Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
File:                     323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (raw, json)
Hash identifier:          O8RXEUxtkCb17Y1a6ycwwR83b8fh0j3k8TJCZ5YM1cA=
Subject key identifier:   BA:8D:5A:D4:05:8B:65:2D:1E:5C:3C:CA:8C:12:D0:25:5E:7B:A2:AD
Certificate issuer:       /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
Certificate serial:       66C9D727173B0AFF1F56C91243158824B6A949EB
Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
Signing time:             Fri 16 Aug 2024 07:01:59 +0000
ROA not before:           Fri 16 Aug 2024 06:56:59 +0000
ROA not after:            Fri 15 Aug 2025 07:01:59 +0000
asID:                     139299
IP address blocks:        2407:cdc0:efff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Sep 2024 17:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c9:d7:27:17:3b:0a:ff:1f:56:c9:12:43:15:88:24:b6:a9:49:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
        Validity
            Not Before: Aug 16 06:56:59 2024 GMT
            Not After : Aug 15 07:01:59 2025 GMT
        Subject: CN=BA8D5AD4058B652D1E5C3CCA8C12D0255E7BA2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:5c:11:30:0e:36:ae:3e:f9:bc:44:34:48:
                    a3:b4:57:58:46:b9:c0:fa:87:bc:df:8f:51:8a:2d:
                    83:3c:f9:b9:00:ac:44:62:0b:2f:11:b4:4b:2c:46:
                    78:dc:fe:d6:ff:44:1b:39:a2:54:90:33:cb:8a:1b:
                    86:c1:ec:93:f8:d3:ad:8b:00:38:41:e3:a3:fb:8f:
                    59:00:36:3d:e1:d2:18:ae:32:96:b9:eb:11:50:2e:
                    c9:84:12:af:af:05:ac:c0:2e:48:a8:6c:ef:3b:b3:
                    d3:4a:d3:88:af:94:8a:21:f8:24:ed:59:18:da:c9:
                    34:27:d2:3c:4f:13:14:21:d9:5f:c3:ce:f6:b8:d5:
                    fe:1e:0b:27:21:4c:0b:3a:97:1a:cc:99:5a:a3:e5:
                    ab:13:31:99:09:d1:39:04:c3:21:70:53:04:80:44:
                    c5:5c:e6:17:ec:ed:ad:cd:4c:1e:cc:95:93:f7:fe:
                    2a:d3:ae:3e:82:da:11:85:46:88:fb:88:4c:a6:72:
                    fe:96:b3:1e:73:73:ae:5c:de:fb:87:af:97:bc:47:
                    a2:a0:6a:8f:02:f0:3f:c4:0f:2f:f0:db:6f:7e:3e:
                    3c:3f:a5:39:b7:98:92:d5:47:cb:0a:a5:36:7b:24:
                    e6:26:84:16:c5:db:64:bb:fb:1a:a8:96:26:4a:bc:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:5A:D4:05:8B:65:2D:1E:5C:3C:CA:8C:12:D0:25:5E:7B:A2:AD
            X509v3 Authority Key Identifier:
                keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:efff::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:9b:4a:c7:71:f4:75:30:cc:a9:d9:05:eb:c9:f5:a9:c0:b5:
         9c:48:b4:d4:b4:92:31:fe:53:06:84:e7:e4:4e:d1:7c:81:67:
         a2:60:1b:79:fa:e1:ed:66:20:fe:78:8d:24:9e:37:81:64:0f:
         87:cf:1b:a0:3f:f6:28:4b:68:0c:cb:3e:5d:55:6d:f3:00:e8:
         6e:5d:e1:ad:55:76:25:03:7a:0c:77:7d:a9:19:a5:27:7c:b2:
         83:61:c9:c6:c5:35:bf:82:38:85:dc:1e:6e:e9:18:dd:90:89:
         90:4d:60:de:1d:c0:c8:97:0c:68:02:a5:bb:55:8f:07:72:37:
         19:0b:80:32:99:2a:a0:15:a8:58:b1:48:c6:c0:dd:16:9d:ad:
         9c:bc:e0:b4:40:95:d1:51:38:67:19:a6:32:56:2b:f7:fd:f1:
         0f:4a:c4:64:14:32:e5:70:d6:0f:d5:bf:59:7c:ab:f0:85:8b:
         ef:80:ec:b5:9c:01:06:38:60:20:65:d2:d3:6a:59:4c:1f:a3:
         2c:20:e7:49:96:63:06:64:46:4f:7f:c3:d2:54:dd:70:cc:f1:
         47:51:ce:76:70:89:13:c5:e7:7e:57:c6:f1:34:8f:57:bd:16:
         1d:50:78:81:27:8f:bf:d4:92:d8:98:62:5b:d8:2b:bd:08:c4:
         9f:6a:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 14:59:46 2024 by rpki-client on console-fra.rpki-client.org