Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
File:                     3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier:          paVpjoCGXR+zEHNCcgnnd+cMUnGsI5HyU8w64DlcpBk=
Subject key identifier:   76:47:56:20:E6:3D:ED:A4:B4:12:8D:E9:98:A3:A4:97:9F:67:FD:94
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       6183D3C372B831823F324E9002F10947970F39E8
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
Signing time:             Fri 16 Aug 2024 07:16:37 +0000
ROA not before:           Fri 16 Aug 2024 07:11:37 +0000
ROA not after:            Fri 15 Aug 2025 07:16:37 +0000
asID:                     983
IP address blocks:        103.248.228.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 10:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:83:d3:c3:72:b8:31:82:3f:32:4e:90:02:f1:09:47:97:0f:39:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Aug 16 07:11:37 2024 GMT
            Not After : Aug 15 07:16:37 2025 GMT
        Subject: CN=76475620E63DEDA4B4128DE998A3A4979F67FD94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:4a:ab:97:96:85:31:09:f4:83:8b:e5:3f:
                    f4:b5:67:ea:d0:ec:85:a9:8a:96:f6:90:8e:1a:24:
                    72:7b:a7:23:b9:09:c4:fb:14:d2:d4:05:16:a5:d5:
                    ef:5f:e6:3c:07:35:22:8d:39:21:1f:52:5b:9b:a9:
                    ec:95:65:b0:8d:be:d7:79:e5:9e:e1:28:87:55:56:
                    4b:20:b8:0b:7d:b3:fd:14:0b:24:5a:7b:4e:1a:d2:
                    e1:85:99:77:9a:6e:df:1c:74:6d:c6:03:30:99:f5:
                    f6:5c:c4:83:b0:52:4b:b1:5c:e8:02:16:19:ec:b5:
                    6c:c6:50:5d:85:76:89:03:71:2b:b9:b7:8b:72:e9:
                    b4:57:ea:b0:b4:a4:15:03:36:d8:8f:92:28:1d:1d:
                    e4:61:ea:cc:f8:05:99:73:20:ba:4e:20:c9:b9:2a:
                    29:dc:e8:d4:c5:b3:72:a3:89:3d:1c:c4:ec:ec:56:
                    7d:ca:9e:53:80:53:a8:7d:ce:6d:88:11:32:dd:31:
                    0f:6a:2c:75:0d:07:f0:be:ba:7b:6d:a6:ca:0a:51:
                    46:d4:00:8f:72:22:4f:04:43:4e:24:12:ed:88:be:
                    8e:2d:36:f9:c0:66:e1:40:71:dd:2a:c5:61:2d:1e:
                    2d:20:e0:27:44:84:51:eb:91:11:fa:ec:83:9e:b4:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:47:56:20:E6:3D:ED:A4:B4:12:8D:E9:98:A3:A4:97:9F:67:FD:94
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:58:8f:9b:65:f6:2e:a0:94:09:10:5a:c1:79:bc:5d:06:
         d2:97:ff:1c:b9:c7:a3:6b:4b:ca:52:a0:72:e1:06:17:15:4b:
         56:99:60:f7:83:3d:2a:d3:fd:22:c2:5d:aa:10:60:88:45:0e:
         96:e2:ef:77:b6:fb:db:68:a5:5c:2e:36:46:a1:5a:43:f2:e9:
         33:b6:ad:43:dd:89:22:ff:2a:57:56:e6:ff:37:aa:f7:48:74:
         eb:f6:ea:62:1b:eb:e7:b3:31:8b:ab:5b:31:e7:ab:6e:77:aa:
         5a:47:ef:0f:18:05:2d:84:c4:36:ef:6e:fa:48:bf:23:9c:70:
         68:4d:8b:6b:9e:3b:d8:89:cc:92:cb:4f:bb:4f:4c:75:fd:ff:
         60:4d:5a:10:94:ab:32:a4:7a:5d:fc:1f:0e:c4:45:b0:73:ee:
         a7:62:c2:dc:3b:af:bb:f5:dd:0c:c7:dd:e5:96:b2:06:35:4a:
         3a:b6:1b:46:84:ec:ff:90:36:de:bc:aa:6c:8c:13:cf:ee:b6:
         d2:fc:64:f2:6f:7a:dd:d4:34:33:79:b1:76:b8:e6:cd:33:91:
         45:dd:f1:e4:11:ac:b6:fb:9e:af:04:58:a9:b6:7c:44:73:60:
         3c:74:7d:6c:57:d2:47:28:e1:fa:f2:cd:c9:3e:60:6f:bc:6b:
         84:32:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:16:41 2024 by rpki-client on console-fra.rpki-client.org