Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa
File:                     3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          vDov3YnGSnWrcM96lRtoECvAP7HfJTVBABlVnmFupgo=
Subject key identifier:   C1:BE:56:81:8C:0C:21:6A:FD:56:07:FE:F4:0C:88:93:D3:B0:18:AD
Certificate issuer:       /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial:       388BB019CC87B92DA26FDE8DD0B6F4A2017161D5
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa
Signing time:             Mon 17 Jun 2024 23:55:44 +0000
ROA not before:           Mon 17 Jun 2024 23:50:44 +0000
ROA not after:            Mon 16 Jun 2025 23:55:44 +0000
asID:                     138995
IP address blocks:        160.22.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 23:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8b:b0:19:cc:87:b9:2d:a2:6f:de:8d:d0:b6:f4:a2:01:71:61:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
        Validity
            Not Before: Jun 17 23:50:44 2024 GMT
            Not After : Jun 16 23:55:44 2025 GMT
        Subject: CN=C1BE56818C0C216AFD5607FEF40C8893D3B018AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7f:4f:54:72:9f:9a:33:e9:15:5a:8c:17:da:
                    0e:50:92:a9:79:38:0a:62:4e:b9:66:41:9b:11:fe:
                    b0:af:f3:71:dc:6f:b4:2a:e8:dd:8a:64:0a:a4:74:
                    e1:7b:98:33:e0:51:85:04:38:86:f4:a5:01:ec:0f:
                    3d:2c:2a:5e:bb:33:a4:38:9d:da:f3:ac:16:40:9c:
                    8d:56:f5:62:97:8c:17:0f:2c:36:4f:a6:77:cf:cf:
                    ba:91:fe:e4:a8:4d:51:e2:f3:f5:13:82:12:9f:0a:
                    63:96:34:65:35:f8:6d:6e:ca:ea:e9:e7:ae:24:d0:
                    96:1a:34:9a:c4:26:20:84:01:2a:ac:7c:96:9f:dd:
                    8c:73:ac:c7:c8:e5:80:0d:d1:15:6c:0c:28:8d:cf:
                    35:b1:2d:87:8a:ba:b8:7b:4e:00:51:83:93:12:a2:
                    60:9e:cd:48:fc:93:2b:e8:d7:91:35:08:19:ce:6a:
                    e7:25:fa:81:30:60:93:ae:54:83:72:71:c4:b2:d9:
                    8b:3d:4c:d4:d6:f5:24:05:ee:32:9d:e1:5e:cb:ed:
                    5e:2d:24:a6:88:78:08:ed:f4:72:d1:78:d6:6f:ac:
                    fe:0b:12:cf:4e:1e:1e:24:90:5f:2f:f3:f2:cd:5f:
                    1f:a1:94:46:0b:6c:1c:b9:7d:a2:4e:42:9a:7f:6d:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BE:56:81:8C:0C:21:6A:FD:56:07:FE:F4:0C:88:93:D3:B0:18:AD
            X509v3 Authority Key Identifier:
                keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:b8:86:7a:16:d9:49:4c:59:36:8e:9e:50:92:cd:59:f2:
         45:f2:40:93:0d:dc:fb:6f:0d:e6:55:69:51:a9:ea:f2:d8:2d:
         0b:51:36:91:7a:f1:7f:12:87:11:d8:68:71:3d:40:1a:33:14:
         1c:25:fd:c3:37:c7:77:c7:47:35:d4:5c:8b:5b:6c:a5:9a:66:
         be:bd:a6:39:b2:76:1a:b4:37:f8:96:ad:e8:85:6a:02:e3:f2:
         63:b6:57:dc:19:c2:b5:cf:76:2f:32:02:89:2b:2c:c7:53:54:
         33:5c:06:c8:78:57:5c:ba:a9:ca:9a:84:72:59:c3:b0:48:9f:
         bb:27:82:5e:0b:64:70:e8:c1:55:04:e2:1d:2b:c1:7c:89:68:
         61:94:21:91:de:57:d8:4e:d4:62:60:ca:71:77:4d:f1:3c:f0:
         92:7d:2c:db:37:7d:31:5e:6c:7a:0d:79:42:65:2c:7f:f7:38:
         13:e5:28:00:13:85:a0:98:0c:a8:46:0e:a0:36:a0:52:d4:46:
         b8:73:f9:e7:24:30:f2:f7:f7:cd:bf:75:37:5b:0a:22:ed:00:
         ab:2a:89:d9:e9:68:43:03:11:07:b7:40:62:75:3c:1b:62:39:
         29:24:8f:05:15:54:80:5d:3b:1c:34:92:97:ac:90:66:94:1d:
         aa:3a:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:22 2024 by rpki-client on console-ams.rpki-client.org