Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa
File:                     AS204136.roa (raw, json)
Hash identifier:          YCza0QlsQNEwKc/mENJHZTCYCMv4U+LmDwIB/vdfixA=
Subject key identifier:   6B:FE:5C:BB:80:8C:EB:92:98:44:09:CA:FE:ED:BE:46:3B:AC:35:47
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6B7B89C0741EE05D791039CB4B484C81CF2BDA65
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa
Signing time:             Sat 21 Oct 2023 19:16:47 +0000
ROA not before:           Sat 21 Oct 2023 19:11:47 +0000
ROA not after:            Sat 19 Oct 2024 19:16:47 +0000
asID:                     204136
IP address blocks:        103.230.141.0/24 maxlen: 24
                          185.121.177.0/24 maxlen: 24
                          2a06:a005:8e0::/44 maxlen: 48
                          2a0a:6043::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7b:89:c0:74:1e:e0:5d:79:10:39:cb:4b:48:4c:81:cf:2b:da:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Oct 21 19:11:47 2023 GMT
            Not After : Oct 19 19:16:47 2024 GMT
        Subject: CN=6BFE5CBB808CEB92984409CAFEEDBE463BAC3547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:cf:13:ca:76:ff:47:b8:51:08:9f:5a:75:
                    1d:77:88:50:82:ac:fb:cc:96:81:cd:79:22:5d:a8:
                    31:82:36:93:dc:67:f8:dd:35:8c:28:63:3b:41:e5:
                    2c:b0:72:e7:9a:56:9c:fe:17:c2:8c:61:b0:1f:86:
                    41:b5:88:2e:cb:79:e3:69:29:40:4c:1e:af:74:98:
                    c3:50:24:a5:b2:e8:91:cb:f5:c6:10:50:83:cd:37:
                    76:1e:b8:d7:8a:8e:5b:1f:14:dd:b2:39:68:dc:62:
                    22:b8:48:56:1b:47:75:a8:ed:35:bd:b7:fc:58:eb:
                    6e:ff:1f:40:0d:1a:f9:23:a9:e9:e5:a5:b3:1e:57:
                    0c:85:75:41:c9:fd:c6:7e:16:ed:f6:d8:c8:de:dc:
                    17:1b:d2:70:0d:72:e6:6f:6b:17:90:b8:29:07:c5:
                    e1:2a:08:3e:c9:c1:86:22:92:3f:c3:fa:20:1e:c4:
                    71:b1:f4:1c:37:23:c2:60:ef:35:38:8b:a2:8e:31:
                    f5:16:3c:6d:51:b2:58:c0:51:c5:31:53:38:55:f5:
                    0e:04:0b:8a:b8:e9:d1:3f:46:f8:e2:8c:48:51:5f:
                    cb:0f:66:f6:3e:d9:e5:69:d6:d8:fd:a2:aa:ab:f0:
                    83:67:b3:4c:e9:29:e9:74:7c:57:76:69:4c:48:21:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:5C:BB:80:8C:EB:92:98:44:09:CA:FE:ED:BE:46:3B:AC:35:47
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.141.0/24
                  185.121.177.0/24
                IPv6:
                  2a06:a005:8e0::/44
                  2a0a:6043::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:b2:8b:94:09:18:65:19:3b:1a:f3:5c:2b:ac:9a:89:4f:a7:
         c6:9c:c4:8f:46:6c:74:85:93:dd:5f:c7:ca:ab:98:00:75:ff:
         b3:1f:3b:de:5a:4e:82:41:bd:ab:89:a6:86:3c:b4:c1:b3:85:
         f0:d6:75:1d:9b:f8:4f:3a:1d:83:9f:f7:f1:58:67:eb:2f:e8:
         c2:44:e4:ef:72:ba:b8:ce:4f:cf:8d:7c:92:e1:42:0e:0b:ba:
         b4:c5:b8:ed:21:9e:8a:f5:16:59:35:99:29:9a:68:d0:3a:86:
         c0:03:0a:29:dc:16:b7:cc:af:ad:d0:77:67:04:29:b8:ed:58:
         58:08:d7:8f:94:95:33:d2:45:ea:6f:63:6c:a1:dc:ea:71:79:
         68:c2:9a:73:be:93:a7:39:f3:c7:2c:17:5b:ea:83:06:06:2a:
         5b:90:62:30:2a:68:17:c1:97:26:c6:54:cc:11:4c:fa:a9:88:
         10:6b:42:88:8e:17:82:8b:50:a1:e7:ad:3e:67:08:5f:20:a2:
         68:ae:c2:62:c8:32:16:b9:6c:f4:14:ba:1b:7a:6f:4d:7e:73:
         ff:b8:1e:ce:40:a8:d2:32:62:27:13:f3:c8:17:3a:36:db:ea:
         d1:0d:a1:60:ca:b1:23:38:85:58:d7:b6:85:d9:e4:bd:78:2c:
         cd:bb:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----