Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa
File:                     323430373a636463303a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier:          W7U8cvEVzTdvHSzUGfCgZA1QXMFX/pc8YZ7R9tHweQg=
Subject key identifier:   02:8A:66:1C:FB:13:9D:65:45:8E:11:19:DF:E2:EB:0C:3D:D6:A0:62
Certificate issuer:       /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
Certificate serial:       753468FB4E555B81D5E32C8EDAD2E3ECE1E536F5
Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa
Signing time:             Fri 16 Aug 2024 07:03:25 +0000
ROA not before:           Fri 16 Aug 2024 06:58:25 +0000
ROA not after:            Fri 15 Aug 2025 07:03:25 +0000
asID:                     983
IP address blocks:        2407:cdc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 10:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:34:68:fb:4e:55:5b:81:d5:e3:2c:8e:da:d2:e3:ec:e1:e5:36:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
        Validity
            Not Before: Aug 16 06:58:25 2024 GMT
            Not After : Aug 15 07:03:25 2025 GMT
        Subject: CN=028A661CFB139D65458E1119DFE2EB0C3DD6A062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:40:19:df:3a:8e:a9:f7:4d:e0:a7:94:4e:a8:
                    dc:08:b1:6c:ec:22:4c:52:9b:a0:96:d0:85:56:6a:
                    bd:89:98:ad:09:b5:a8:7a:9a:3c:9f:bb:25:04:03:
                    25:ec:81:ff:ff:66:ad:96:6d:9b:ef:01:73:86:9c:
                    90:02:21:d4:a4:d9:cc:c9:73:1f:fb:3e:1a:0a:64:
                    67:05:f6:c0:df:8d:1a:92:c5:a8:ac:79:eb:98:25:
                    fa:69:db:4a:7f:3a:23:e6:c1:c8:01:51:cb:16:c8:
                    7b:75:08:63:b6:d3:60:38:74:f5:50:ea:bb:6c:86:
                    91:bc:07:9a:63:bc:cf:53:3f:04:90:37:1f:54:26:
                    6d:e0:cc:80:db:bc:02:17:1b:33:30:95:5a:09:59:
                    d0:70:ac:db:36:b1:f4:36:16:16:4d:da:20:f4:69:
                    3c:93:40:e0:e3:4b:0b:47:64:8a:3c:87:77:50:00:
                    2a:66:55:2d:08:14:a2:e6:49:cc:3b:98:5d:49:03:
                    3e:b3:84:63:58:1e:d2:e9:52:57:b4:e6:7d:3b:e2:
                    08:18:8a:69:0b:1f:ed:80:2b:2b:e7:46:41:0d:a4:
                    5f:74:25:2f:29:28:d7:0c:3d:03:cd:14:97:3f:8f:
                    5e:1f:9b:36:c7:6b:20:e2:b5:89:f3:81:da:a7:0b:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8A:66:1C:FB:13:9D:65:45:8E:11:19:DF:E2:EB:0C:3D:D6:A0:62
            X509v3 Authority Key Identifier:
                keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:32:08:0b:02:78:4b:70:f0:6b:51:dc:50:6b:00:46:f9:
         29:2f:1b:b6:29:6f:dc:eb:8b:94:5a:7d:dc:65:9d:dd:1d:8a:
         e7:d7:62:2c:40:0c:05:ac:2c:1e:ef:fb:0c:9a:49:03:41:37:
         07:9f:f5:f6:17:f1:60:c9:ee:bd:03:4a:93:46:28:35:6d:f7:
         c4:db:03:65:38:c1:85:1c:72:22:21:f1:db:d2:c6:1b:99:3a:
         68:9c:93:7e:9e:ba:21:0b:d4:c2:7f:2c:cd:7a:ea:d2:fc:18:
         41:46:f0:65:8a:96:16:4b:ea:4c:09:89:1e:4a:f1:40:5a:e2:
         8f:b6:39:0f:23:9b:b6:fc:65:e4:c0:7a:de:4c:27:a9:6f:5b:
         1c:3b:39:c0:c6:14:e7:ad:06:e5:35:9a:b4:cb:d9:20:5b:f5:
         a2:a4:41:6f:55:16:f2:ac:bd:9c:f4:a3:e3:33:be:42:c1:c1:
         39:50:0f:cd:96:66:bc:98:db:1f:04:c1:fd:ee:31:98:87:a9:
         c5:e6:63:41:35:e2:ae:b3:58:79:a2:f1:17:91:d0:a9:0e:36:
         c8:c2:3c:9b:97:ee:6a:cd:71:5d:66:b7:f3:55:fa:a3:d5:d3:
         2b:0f:70:a3:35:9f:53:5a:a7:ae:63:c8:35:68:cf:c0:8b:ef:
         38:b8:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:09 2024 by rpki-client on console-ams.rpki-client.org