Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa
File:                     3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          7waZZobnyji08SIeGjEeeWN0pPchc4HGx7/G05RTGL4=
Subject key identifier:   F4:68:57:55:B1:41:44:53:AE:E4:A0:1F:57:78:E4:47:64:00:5D:B9
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       73B18B2C6DDD51AAB069E7AB8BD364DA13EAB0DD
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     61138
IP address blocks:        103.208.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 07:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b1:8b:2c:6d:dd:51:aa:b0:69:e7:ab:8b:d3:64:da:13:ea:b0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=F4685755B1414453AEE4A01F5778E44764005DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:86:a8:5a:12:45:d2:9e:58:0a:4e:20:ca:
                    b1:51:57:aa:68:bb:54:ac:fc:da:e5:78:80:74:84:
                    98:60:77:b4:34:be:c4:e6:3e:70:a8:f7:e1:68:1e:
                    aa:0e:7f:d2:fd:ba:6d:64:c2:f1:a3:27:34:1b:e0:
                    a2:02:bd:85:37:d0:df:01:98:7e:65:22:4a:d8:1f:
                    ff:04:0c:fe:4c:9a:af:8e:76:3b:51:cc:8f:f3:2e:
                    ba:59:fb:f1:fb:79:8f:c0:48:91:05:d7:65:fa:88:
                    c6:fd:ad:e3:5a:bb:91:24:ee:f7:1b:ca:36:88:04:
                    30:4a:e8:d9:b9:1a:11:88:2c:5d:43:05:8f:91:81:
                    20:cc:c8:33:e9:21:09:30:1f:3d:c5:f0:03:34:d7:
                    da:78:ca:aa:b2:ac:67:c4:90:14:29:43:b4:44:1c:
                    5b:31:d4:20:d4:33:14:64:ca:0d:86:ca:a7:e7:7a:
                    32:7e:20:52:84:b9:e0:7e:a4:de:28:b2:0e:73:05:
                    de:20:bb:d7:0c:3a:9c:6a:c2:8e:2e:5c:5c:04:b5:
                    f3:4d:70:14:ff:22:e6:d8:18:c4:53:50:74:aa:8a:
                    45:98:f9:27:c3:e4:7f:79:78:02:7d:bd:ba:64:3a:
                    7c:09:31:24:10:f9:f5:a5:3a:ce:20:93:63:43:2b:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:68:57:55:B1:41:44:53:AE:E4:A0:1F:57:78:E4:47:64:00:5D:B9
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:b4:fc:bb:54:e5:36:23:35:63:8d:8b:8d:ab:fc:31:fa:cb:
         28:83:ec:2c:b7:00:ad:0f:6a:25:36:cb:aa:b2:15:6d:7d:ab:
         c3:f7:9f:cb:74:5c:47:6d:63:c4:d4:59:98:a1:be:eb:53:a2:
         b6:c9:cd:ca:63:92:aa:78:4e:eb:2f:eb:c5:74:df:b0:90:ca:
         13:3d:7e:06:09:0a:36:bc:a4:2a:93:6b:ba:e3:99:52:b3:55:
         43:78:63:42:ee:17:d6:19:5e:e9:f2:fa:53:f2:e5:19:ec:c4:
         0b:ee:8a:fd:50:54:dd:7f:a1:51:03:75:7e:6a:27:cd:28:91:
         1e:31:6d:89:40:13:e2:15:98:4d:ac:c4:4d:a2:3d:e4:c0:57:
         83:37:b3:3b:b2:cb:0d:10:3b:64:4e:53:dd:3e:cb:6d:6f:92:
         80:59:e4:63:15:5e:ad:a3:c8:a6:ee:37:1c:54:5a:37:65:3d:
         0a:72:87:be:af:64:6b:33:65:15:25:83:58:be:14:04:00:5e:
         ee:84:de:b0:2b:0b:5a:fe:f3:91:a8:c9:1b:5f:e1:66:cc:ff:
         aa:a1:98:e0:2f:cc:73:2a:60:03:0b:3f:e5:8f:01:ab:51:cb:
         6e:37:a2:4b:49:de:0e:e1:49:50:50:5e:02:d1:be:d9:55:be:
         f5:0c:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:37 2024 by rpki-client on console-fra.rpki-client.org