         63:76:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:45 2024 by rpki-client on console-fra.rpki-client.org