Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa
File:                     3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa (raw, json)
Hash identifier:          Mc7ZEvKdOIS59PohqBU/G5qpwHR9B5m/v+9n2utdOO0=
Subject key identifier:   AF:A7:EA:AE:7F:0E:5F:84:72:2B:60:27:4A:95:33:BD:65:2F:74:12
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       63731B9EA1FE62EE12EBABAEF38EBA9ED892E154
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa
Signing time:             Mon 01 Jul 2024 12:39:57 +0000
ROA not before:           Mon 01 Jul 2024 12:34:57 +0000
ROA not after:            Mon 30 Jun 2025 12:39:57 +0000
asID:                     151642
IP address blocks:        103.244.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Oct 2024 15:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:73:1b:9e:a1:fe:62:ee:12:eb:ab:ae:f3:8e:ba:9e:d8:92:e1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Jul  1 12:34:57 2024 GMT
            Not After : Jun 30 12:39:57 2025 GMT
        Subject: CN=AFA7EAAE7F0E5F84722B60274A9533BD652F7412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:b1:62:ba:98:2d:61:a9:ae:2a:48:8e:5f:
                    47:f9:93:6d:94:8b:84:95:f4:f1:30:5c:1b:88:bd:
                    2a:bd:61:50:b5:f0:39:32:fa:fd:c9:a1:3e:a6:e4:
                    3e:84:75:fd:2f:bf:fa:27:e9:2c:fa:2a:fb:9a:02:
                    67:c7:46:b3:9c:a2:d8:65:a5:e2:00:5c:ef:82:72:
                    2f:e4:11:8b:7e:d8:cf:da:93:76:3f:6d:07:d8:d5:
                    20:88:8a:9c:39:34:a7:c3:98:de:48:b5:c2:5a:28:
                    46:0f:b1:20:cc:cf:e4:44:2c:20:91:39:f1:ce:58:
                    46:54:21:7c:e2:1a:bd:24:d1:9f:c9:3d:d9:53:b4:
                    43:cb:62:2b:c9:dc:e8:fd:18:cd:a5:d2:5d:21:6d:
                    a7:6f:09:d0:4f:15:30:1e:9c:78:fe:0a:4f:cf:7b:
                    e7:a2:b9:12:5c:bd:c5:a2:5d:59:8e:90:57:23:a8:
                    e8:5d:e4:f8:50:0a:7d:ac:26:e8:0c:06:10:8f:67:
                    f8:3b:58:58:ef:e8:19:cf:ae:b5:cc:8a:07:81:e3:
                    9d:c7:4f:29:a1:da:52:a5:a8:5b:23:68:32:6d:a6:
                    86:31:fe:0b:dc:7e:97:67:cc:1f:d9:2c:1d:ae:7b:
                    3e:2f:f5:51:95:99:d1:eb:e3:80:ba:8d:e3:71:c2:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A7:EA:AE:7F:0E:5F:84:72:2B:60:27:4A:95:33:BD:65:2F:74:12
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:2e:fe:0b:8d:7e:23:4f:b2:f6:de:f0:0f:bf:b8:f9:82:
         85:62:26:54:fe:04:df:eb:1b:a6:7b:81:d5:ed:bd:71:6a:ae:
         6e:81:4a:ca:c0:3c:cf:36:42:03:11:5b:67:e6:a3:06:7b:35:
         57:64:e7:17:46:59:f8:e1:93:b1:31:8b:7a:3e:4e:66:76:e6:
         71:b6:53:a6:23:9b:a1:ef:ba:42:0d:9b:e1:13:86:68:1c:1b:
         47:33:7f:88:4f:b9:24:ec:f6:ce:67:2f:37:8c:94:ec:b7:4a:
         74:5b:4a:e7:08:40:cc:a9:fa:73:1f:ae:e5:f2:63:9b:bb:3f:
         ef:9b:a2:bf:5e:1b:40:69:e5:62:5b:3c:b3:f3:8c:6e:e1:1f:
         f8:a9:8d:06:ef:a0:34:c8:1a:0c:73:bc:2f:7e:57:00:2d:39:
         6a:60:e4:35:c8:3d:ce:a7:8f:ef:6b:33:51:14:e4:44:cb:c4:
         b3:69:5a:4a:dc:f2:ae:21:ce:60:f6:8e:e9:65:5a:34:84:3f:
         5f:7b:10:a0:9f:d5:d9:55:61:58:1b:f4:dd:50:b9:f4:1e:2d:
         1d:7b:03:8e:a5:f9:e1:fe:9f:a3:95:d3:de:3a:b2:43:32:30:
         3d:d8:b6:fb:7c:81:81:6a:f5:56:44:e2:e1:ed:67:62:5a:f8:
         7c:80:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 17:01:42 2024 by rpki-client on console.sobornost.net