Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa
File:                     3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier:          qLcl76U44IP1HQWYzwwST4ylq7rNT3nP7otBq06ZGKI=
Subject key identifier:   81:B1:F5:A1:EA:C6:D1:70:47:46:45:B8:EF:26:74:29:3C:FB:CF:3B
Certificate issuer:       /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
Certificate serial:       5CC7DECE175E6F9D269C64BDFAF1AEDCC2E3137D
Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa
Signing time:             Fri 16 Aug 2024 07:01:36 +0000
ROA not before:           Fri 16 Aug 2024 06:56:36 +0000
ROA not after:            Fri 15 Aug 2025 07:01:36 +0000
asID:                     38136
IP address blocks:        103.172.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 10:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c7:de:ce:17:5e:6f:9d:26:9c:64:bd:fa:f1:ae:dc:c2:e3:13:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
        Validity
            Not Before: Aug 16 06:56:36 2024 GMT
            Not After : Aug 15 07:01:36 2025 GMT
        Subject: CN=81B1F5A1EAC6D170474645B8EF2674293CFBCF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:fb:e4:21:52:84:38:71:ad:51:f3:64:64:
                    86:17:4b:40:04:e5:2e:f7:27:44:94:82:c5:8e:f0:
                    3b:79:4d:f3:6d:c6:59:a1:e1:1a:3b:30:88:d3:7d:
                    1c:9f:55:fd:f9:d0:fa:12:65:6e:68:7b:fb:87:ca:
                    d7:0d:dc:a1:cc:85:84:b0:aa:14:8d:54:4b:0d:bc:
                    25:bd:95:79:15:f0:b2:64:d8:92:2e:1a:c9:cf:3e:
                    62:bd:b8:3d:24:ff:a9:2b:3a:45:8d:1f:26:94:1b:
                    07:3f:01:a5:8c:b9:96:ed:0a:be:34:ab:28:3c:32:
                    d9:3d:d1:b2:a6:8b:33:57:46:54:4b:4a:90:e5:48:
                    83:11:1f:55:90:ed:86:59:06:ba:9e:a5:b5:79:aa:
                    6c:6f:60:97:62:7f:ed:d3:4e:ba:a2:b0:e0:69:ff:
                    bd:ee:fb:73:09:07:24:e5:69:b5:cb:e9:bc:f2:24:
                    09:5e:51:e1:d9:9e:3b:29:00:1a:f5:96:56:be:18:
                    3d:b5:c9:1b:88:3d:eb:de:d7:07:1e:b4:ed:d8:af:
                    84:80:e1:0a:f6:73:b4:c8:05:af:1e:ea:5d:21:e6:
                    6f:a2:56:5b:e8:17:fc:bc:01:7f:5c:89:6a:ee:03:
                    91:27:0b:9b:03:7c:c3:e3:04:d4:0a:f2:5e:fa:50:
                    ab:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B1:F5:A1:EA:C6:D1:70:47:46:45:B8:EF:26:74:29:3C:FB:CF:3B
            X509v3 Authority Key Identifier:
                keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:ba:a8:bf:23:88:42:51:cc:3e:3d:85:c6:1b:3f:fc:9f:0b:
         7b:f3:b4:f2:36:cd:99:9e:0d:77:61:f8:2b:8d:26:42:99:c6:
         f2:90:2f:ec:e1:e1:83:0d:12:a7:dd:1e:11:3e:8c:3c:53:84:
         29:21:44:43:7d:c0:1b:f5:52:62:c1:70:5a:b7:3a:a1:8f:04:
         76:c7:9e:dc:e9:80:33:46:ab:87:af:1b:f9:c7:0e:10:5c:09:
         cd:65:57:33:d3:2c:9e:78:52:a5:8d:87:9c:9c:20:32:f1:f8:
         59:79:97:97:70:37:b2:df:49:cc:4a:55:38:d3:5f:ff:b7:0e:
         20:b1:ae:ba:1d:c1:8d:ff:22:9a:a9:ea:29:8e:76:32:17:84:
         aa:8e:ce:ab:59:08:8e:cd:ab:b2:78:6b:36:e9:45:03:c4:74:
         ba:e4:31:03:1f:62:03:49:09:f3:0d:09:36:a3:6c:5f:1a:d7:
         d9:5f:79:a3:e7:b5:80:30:9d:57:c5:80:0d:d9:f0:5b:ab:85:
         eb:94:db:81:4a:de:12:38:75:0b:b4:f4:14:50:31:fc:33:a1:
         22:9b:51:28:f7:1a:b9:5f:f9:1d:c2:23:4f:90:bb:38:2e:4d:
         94:f4:3e:27:21:3f:14:fe:75:63:4c:f3:05:63:48:51:cb:bf:
         1f:59:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:09 2024 by rpki-client on console-ams.rpki-client.org