Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e20393833.roa
File:                     323430313a323132303a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier:          PKyjZEOwKGtCTmrJB2JPYdt9iCOshRoq8c0bjrh/IWw=
Subject key identifier:   81:13:A8:A5:6D:49:A9:92:4B:5B:31:AE:90:67:B3:E1:A1:7D:D1:9C
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       10F3E0233DF28E9F29ED290E8AC620BA8596C903
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e20393833.roa
Signing time:             Fri 16 Aug 2024 07:16:56 +0000
ROA not before:           Fri 16 Aug 2024 07:11:56 +0000
ROA not after:            Fri 15 Aug 2025 07:16:56 +0000
asID:                     983
IP address blocks:        2401:2120::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Sep 2024 10:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:e0:23:3d:f2:8e:9f:29:ed:29:0e:8a:c6:20:ba:85:96:c9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Aug 16 07:11:56 2024 GMT
            Not After : Aug 15 07:16:56 2025 GMT
        Subject: CN=8113A8A56D49A9924B5B31AE9067B3E1A17DD19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:72:6a:b2:ee:e2:4f:94:ea:60:30:ce:46:
                    a4:b4:1d:5d:61:a3:41:a3:83:78:30:12:8c:eb:0c:
                    f3:7d:75:00:fc:a4:68:fe:f7:4d:91:7a:18:5d:e2:
                    d5:e6:09:9c:76:85:73:d7:ca:85:00:20:23:97:51:
                    bf:e4:1e:5f:ee:81:08:6d:93:d0:75:45:71:4b:0b:
                    f2:a6:9f:db:84:05:d9:ae:88:ec:a1:70:1b:44:0d:
                    a3:e3:44:d1:93:28:47:64:ee:cb:d2:96:6d:4b:11:
                    12:97:bc:ba:c8:b3:fd:53:1e:76:f7:82:41:29:bc:
                    3a:52:bb:85:9a:f7:d5:69:a3:50:ba:cf:e7:59:8f:
                    a3:e8:a8:be:b8:fe:61:ee:27:9b:3d:f4:53:1e:17:
                    cb:1d:ee:d4:fb:a2:d6:91:27:aa:b2:72:0a:08:2f:
                    fa:0e:21:97:86:c9:4c:c2:18:a0:c9:fd:43:47:4b:
                    da:1f:9a:52:58:c3:ca:1c:1b:63:4b:37:ff:9f:bd:
                    c4:8d:d2:b3:70:52:db:12:6a:62:f0:95:3d:a0:89:
                    95:e5:1c:00:53:d9:2d:f5:7d:dd:3c:11:b9:69:37:
                    e2:6f:6d:0e:d6:5b:0d:a8:ec:0d:cb:13:84:85:8a:
                    3e:a2:be:f0:2e:1c:e3:4e:88:cc:49:3b:54:86:db:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:13:A8:A5:6D:49:A9:92:4B:5B:31:AE:90:67:B3:E1:A1:7D:D1:9C
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:57:f3:82:39:55:b8:3f:8d:8a:10:8e:72:0d:a3:97:81:
         42:46:10:f6:04:9f:09:2c:80:30:90:22:59:46:27:72:1a:e4:
         27:41:fc:7c:aa:25:5d:46:73:e8:9d:45:22:21:13:d8:af:97:
         15:cd:93:d3:95:78:8b:35:c0:df:fc:e8:cf:ef:e5:8c:8a:95:
         67:51:3d:47:bc:a7:91:14:0c:8b:86:dd:29:08:ce:2c:35:ca:
         44:e4:79:bf:92:1b:57:e1:2a:53:c5:75:c5:32:1d:52:d3:18:
         1f:14:d1:30:c9:01:d9:4e:49:9f:7d:b9:84:f2:ca:ba:b5:a6:
         89:68:a5:f6:2f:34:3c:4b:20:09:28:2b:1b:a2:eb:19:44:c5:
         a1:1a:d8:da:e0:c2:32:fc:db:71:75:31:32:da:40:bd:76:59:
         5c:cb:5e:81:02:ff:9c:8f:17:b1:2c:50:6c:52:4a:c9:c9:ac:
         48:1d:e9:cd:69:02:aa:a3:08:46:5e:15:e5:be:16:a6:58:5c:
         ce:86:b7:4f:08:52:03:d5:c6:e0:6f:22:e2:3b:ac:e0:1d:be:
         50:9e:dd:81:0e:1f:21:a7:72:3f:6a:ec:72:58:41:95:e6:27:
         d8:77:2b:c2:ff:52:98:83:52:ac:ca:2a:d5:90:88:fd:7b:77:
         dd:35:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:16:41 2024 by rpki-client on console-fra.rpki-client.org