Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa
File:                     3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa (raw, json)
Hash identifier:          HppU8HtmpdI4fP5tactqskNidE0s+tOrkrjVDlo0WQ8=
Subject key identifier:   78:FC:A1:C2:A7:5F:FD:83:83:F4:9D:A8:38:E9:83:44:EE:01:10:3C
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       1925BBFE04F5AA3D00E06ADD2F63FDEEE8FCBC39
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa
Signing time:             Mon 31 Jul 2023 12:16:43 +0000
ROA not before:           Mon 31 Jul 2023 12:11:43 +0000
ROA not after:            Mon 29 Jul 2024 12:16:43 +0000
asID:                     151642
IP address blocks:        103.244.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 23:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:25:bb:fe:04:f5:aa:3d:00:e0:6a:dd:2f:63:fd:ee:e8:fc:bc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Jul 31 12:11:43 2023 GMT
            Not After : Jul 29 12:16:43 2024 GMT
        Subject: CN=78FCA1C2A75FFD8383F49DA838E98344EE01103C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:4e:d9:7d:06:d6:57:be:5e:1b:81:bd:87:
                    71:8a:95:69:13:ba:4c:6a:3e:e7:e0:e7:1b:5d:b6:
                    5c:9b:79:d0:8b:6c:f8:99:9a:1a:1d:5b:fc:29:3d:
                    b6:9a:17:d4:6d:fc:0f:d8:85:19:ec:fc:65:df:24:
                    25:35:f0:6d:42:8c:a5:a4:67:c3:35:46:54:ca:65:
                    10:8e:45:13:19:ae:7d:80:02:bb:2e:68:50:20:ee:
                    80:50:c7:34:ff:64:68:3a:d7:80:55:89:4d:0d:4f:
                    a2:02:f3:31:24:bb:b9:3b:c0:38:9f:78:5f:02:1a:
                    5a:f3:f8:a0:5b:e2:55:b7:88:8f:22:b8:6b:b7:76:
                    aa:be:68:a6:5c:ef:1d:d8:1e:b0:4a:51:4c:65:77:
                    b7:95:7e:88:34:96:8b:2c:cd:d5:e1:ac:4e:db:4f:
                    bd:48:22:0f:6d:9f:08:db:52:a3:e5:59:07:37:0f:
                    a9:04:f8:dc:73:b3:89:1e:22:8a:fc:a7:52:55:d7:
                    5f:37:9d:fa:18:66:10:de:f6:e4:49:e9:eb:ed:c3:
                    ec:e8:bd:a8:6a:62:b6:96:99:39:27:c3:71:3d:f6:
                    d5:3a:df:1a:01:95:78:dd:bb:57:96:e0:29:84:0e:
                    84:7a:a4:9e:f9:6f:89:30:2c:e1:9d:68:4a:0d:f6:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FC:A1:C2:A7:5F:FD:83:83:F4:9D:A8:38:E9:83:44:EE:01:10:3C
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:75:f5:6e:92:0c:5d:fe:28:25:db:ed:61:9b:3b:f8:16:08:
         23:dd:8f:6d:23:d0:69:23:8f:df:98:f1:ee:0f:3b:e2:74:0b:
         6f:d2:a3:64:00:74:cf:d9:1f:14:2f:e1:fd:9e:4f:08:65:eb:
         8a:bb:ae:b7:b8:b6:80:8e:78:fc:11:c0:79:b5:a5:83:b3:81:
         60:77:66:5d:b2:96:66:7d:3a:52:c8:e2:34:07:a8:67:db:52:
         2f:a9:6e:35:f5:f9:d4:5b:55:85:9d:7e:6b:03:91:b5:e2:0a:
         20:57:76:d1:cb:72:c1:61:0a:e8:1d:e5:55:f8:60:1d:96:40:
         9e:e6:f2:b6:58:84:5c:93:9f:07:0f:d0:ff:71:3b:88:bd:3c:
         63:db:ec:8c:f9:97:91:7a:ca:8d:b5:cb:75:4c:e6:b2:89:db:
         6b:f2:00:4a:73:66:b2:ec:ee:55:81:42:c1:64:4f:a7:70:c2:
         83:3d:93:23:62:ab:2e:ac:04:a6:8d:e2:96:8b:61:bc:aa:bb:
         c4:2c:0e:9b:cc:a2:bc:dd:57:d4:1c:82:d4:c7:e9:c0:db:8a:
         62:a6:7d:d0:45:ca:bf:c2:bb:a5:89:50:2e:fc:ab:d9:4d:00:
         23:a6:10:f2:4c:17:fa:50:1f:e8:ba:91:71:ea:ff:5f:fe:ce:
         87:d2:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 00:28:07 2024 by rpki-client on console-fra.rpki-client.org