Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
File:                     3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          VayEcM2ZIzNaJt0L7h0Ogu1a/1DA9bJr61hv5Xj1wCs=
Subject key identifier:   4C:80:92:4F:51:2A:E3:DD:CD:48:CC:6D:00:7D:14:18:19:BE:01:46
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       2262F84802CCC8B58DA61FAF1A8AB102B51EDAB6
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     61138
IP address blocks:        103.208.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 07:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:62:f8:48:02:cc:c8:b5:8d:a6:1f:af:1a:8a:b1:02:b5:1e:da:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=4C80924F512AE3DDCD48CC6D007D141819BE0146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:12:1f:50:1d:1f:83:e3:38:f9:c1:f1:92:
                    3b:ea:4d:85:43:6d:f4:d4:63:47:eb:e0:fa:16:48:
                    30:79:aa:77:d7:eb:ae:e1:cc:51:76:cd:38:d9:01:
                    2b:8b:7c:a6:74:b9:78:07:80:02:84:c1:22:11:70:
                    b6:a5:30:67:f5:24:ba:2a:0d:db:eb:e8:1d:26:b1:
                    13:e6:19:23:56:77:18:88:b9:e9:f0:c3:47:0d:b2:
                    75:f3:9c:67:aa:96:45:8a:01:f6:df:90:91:cc:41:
                    20:2a:a8:20:47:f8:3a:6c:c0:7d:4e:5e:d4:0c:2d:
                    a4:a5:8b:38:47:6c:37:cc:51:60:a3:f7:dd:df:08:
                    8e:93:5f:3f:95:36:a4:64:ca:42:12:63:32:cc:8b:
                    12:da:c6:73:02:7d:72:79:33:ee:9c:2e:e7:3f:80:
                    fe:bc:de:0a:d1:28:cd:9f:c9:1d:b5:2c:dd:20:f4:
                    ba:bb:ab:bd:0c:f6:54:70:10:c6:3c:37:39:1b:59:
                    bd:5f:34:20:ac:c3:82:c0:b4:ec:ca:66:85:77:65:
                    2a:d0:ba:28:98:66:63:41:1d:b4:30:b2:5c:0d:54:
                    0c:d8:ff:90:3c:54:1f:37:d1:04:3b:72:1a:90:e9:
                    ff:cd:a0:60:90:ae:20:86:a9:a3:be:83:b0:60:22:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:80:92:4F:51:2A:E3:DD:CD:48:CC:6D:00:7D:14:18:19:BE:01:46
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:7a:c0:f8:aa:b3:80:41:2a:04:4a:19:ba:f4:35:af:86:1d:
         5f:e9:75:6f:da:0a:fe:95:ae:fe:5d:f5:9a:16:89:51:17:2b:
         a2:1a:09:24:91:b7:97:73:75:04:96:e9:f4:0f:1e:22:68:d1:
         84:4c:03:75:74:36:35:6d:8a:b3:39:88:9d:6b:13:7c:df:57:
         48:66:76:54:2e:0c:31:e3:13:6b:71:00:3d:31:97:47:be:f2:
         1e:84:f6:de:8d:4c:f4:84:25:08:f4:58:11:df:d6:5c:15:6b:
         3b:4e:92:d8:05:36:a4:2d:37:ed:b4:1b:bd:9e:92:59:7c:6c:
         29:d7:b3:2b:12:a7:27:ea:a2:44:28:be:05:2f:c8:90:ea:c5:
         3e:4a:52:71:bf:65:6a:dd:7d:16:00:73:e9:38:de:f0:4a:f9:
         d6:63:04:33:62:43:40:de:26:a3:25:35:a2:a6:75:2a:00:46:
         55:ea:dd:48:6d:94:1e:cd:82:52:dc:ea:e2:f1:dd:ae:a0:c0:
         fc:83:47:2d:d2:a4:6d:80:9a:4c:62:e3:d1:3a:6e:35:77:d0:
         32:c9:7e:14:89:9c:53:f8:e3:55:c8:b9:c0:19:3a:0c:75:8b:
         81:16:6f:ba:04:e3:28:c8:45:d4:c1:6e:17:27:d4:cd:08:29:
         13:34:38:cf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUImL4SALMyLWNph+vGoqxArUe2rYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTI0MTEwNTAzMzUxMVoX
DTI1MTEwNDAzNDAxMVowMzExMC8GA1UEAxMoNEM4MDkyNEY1MTJBRTNERENENDhD
QzZEMDA3RDE0MTgxOUJFMDE0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANC9Eh9QHR+D4zj5wfGSO+pNhUNt9NRjR+vg+hZIMHmqd9frruHMUXbNONkB
K4t8pnS5eAeAAoTBIhFwtqUwZ/UkuioN2+voHSaxE+YZI1Z3GIi56fDDRw2ydfOc
Z6qWRYoB9t+QkcxBICqoIEf4OmzAfU5e1AwtpKWLOEdsN8xRYKP33d8IjpNfP5U2
pGTKQhJjMsyLEtrGcwJ9cnkz7pwu5z+A/rzeCtEozZ/JHbUs3SD0ururvQz2VHAQ
xjw3ORtZvV80IKzDgsC07MpmhXdlKtC6KJhmY0EdtDCyXA1UDNj/kDxUHzfRBDty
GpDp/82gYJCuIIapo76DsGAiCv8CAwEAAaOCAjwwggI4MB0GA1UdDgQWBBRMgJJP
USrj3c1IzG0AfRQYGb4BRjAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzIzMDM4MmUzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzYzMTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfQVjANBgkqhkiG9w0BAQsFAAOCAQEAqnrA
+KqzgEEqBEoZuvQ1r4YdX+l1b9oK/pWu/l31mhaJURcrohoJJJG3l3N1BJbp9A8e
ImjRhEwDdXQ2NW2KszmInWsTfN9XSGZ2VC4MMeMTa3EAPTGXR77yHoT23o1M9IQl
CPRYEd/WXBVrO06S2AU2pC037bQbvZ6SWXxsKdezKxKnJ+qiRCi+BS/IkOrFPkpS
cb9lat19FgBz6Tje8Er51mMEM2JDQN4moyU1oqZ1KgBGVerdSG2UHs2CUtzq4vHd
rqDA/INHLdKkbYCaTGLj0TpuNXfQMsl+FImcU/jjVci5wBk6DHWLgRZvugTjKMhF
1MFuFyfUzQgpEzQ4zw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:37 2024 by rpki-client on console-fra.rpki-client.org