Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38362e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          XoX0s8aUctHKOD2rspA+6kPyAmg+t1rKhe69fPO+l/w=
Subject key identifier:   91:60:EC:F7:ED:09:D9:88:97:39:33:2D:36:DC:AB:EB:7D:A7:2A:74
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       0901570B922029F459FA780C2EBA79A9B8BCCAA5
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:42 +0000
ROA not before:           Mon 02 Oct 2023 22:50:42 +0000
ROA not after:            Mon 30 Sep 2024 22:55:42 +0000
asID:                     36236
IP address blocks:        103.6.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:01:57:0b:92:20:29:f4:59:fa:78:0c:2e:ba:79:a9:b8:bc:ca:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:42 2023 GMT
            Not After : Sep 30 22:55:42 2024 GMT
        Subject: CN=9160ECF7ED09D9889739332D36DCABEB7DA72A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:ea:44:ae:c8:a2:fb:aa:38:3a:40:2e:4f:
                    84:ff:11:19:18:46:1f:29:42:fc:5a:99:a6:11:e6:
                    a1:04:98:eb:ec:bd:4b:dd:a7:e2:e5:13:e7:82:83:
                    e7:ee:e4:1d:9a:3f:cb:6d:f4:33:36:11:0b:3e:36:
                    58:1f:63:80:7a:70:51:78:16:15:70:13:43:61:cd:
                    ac:0a:e8:71:4f:a9:88:72:20:30:93:04:00:ec:c8:
                    1a:24:53:5f:d8:75:f9:f8:36:41:9f:3e:0c:83:27:
                    a0:d2:91:16:2c:c8:b0:26:13:19:60:d7:d3:6e:27:
                    8b:3c:96:da:4c:af:f1:67:d8:1a:e6:0d:8c:f9:15:
                    16:39:68:ff:d8:7e:81:60:0d:cd:21:d7:dd:a6:c0:
                    86:99:bf:bd:46:a7:d9:03:cc:a8:12:68:65:40:3d:
                    b4:aa:24:c4:8a:c4:8e:4f:35:92:fc:d6:ac:f7:93:
                    4e:1a:9c:4f:63:28:43:db:6d:57:05:a6:fe:f6:44:
                    bd:8a:3c:04:fc:10:c4:c5:a5:a3:c5:31:c1:f6:0f:
                    da:e1:94:8e:82:99:cc:fe:b3:f6:79:ba:c7:ba:3c:
                    9a:95:dd:bb:f3:b5:35:83:2d:33:9b:50:3d:f1:a2:
                    4b:b9:d8:d3:1c:67:62:d7:e6:b9:53:d3:aa:c3:23:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:60:EC:F7:ED:09:D9:88:97:39:33:2D:36:DC:AB:EB:7D:A7:2A:74
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:39:3c:a5:ba:d7:48:32:a9:c2:3c:c3:45:fe:b5:16:ec:
         5c:ef:28:f1:55:f6:10:6e:80:3a:6e:6b:d5:9e:23:b1:cf:84:
         31:f9:7c:8b:4f:88:2b:38:b9:0d:ac:78:9c:6f:8e:64:b1:93:
         10:f5:c0:aa:e2:99:5f:4d:b8:be:2c:8c:42:e6:01:45:63:de:
         a2:b6:a5:c1:0e:7e:40:33:9b:4b:8f:bf:ef:2b:c3:17:02:14:
         b6:75:2a:69:bc:fe:6d:84:bd:f8:09:9f:43:1c:1a:7d:fc:9d:
         85:46:98:e4:6a:55:d0:8a:cc:91:ed:87:b9:07:08:94:c8:9d:
         77:4f:53:a3:9d:f7:97:f7:4d:66:f9:a2:ca:1b:7b:e6:21:30:
         ef:d6:ec:a6:9f:51:b3:42:52:80:12:d3:53:99:db:21:b9:ed:
         d9:a4:b0:e4:27:b6:c6:b3:f3:08:6e:1e:4c:c3:73:ab:48:63:
         05:77:76:cf:3b:07:96:9c:5f:06:68:9a:64:de:fe:e6:c0:4c:
         16:cb:31:c9:e9:88:a7:80:d9:b3:1d:fd:70:be:2f:d3:ea:bc:
         8b:f4:70:66:c8:ab:65:1e:f3:e5:85:49:53:58:90:81:e3:e8:
         13:20:f9:39:60:0b:14:17:4d:86:0f:77:cf:4e:d4:08:e7:eb:
         23:98:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:50:16 2024 by rpki-client on console-ams.rpki-client.org