Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa
File:                     3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier:          hVB+MDtMs9vcnlXRBbJoSNzvilI9btPbCTuEKSp7v0s=
Subject key identifier:   47:15:10:2E:23:F9:B2:C7:B8:81:4F:0B:4F:6D:46:C8:C5:1C:82:12
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       0ADE98ED583D9297C15DCDCE53A24A4EA6A66FD8
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa
Signing time:             Thu 19 Dec 2024 20:40:12 +0000
ROA not before:           Thu 19 Dec 2024 20:35:12 +0000
ROA not after:            Thu 18 Dec 2025 20:40:12 +0000
asID:                     136557
IP address blocks:        103.68.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 23:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:de:98:ed:58:3d:92:97:c1:5d:cd:ce:53:a2:4a:4e:a6:a6:6f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000
        Validity
            Not Before: Dec 19 20:35:12 2024 GMT
            Not After : Dec 18 20:40:12 2025 GMT
        Subject: CN=4715102E23F9B2C7B8814F0B4F6D46C8C51C8212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:56:e9:5e:b2:a0:b7:a6:c5:cb:aa:50:8d:
                    41:0b:1c:ba:9b:2f:18:b8:c7:f2:a4:a5:0b:10:e8:
                    ce:1b:fb:84:41:16:31:b7:d0:ce:8f:59:99:13:5d:
                    03:c8:92:54:12:36:7a:a1:a7:4c:f2:77:17:10:9f:
                    86:1d:44:37:ea:df:65:23:9b:dd:ce:22:ca:65:73:
                    d0:47:3e:99:e3:75:e8:12:bc:11:00:b3:2d:97:8c:
                    b8:d5:66:8a:d4:94:3f:9d:2f:cb:77:f1:4e:fa:c7:
                    b2:b4:cd:e2:7d:92:a1:df:8b:e3:12:11:10:9f:46:
                    43:98:46:7b:c5:e5:22:5d:9f:a2:2c:21:d9:77:ec:
                    6b:76:cd:21:8e:19:b6:e1:77:f7:50:1c:ea:32:fd:
                    dc:6b:c9:3b:4b:4a:ad:a2:c9:d9:24:d9:e0:44:ea:
                    bc:9b:1e:f4:4e:25:5a:c0:13:9c:3a:4c:28:d6:e9:
                    67:57:c7:1a:74:f4:50:69:6e:19:b2:7b:dc:a5:69:
                    7b:eb:09:47:ef:9a:a2:74:0f:8e:7c:08:b2:d2:08:
                    66:0e:3a:c8:2e:1e:06:c0:63:81:30:3e:4e:49:ed:
                    66:16:99:b5:b2:b7:f6:45:7f:50:6e:03:f5:2d:84:
                    cd:3f:80:bd:32:b4:d4:82:d8:99:1d:5d:b4:df:88:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:15:10:2E:23:F9:B2:C7:B8:81:4F:0B:4F:6D:46:C8:C5:1C:82:12
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:d2:84:d5:4c:92:f9:10:fa:ed:6a:f6:9c:48:74:a6:28:
         53:ed:8f:c5:7a:4d:32:a0:78:06:77:ad:69:88:c7:01:21:ac:
         56:c7:2c:7f:a9:56:53:e9:0c:cf:1c:4a:6b:0f:c3:3e:c5:0d:
         eb:5f:c7:02:a6:a2:8c:40:41:9c:c8:f2:a2:58:d5:79:cb:e4:
         2d:02:e7:c5:df:02:ac:32:ae:4f:05:48:1b:67:d7:14:d8:4b:
         be:93:81:de:2a:68:33:e8:99:16:28:35:7f:77:1f:1c:69:3d:
         ce:42:74:2c:39:65:55:0d:80:19:7c:83:15:0a:ff:43:e0:c1:
         07:4f:54:e4:ef:0c:ed:99:a0:da:3f:b1:d2:06:8d:07:59:0c:
         00:24:b4:f2:91:04:4b:cf:d0:95:fe:ab:1f:3f:37:21:52:bc:
         5c:ed:0e:39:70:32:a7:e3:64:3a:3f:23:12:83:1a:d3:b6:06:
         bd:a2:3e:fd:c3:0e:0d:15:1b:3d:73:c2:d8:c5:27:c1:ec:b8:
         80:0a:57:18:67:70:90:a0:13:82:e1:1c:7b:1c:82:21:93:bb:
         91:1f:2b:23:4c:8e:bf:7b:bd:83:d9:9f:00:0f:65:4d:58:b2:
         38:56:5d:81:a5:92:82:c7:ca:c3:c8:d4:62:c6:50:ab:63:24:
         2d:c8:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:14 2025 by rpki-client