Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203438323937.roa
File:                     3130332e3230382e38342e302f32342d3234203d3e203438323937.roa (raw, json)
Hash identifier:          PhVjc3ONtbvV5Qu9cLEt5fnW3kzzQln2bXSIv9yEnys=
Subject key identifier:   2F:32:8A:B2:53:CC:8F:FA:9C:0E:C1:B1:AE:9E:36:D3:D3:B5:28:FF
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       0FEA939A56DA321151258A4012082ECD91F95563
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203438323937.roa
Signing time:             Wed 19 Jul 2023 11:47:28 +0000
ROA not before:           Wed 19 Jul 2023 11:42:28 +0000
ROA not after:            Wed 17 Jul 2024 11:47:28 +0000
asID:                     48297
IP address blocks:        103.208.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 23:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ea:93:9a:56:da:32:11:51:25:8a:40:12:08:2e:cd:91:f9:55:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jul 19 11:42:28 2023 GMT
            Not After : Jul 17 11:47:28 2024 GMT
        Subject: CN=2F328AB253CC8FFA9C0EC1B1AE9E36D3D3B528FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:b4:a0:10:ea:8a:3b:37:c6:ef:76:66:03:
                    00:fc:0a:c3:d7:2f:b9:e3:7d:c6:d7:ac:e5:10:00:
                    8a:8a:06:a9:3d:73:0a:f0:47:97:de:f9:a2:c2:a0:
                    93:4f:3d:33:d2:47:59:f8:85:16:e8:30:40:53:8e:
                    00:88:40:83:63:33:42:7e:49:be:1b:b9:a4:c4:93:
                    0f:0d:e3:c4:71:fc:ad:44:55:32:f3:9a:1f:58:6d:
                    3f:f8:0c:d7:cc:0b:52:73:51:45:31:17:16:dc:b5:
                    0b:2b:57:3e:b0:42:da:a1:79:b0:35:88:20:ca:ba:
                    45:d1:57:ac:11:21:fe:4c:0d:c6:c3:88:38:51:d0:
                    70:16:ae:2c:97:31:df:7b:90:45:65:a2:4a:1c:1f:
                    56:2a:f5:7b:13:b5:da:17:ca:a6:98:4d:ca:bb:f0:
                    1f:a6:b9:3a:bf:95:4c:e4:1f:14:bf:af:04:ec:db:
                    65:b8:f9:aa:6d:5c:e3:59:93:35:3a:48:d2:d9:63:
                    6c:12:b4:d3:92:13:bb:48:7b:96:e1:b3:fa:08:00:
                    3d:46:c6:91:19:f8:87:ae:e2:04:0e:9c:6e:2e:ec:
                    dd:12:43:db:16:ee:0c:66:88:8f:6f:5b:25:f2:38:
                    d2:e2:e0:fd:50:a5:99:eb:f1:2e:31:0d:a4:93:d3:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:32:8A:B2:53:CC:8F:FA:9C:0E:C1:B1:AE:9E:36:D3:D3:B5:28:FF
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203438323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:35:db:b4:d4:46:4c:5c:44:67:85:ec:14:4a:99:a7:ff:d5:
         7f:f7:30:79:18:c7:39:6b:84:1b:d2:de:a9:b3:98:25:fb:02:
         5f:89:ff:7c:a8:4e:b0:26:f6:b4:d0:04:67:93:de:21:2c:e6:
         01:77:43:1b:de:86:fe:a7:d3:6d:93:b1:eb:85:da:f9:c1:7c:
         aa:2f:4c:d5:12:37:e5:08:19:e1:69:7d:36:8f:a7:1b:9b:74:
         92:2a:33:cb:c7:ce:3f:df:ec:b4:79:ca:fd:83:d1:a7:4b:15:
         9d:84:93:39:e4:f9:04:48:5b:79:73:81:fb:9e:d4:9f:7b:5e:
         f0:da:74:11:58:0a:ec:ec:7f:74:e1:66:d3:e4:f6:66:1f:96:
         2b:fd:ce:7e:b1:e6:0e:10:dc:de:28:02:f0:e6:3e:d1:9e:52:
         08:6b:4d:50:c6:73:ad:60:f8:71:dc:b6:cc:03:55:b9:4a:34:
         27:25:e1:32:21:0d:77:7a:95:b9:6a:ec:69:02:bf:ce:33:e7:
         d7:c1:8b:13:f9:6d:b7:1b:ec:37:67:b2:7b:9f:88:61:aa:29:
         db:22:1d:84:d3:59:a3:a7:19:6c:c1:f4:d1:28:75:1d:55:e0:
         84:80:4d:66:78:b0:68:33:41:92:80:02:40:34:58:27:b8:a4:
         34:a6:09:2f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUD+qTmlbaMhFRJYpAEgguzZH5VWMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTIzMDcxOTExNDIyOFoX
DTI0MDcxNzExNDcyOFowMzExMC8GA1UEAxMoMkYzMjhBQjI1M0NDOEZGQTlDMEVD
MUIxQUU5RTM2RDNEM0I1MjhGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANp5tKAQ6oo7N8bvdmYDAPwKw9cvueN9xtes5RAAiooGqT1zCvBHl975osKg
k089M9JHWfiFFugwQFOOAIhAg2MzQn5Jvhu5pMSTDw3jxHH8rURVMvOaH1htP/gM
18wLUnNRRTEXFty1CytXPrBC2qF5sDWIIMq6RdFXrBEh/kwNxsOIOFHQcBauLJcx
33uQRWWiShwfVir1exO12hfKpphNyrvwH6a5Or+VTOQfFL+vBOzbZbj5qm1c41mT
NTpI0tljbBK005ITu0h7luGz+ggAPUbGkRn4h67iBA6cbi7s3RJD2xbuDGaIj29b
JfI40uLg/VClmevxLjENpJPTgYUCAwEAAaOCAjwwggI4MB0GA1UdDgQWBBQvMoqy
U8yP+pwOwbGunjbT07Uo/zAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzIzMDM4MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzQzODMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfQVDANBgkqhkiG9w0BAQsFAAOCAQEAGTXb
tNRGTFxEZ4XsFEqZp//Vf/cweRjHOWuEG9LeqbOYJfsCX4n/fKhOsCb2tNAEZ5Pe
ISzmAXdDG96G/qfTbZOx64Xa+cF8qi9M1RI35QgZ4Wl9No+nG5t0kiozy8fOP9/s
tHnK/YPRp0sVnYSTOeT5BEhbeXOB+57Un3te8Np0EVgK7Ox/dOFm0+T2Zh+WK/3O
frHmDhDc3igC8OY+0Z5SCGtNUMZzrWD4cdy2zANVuUo0JyXhMiENd3qVuWrsaQK/
zjPn18GLE/lttxvsN2eye5+IYaop2yIdhNNZo6cZbMH00Sh1HVXghIBNZniwaDNB
koACQDRYJ7ikNKYJLw==
-----END CERTIFICATE-----
Generated at Tue May 7 22:23:50 2024 by rpki-client on console-fra.rpki-client.org