Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          Jt4dL08el8wc7gQx8jkuZjw2R4YNXa84Al8IvEbKe0U=
Subject key identifier:   2F:9B:2D:8F:31:FB:C6:D8:FD:02:8A:F5:C6:79:09:F8:A4:79:7D:44
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       5DD52C02259986705F94A3D7573BB770D2AE8C8A
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Mon 11 Dec 2023 05:44:21 +0000
ROA not before:           Mon 11 Dec 2023 05:39:21 +0000
ROA not after:            Mon 09 Dec 2024 05:44:21 +0000
asID:                     212149
IP address blocks:        2404:3d80:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 05:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d5:2c:02:25:99:86:70:5f:94:a3:d7:57:3b:b7:70:d2:ae:8c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Dec 11 05:39:21 2023 GMT
            Not After : Dec  9 05:44:21 2024 GMT
        Subject: CN=2F9B2D8F31FBC6D8FD028AF5C67909F8A4797D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:63:18:b6:57:6e:4b:82:76:f2:cb:bb:2a:
                    66:56:8a:1d:1f:90:df:bd:82:ae:87:1b:70:33:f6:
                    6a:89:77:ab:64:81:a1:4d:66:60:be:aa:1c:d3:a8:
                    ec:86:ff:4e:cb:db:06:25:e6:3d:77:2c:9f:bd:2c:
                    1d:d0:21:13:9b:86:29:66:76:7b:df:a8:4c:69:b8:
                    14:cb:a0:74:7e:fe:7b:71:30:75:1b:c7:54:7e:62:
                    ae:45:01:d6:aa:24:46:87:57:3c:94:cc:0d:d4:cf:
                    7b:d9:16:fd:75:0b:e1:81:37:34:0e:dc:c8:c3:c5:
                    e6:d2:9a:a8:dc:9f:ee:23:1f:55:2d:91:da:0a:85:
                    a2:a8:a9:27:d5:85:8d:a2:48:4b:2f:4a:9c:75:de:
                    66:88:84:ce:f3:62:89:da:f5:3c:90:e0:02:20:64:
                    24:64:1a:98:d9:f6:ca:52:96:de:ee:58:da:4a:65:
                    99:3b:ee:0f:5e:b6:87:e7:c7:b9:f6:0e:4a:64:b8:
                    60:9e:c4:00:31:b8:56:ca:4f:f1:15:6f:55:de:dd:
                    3f:2b:22:75:9d:87:97:70:24:6f:e6:5d:12:51:be:
                    5f:20:89:b3:46:d5:d5:de:ad:2e:02:9c:58:14:cb:
                    fb:34:f6:e3:d8:a4:87:57:4d:97:40:2e:16:10:80:
                    81:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9B:2D:8F:31:FB:C6:D8:FD:02:8A:F5:C6:79:09:F8:A4:79:7D:44
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3d80:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:be:6e:b9:ad:70:08:ad:32:23:44:2a:30:12:d1:ba:a4:
         9b:d8:e6:f1:a3:5a:b3:f4:64:c8:0a:df:8d:c2:1c:9b:69:ef:
         ad:8a:d1:0a:cf:ba:55:22:26:07:85:d1:c0:a0:de:f0:15:7c:
         97:14:32:20:4e:39:f7:20:da:56:e9:16:2f:f8:4b:e7:18:0f:
         f5:b4:52:b4:d7:73:a2:17:b4:1d:56:04:09:e7:26:57:3c:05:
         08:50:92:c3:ac:6e:65:c0:75:e8:3a:c6:67:eb:fc:18:21:b6:
         3d:53:d2:1a:f8:f4:19:3f:7f:42:41:f6:cf:71:31:8e:fe:d4:
         ab:c4:7a:2f:7f:70:08:66:f6:00:77:63:f8:95:b0:00:9a:df:
         08:51:96:2d:36:5a:ac:4f:49:13:ae:84:e6:5b:10:7b:41:39:
         4e:14:6a:f8:c4:44:96:32:4d:07:07:91:83:77:aa:3d:b8:de:
         2f:cf:a7:c4:04:bf:10:0a:a4:07:0f:01:44:65:54:7c:5a:1a:
         e1:85:81:e7:97:8c:f9:1e:48:bd:96:fa:d5:24:02:41:4b:c4:
         88:c0:c2:f3:84:f1:0b:54:73:b5:bd:07:09:de:22:31:cf:e6:
         8b:ef:b4:73:0c:f7:8b:70:44:97:2c:4e:9c:35:a5:c5:11:d0:
         0f:57:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:45 2024 by rpki-client on console-fra.rpki-client.org