Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
File:                     3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          DZm7eY1dDQqpgM+Bj24LbZlETuRRB0Yhf62KfdcOMC4=
Subject key identifier:   0A:70:C6:36:8D:C9:F4:ED:FE:F2:01:3D:33:B1:19:0C:F1:86:BD:46
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       6C5C4BEEEBB7EDCE86EEF960CED096500065BDA4
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     61138
IP address blocks:        103.208.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 07:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5c:4b:ee:eb:b7:ed:ce:86:ee:f9:60:ce:d0:96:50:00:65:bd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=0A70C6368DC9F4EDFEF2013D33B1190CF186BD46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:0c:b5:e6:5d:d3:6d:10:2a:e0:1e:56:03:
                    58:1f:43:79:d8:51:6a:f8:85:40:f8:1d:da:d5:6b:
                    60:c4:57:a1:46:8c:b2:1f:44:46:56:f4:e6:0a:4f:
                    36:a4:1f:a2:ca:e3:c5:36:f6:45:3c:60:2b:15:fd:
                    00:43:d6:7d:6b:ce:f0:c6:b8:92:0e:7b:b0:14:7b:
                    bf:d6:d3:a2:6e:8d:a1:f9:67:ad:51:c4:e3:7e:ca:
                    1a:b6:24:17:c3:64:a9:20:ac:69:17:13:6a:7b:e9:
                    d7:40:cc:a0:0a:de:49:47:cb:86:58:53:c2:e0:a1:
                    bb:ae:4e:88:51:47:4d:1c:55:ca:0a:16:f1:21:a3:
                    98:25:0c:a0:34:de:40:41:a6:64:ae:02:38:d2:cb:
                    db:7b:c1:a3:3a:b9:ec:b3:fd:f3:e5:bf:7b:a3:6a:
                    6a:c8:9d:e6:98:4f:c0:d0:5e:b3:9e:b7:71:0c:cf:
                    52:7a:7e:60:ac:ca:c8:40:4d:48:16:40:b9:7c:c5:
                    ed:48:39:0e:74:e1:c6:93:5f:da:c2:20:3b:ce:db:
                    cf:b5:bf:46:c0:a9:c9:55:13:71:9b:72:e7:22:15:
                    ac:cf:eb:2b:f3:84:4b:30:d1:8c:72:da:2d:19:4a:
                    f2:28:d9:4a:34:0c:cc:bc:a6:ec:bd:08:66:fb:66:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:70:C6:36:8D:C9:F4:ED:FE:F2:01:3D:33:B1:19:0C:F1:86:BD:46
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:3a:1d:f1:36:b3:0c:4a:ff:20:75:3f:70:49:26:12:32:
         ed:fb:68:6d:6b:98:50:74:d2:53:0d:1c:15:f0:68:1c:4f:aa:
         36:43:73:43:51:41:d6:c8:7d:4d:e1:e0:13:5a:fa:6a:70:59:
         54:66:6a:04:63:4f:f2:bf:a4:46:d9:38:0b:c7:0c:42:b8:06:
         0f:3a:43:4c:fc:db:d6:38:e9:6f:87:1a:ea:28:16:05:98:f6:
         1c:e9:f7:f8:ca:51:8b:36:60:84:92:5a:85:9e:fb:06:c4:5a:
         1a:e1:b5:20:f6:0a:69:12:72:ab:04:2f:aa:c0:4a:4a:df:31:
         30:6a:bc:51:16:37:92:c3:8d:38:e1:dc:9c:cc:e2:27:7b:2a:
         34:91:d8:de:c5:17:31:6a:39:fa:3c:60:59:42:3b:19:d5:c9:
         90:87:7d:67:60:b5:f8:b1:cb:4c:ee:31:0e:ba:3f:5e:34:80:
         e4:66:ea:24:80:ea:d5:7e:f9:1e:c3:4a:13:22:c9:4b:26:8c:
         8d:29:08:35:bd:6e:f2:fc:b5:de:7d:b3:79:48:e8:ae:60:1b:
         48:80:88:f4:b5:3d:f1:40:3d:ca:d0:27:89:14:9c:2b:10:fd:
         10:c1:d6:4b:df:8a:95:d6:92:3d:24:80:fc:5d:ad:04:fe:c4:
         73:98:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:37 2024 by rpki-client on console-fra.rpki-client.org