Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          mQVf4NgC9jbiLUvjf70a+kZ1YBvitNvqQN8Cl+RUCJU=
Subject key identifier:   39:70:C4:4C:33:DC:92:C9:0F:F5:C5:63:6F:13:87:50:6F:C6:7C:4D
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       77A137ADB8065D9BE5A23484FA29B30E13779835
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:43 +0000
ROA not before:           Mon 02 Oct 2023 22:50:43 +0000
ROA not after:            Mon 30 Sep 2024 22:55:43 +0000
asID:                     36236
IP address blocks:        103.84.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 03:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:37:ad:b8:06:5d:9b:e5:a2:34:84:fa:29:b3:0e:13:77:98:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  2 22:50:43 2023 GMT
            Not After : Sep 30 22:55:43 2024 GMT
        Subject: CN=3970C44C33DC92C90FF5C5636F1387506FC67C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:f1:0f:5b:1c:8a:d8:da:03:0a:ca:fd:3d:
                    6d:13:63:1a:b9:b7:ff:37:ec:93:e0:60:c5:90:e1:
                    7f:f5:00:e6:7e:7d:e8:a3:b5:1e:54:67:52:a1:9d:
                    a4:ba:b0:d5:73:0a:ee:45:c6:b5:10:d4:ee:9c:c5:
                    ab:30:e8:6e:59:11:87:72:98:79:69:74:fd:7c:01:
                    00:fd:a2:87:7a:a5:de:35:92:33:5a:5e:9f:f8:62:
                    4b:f5:73:34:7a:ce:09:bd:89:ba:3f:32:9e:85:5b:
                    a3:7f:86:3e:26:4c:9b:d0:43:c5:fe:08:3d:f9:e7:
                    2c:a9:a6:a8:8c:02:cc:b8:4f:fb:7d:91:f4:ef:2d:
                    f0:31:29:19:ec:99:af:3b:85:79:34:8c:f0:27:dd:
                    8d:06:f8:33:f1:ff:bf:f9:7c:f2:ca:ce:d0:7f:f6:
                    22:ab:6a:89:f3:d3:4c:6e:33:d9:b0:28:4d:00:67:
                    d4:77:b9:1f:f9:dc:ba:39:b5:e0:31:e3:eb:ef:8e:
                    be:30:a0:6d:a5:5c:a4:db:75:1b:c0:8d:29:11:91:
                    53:5c:a8:58:16:64:d3:0c:a7:d6:ef:15:dd:39:5c:
                    f5:fd:da:00:91:85:1e:06:d7:eb:b4:9b:7f:f6:24:
                    01:d7:38:49:1c:bf:da:8f:e5:3b:8d:e0:1b:27:0b:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:C4:4C:33:DC:92:C9:0F:F5:C5:63:6F:13:87:50:6F:C6:7C:4D
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:bd:5a:2a:3d:46:76:e0:6a:c2:64:4c:fa:79:40:ea:94:
         00:9b:60:83:7b:d1:4f:ef:11:3d:bd:6f:60:0c:b0:8f:08:63:
         1e:d8:f9:d2:b7:ce:eb:9a:40:21:83:b6:69:47:2c:03:7d:4d:
         77:8b:18:22:f6:22:f8:d9:88:c3:bc:84:5e:5e:ca:39:b7:7c:
         14:b3:1e:59:d2:02:7d:f5:aa:09:36:4e:b7:e7:63:4e:5d:75:
         75:bd:42:b5:ec:34:e6:f3:dd:91:69:a2:16:f6:cf:23:fe:df:
         48:70:13:81:4d:7a:28:c2:f9:38:d5:ea:36:2c:c3:cf:21:fd:
         e0:78:ea:1d:cc:93:58:e9:23:04:5f:81:93:4d:bb:71:79:95:
         4e:c2:9c:fa:34:f5:dc:8a:34:13:90:a8:68:57:2a:4c:5f:a0:
         f4:2e:1d:c4:5f:34:3d:4e:aa:18:7b:cd:be:9f:ce:bf:2e:9e:
         e3:56:be:fa:d4:3e:54:ec:6c:42:af:a7:6b:47:d1:95:56:47:
         28:5a:d4:fc:23:94:87:58:be:18:70:9a:52:f2:8f:dc:42:17:
         30:3c:e3:24:26:b6:88:45:17:fd:4b:53:0c:2a:ca:25:97:29:
         64:ca:e1:7a:8d:20:44:ce:4a:29:0a:8c:f6:72:3a:54:f6:e2:
         3d:b2:60:b6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUd6E3rbgGXZvlojSE+imzDhN3mDUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTIzMTAwMjIyNTA0M1oX
DTI0MDkzMDIyNTU0M1owMzExMC8GA1UEAxMoMzk3MEM0NEMzM0RDOTJDOTBGRjVD
NTYzNkYxMzg3NTA2RkM2N0M0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMJ88Q9bHIrY2gMKyv09bRNjGrm3/zfsk+BgxZDhf/UA5n596KO1HlRnUqGd
pLqw1XMK7kXGtRDU7pzFqzDoblkRh3KYeWl0/XwBAP2ih3ql3jWSM1pen/hiS/Vz
NHrOCb2Juj8ynoVbo3+GPiZMm9BDxf4IPfnnLKmmqIwCzLhP+32R9O8t8DEpGeyZ
rzuFeTSM8CfdjQb4M/H/v/l88srO0H/2IqtqifPTTG4z2bAoTQBn1He5H/ncujm1
4DHj6++OvjCgbaVcpNt1G8CNKRGRU1yoWBZk0wyn1u8V3Tlc9f3aAJGFHgbX67Sb
f/YkAdc4SRy/2o/lO43gGycLQicCAwEAAaOCAjwwggI4MB0GA1UdDgQWBBQ5cMRM
M9ySyQ/1xWNvE4dQb8Z8TTAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzMxMzAzMzJlMzgzNDJlMzEzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdUmTANBgkqhkiG9w0BAQsFAAOCAQEAoSS9
Wio9RnbgasJkTPp5QOqUAJtgg3vRT+8RPb1vYAywjwhjHtj50rfO65pAIYO2aUcs
A31Nd4sYIvYi+NmIw7yEXl7KObd8FLMeWdICffWqCTZOt+djTl11db1Ctew05vPd
kWmiFvbPI/7fSHATgU16KML5ONXqNizDzyH94HjqHcyTWOkjBF+Bk027cXmVTsKc
+jT13Io0E5CoaFcqTF+g9C4dxF80PU6qGHvNvp/Ovy6e41a++tQ+VOxsQq+na0fR
lVZHKFrU/COUh1i+GHCaUvKP3EIXMDzjJCa2iEUX/UtTDCrKJZcpZMrheo0gRM5K
KQqM9nI6VPbiPbJgtg==
-----END CERTIFICATE-----
Generated at Sun May 12 02:01:18 2024 by rpki-client on console-ams.rpki-client.org