Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa
File:                     3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          peOoHbAyNXRF9mz75eJ5KMjpaMtSGocvqHZA9xdrAmo=
Subject key identifier:   B8:9B:58:32:F7:13:15:EA:82:1C:80:ED:EE:60:84:FA:55:A8:F2:33
Certificate issuer:       /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial:       7F3A0CB15300E7403A4D159EB9B7A597B61077DB
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa
Signing time:             Thu 27 Jun 2024 02:34:29 +0000
ROA not before:           Thu 27 Jun 2024 02:29:29 +0000
ROA not after:            Thu 26 Jun 2025 02:34:29 +0000
asID:                     138995
IP address blocks:        160.22.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 23:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3a:0c:b1:53:00:e7:40:3a:4d:15:9e:b9:b7:a5:97:b6:10:77:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
        Validity
            Not Before: Jun 27 02:29:29 2024 GMT
            Not After : Jun 26 02:34:29 2025 GMT
        Subject: CN=B89B5832F71315EA821C80EDEE6084FA55A8F233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:97:40:6c:3e:99:65:a6:66:c4:10:49:17:
                    1a:37:4d:1e:d8:d2:f3:7d:21:e7:e8:2a:0c:ed:a8:
                    87:cf:26:a8:72:39:81:33:20:85:5c:1a:99:c5:6b:
                    4e:be:97:9f:3b:03:e7:d0:87:35:a7:37:43:21:35:
                    6d:f6:bf:0c:90:a9:ee:62:08:6f:c5:32:03:bf:86:
                    7f:56:92:4f:fb:f3:70:bf:e7:e3:de:32:2c:89:d3:
                    46:00:99:25:c5:07:eb:be:6e:d2:c5:54:85:80:88:
                    28:db:b3:a4:85:43:a7:ff:46:ba:2b:a2:f6:79:d7:
                    e2:10:e4:ea:5f:92:a9:0c:6e:b1:5a:91:52:29:e7:
                    f6:0b:33:e5:f3:3d:bd:1d:14:6e:07:72:26:48:3d:
                    98:22:70:9e:27:37:ea:38:d1:52:7a:76:9b:67:9b:
                    c0:0a:61:9a:cf:b1:95:2c:dd:40:5f:0c:68:32:8c:
                    94:f6:7e:a0:1d:b7:1e:30:eb:50:50:86:41:53:8d:
                    11:7b:18:60:ef:28:da:bb:96:7f:53:40:21:0b:db:
                    41:2a:da:f8:eb:9d:47:9f:ea:94:ac:e0:6a:06:8c:
                    07:84:78:87:73:f3:ed:5d:b3:4f:c8:47:a1:85:7f:
                    7b:85:f9:45:bf:cb:f3:df:66:f5:0b:c4:e7:ff:be:
                    73:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9B:58:32:F7:13:15:EA:82:1C:80:ED:EE:60:84:FA:55:A8:F2:33
            X509v3 Authority Key Identifier:
                keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:d2:ce:ee:ac:58:24:d0:8d:ba:14:68:7c:b7:18:25:56:1d:
         01:ea:80:c0:36:0d:1f:90:39:a1:72:99:2a:09:c5:87:e7:bb:
         9d:66:5b:09:f6:b6:bb:71:3c:c1:de:22:dd:16:c4:c9:85:20:
         a8:e7:90:d8:19:3a:cd:06:b4:2e:9b:1b:42:de:1d:3b:70:4e:
         c4:69:aa:39:45:32:16:07:bb:2f:2f:d7:65:ea:b3:70:70:60:
         38:a5:dc:e6:27:b3:83:fe:06:63:f2:c9:18:ea:4a:b5:64:80:
         10:9b:1f:2a:97:fe:02:33:b5:c5:c5:c9:e3:de:2f:5f:35:80:
         e2:ef:a9:8b:6c:62:04:63:c4:ae:f1:cf:0f:33:1b:74:b2:c3:
         e5:ef:40:fe:8c:55:5b:6a:c4:93:22:a6:91:5f:96:ea:f0:f3:
         4d:77:10:61:ee:8e:61:16:64:dd:fd:52:4a:9d:87:0f:ae:36:
         ad:15:1e:ce:55:4f:9a:a8:65:9a:3d:b1:8d:ec:18:a4:71:92:
         2a:4c:31:fb:84:ac:d2:11:2d:8a:53:e6:db:f9:c6:58:a1:79:
         98:fa:cc:9a:6a:99:19:07:92:cb:05:49:be:be:31:4c:9e:85:
         44:a4:0f:14:39:a0:49:0b:32:9c:b8:53:ca:c1:0e:03:dc:25:
         83:87:f7:76
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUfzoMsVMA50A6TRWeubell7YQd9swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEygyM0IxMDMwRjND
Q0FDOTk5RjJCNTc3NDVGQzlEREExQ0NERkEzNjMwMB4XDTI0MDYyNzAyMjkyOVoX
DTI1MDYyNjAyMzQyOVowMzExMC8GA1UEAxMoQjg5QjU4MzJGNzEzMTVFQTgyMUM4
MEVERUU2MDg0RkE1NUE4RjIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJu+l0BsPpllpmbEEEkXGjdNHtjS830h5+gqDO2oh88mqHI5gTMghVwamcVr
Tr6XnzsD59CHNac3QyE1bfa/DJCp7mIIb8UyA7+Gf1aST/vzcL/n494yLInTRgCZ
JcUH675u0sVUhYCIKNuzpIVDp/9Guiui9nnX4hDk6l+SqQxusVqRUinn9gsz5fM9
vR0UbgdyJkg9mCJwnic36jjRUnp2m2ebwAphms+xlSzdQF8MaDKMlPZ+oB23HjDr
UFCGQVONEXsYYO8o2ruWf1NAIQvbQSra+OudR5/qlKzgagaMB4R4h3Pz7V2zT8hH
oYV/e4X5Rb/L899m9QvE5/++c7MCAwEAAaOCAj4wggI6MB0GA1UdDgQWBBS4m1gy
9xMV6oIcgO3uYIT6VajyMzAfBgNVHSMEGDAWgBQjsQMPPMrJmfK1d0X8ndoczfo2
MDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC81LzIzQjEwMzBGM0NDQUM5OTlGMkI1Nzc0NUZDOUREQTFDQ0RG
QTM2MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL0k3RUREenpLeVpueXRYZEZfSjNhSE0zNk5qQS5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC81LzMxMzYzMDJlMzIzMjJlMzEzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzMzM4MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBaoMA0GCSqGSIb3DQEBCwUAA4IBAQDG
0s7urFgk0I26FGh8txglVh0B6oDANg0fkDmhcpkqCcWH57udZlsJ9ra7cTzB3iLd
FsTJhSCo55DYGTrNBrQumxtC3h07cE7Eaao5RTIWB7svL9dl6rNwcGA4pdzmJ7OD
/gZj8skY6kq1ZIAQmx8ql/4CM7XFxcnj3i9fNYDi76mLbGIEY8Su8c8PMxt0ssPl
70D+jFVbasSTIqaRX5bq8PNNdxBh7o5hFmTd/VJKnYcPrjatFR7OVU+aqGWaPbGN
7BikcZIqTDH7hKzSES2KU+bb+cZYoXmY+syaapkZB5LLBUm+vjFMnoVEpA8UOaBJ
CzKcuFPKwQ4D3CWDh/d2
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org