Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
File:                     3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          CmATqLv/uzsVHW5Fu8oV7TQhu5HJ6xVzpnl3pI7n640=
Subject key identifier:   70:E9:B6:40:CE:AD:4D:95:95:77:F3:FF:48:F2:8C:2F:AA:B6:5C:AD
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       4E591BFF7D09F71FFB90ED0501C3115BDA01546C
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     61138
IP address blocks:        103.208.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 13:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:59:1b:ff:7d:09:f7:1f:fb:90:ed:05:01:c3:11:5b:da:01:54:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=70E9B640CEAD4D959577F3FF48F28C2FAAB65CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:19:d7:b3:40:cc:cc:60:a7:68:29:d2:5f:
                    5d:73:5e:15:65:28:b9:1d:24:88:89:b2:b6:46:bd:
                    f0:77:d7:02:ee:fe:a6:6e:66:d2:f5:03:41:0e:bd:
                    ab:17:0d:65:e1:50:4d:cb:12:a1:28:ea:3b:cf:b9:
                    38:63:06:d0:b2:d8:82:8e:bf:21:a0:d0:79:18:25:
                    da:a3:59:0e:52:36:57:68:53:8a:73:ab:ee:15:9d:
                    ec:6f:ec:9e:ba:14:0a:d5:fc:1e:c2:7e:59:a1:a5:
                    7a:f5:c7:bf:58:20:65:05:56:59:9c:75:d5:b0:cc:
                    1e:aa:48:4a:ef:a1:6f:5c:12:0a:4e:e9:fd:6d:68:
                    79:6e:42:a6:87:33:d8:e5:2e:7f:69:56:df:dd:4a:
                    7f:65:dc:e6:24:9a:6b:74:93:82:cb:e6:9f:10:35:
                    ce:3b:eb:4e:dc:ef:4b:81:4c:4a:67:07:d6:b0:98:
                    7a:fa:e7:07:80:36:c7:b5:dd:19:52:78:ed:ec:9e:
                    bf:eb:11:a4:cd:0d:07:a2:bb:b0:ba:9c:74:ed:74:
                    e9:6d:1c:85:db:75:2b:bd:24:b0:d7:1e:0e:da:41:
                    a1:06:d2:43:8a:23:6e:c8:73:bc:44:b5:85:89:f8:
                    e1:30:ba:6d:59:9f:55:89:7f:3e:e3:39:d3:2e:30:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:B6:40:CE:AD:4D:95:95:77:F3:FF:48:F2:8C:2F:AA:B6:5C:AD
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:56:38:c2:53:cb:1b:df:12:61:21:01:65:92:54:7d:8e:16:
         0f:a1:93:85:ca:8a:00:38:f1:66:33:16:a1:26:e5:f0:c5:c4:
         00:38:1e:82:e7:c1:67:b6:06:5d:41:99:30:c4:47:9c:8b:76:
         dc:ad:38:aa:63:19:9b:5f:f6:98:3b:37:43:93:90:2e:9f:d1:
         9f:9f:6a:30:d4:01:8a:f1:ae:ee:69:0b:b6:fd:5f:8c:bc:ea:
         4c:d3:ae:66:9e:a9:84:a8:b6:bb:8f:6e:20:7e:3a:c7:85:18:
         a8:49:77:ed:01:11:42:6f:93:40:2e:c0:1a:2a:24:e0:4f:67:
         12:8e:43:71:37:f6:65:b3:27:ac:0b:d8:07:98:c3:18:ca:0a:
         76:37:ed:a0:1a:0e:39:25:d7:ae:46:01:a1:a9:38:1a:12:0e:
         12:fe:52:bf:a0:1b:23:81:4b:b4:3d:7e:07:74:5d:d7:cc:3f:
         8c:0d:f3:db:a1:34:f5:6e:a3:3f:d0:b5:a6:cb:f2:c2:18:ed:
         9f:f8:12:5c:2c:15:3d:d1:9c:90:2c:c7:57:3e:65:c3:9d:05:
         e9:c0:fb:41:8a:c2:ce:11:3d:ea:e5:23:5a:de:1d:45:d0:fa:
         3d:2d:e1:35:8d:79:dd:03:b1:11:78:c2:62:f5:f4:1d:c8:13:
         2d:35:7d:92
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTlkb/30J9x/7kO0FAcMRW9oBVGwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTIzMTIwNTAyMzkyMFoX
DTI0MTIwMzAyNDQyMFowMzExMC8GA1UEAxMoNzBFOUI2NDBDRUFENEQ5NTk1NzdG
M0ZGNDhGMjhDMkZBQUI2NUNBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALEbGdezQMzMYKdoKdJfXXNeFWUouR0kiImytka98HfXAu7+pm5m0vUDQQ69
qxcNZeFQTcsSoSjqO8+5OGMG0LLYgo6/IaDQeRgl2qNZDlI2V2hTinOr7hWd7G/s
nroUCtX8HsJ+WaGlevXHv1ggZQVWWZx11bDMHqpISu+hb1wSCk7p/W1oeW5Cpocz
2OUuf2lW391Kf2Xc5iSaa3STgsvmnxA1zjvrTtzvS4FMSmcH1rCYevrnB4A2x7Xd
GVJ47eyev+sRpM0NB6K7sLqcdO106W0chdt1K70ksNceDtpBoQbSQ4ojbshzvES1
hYn44TC6bVmfVYl/PuM50y4wGd8CAwEAAaOCAjwwggI4MB0GA1UdDgQWBBRw6bZA
zq1NlZV38/9I8owvqrZcrTAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzIzMDM4MmUzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzYzMTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfQVjANBgkqhkiG9w0BAQsFAAOCAQEAIFY4
wlPLG98SYSEBZZJUfY4WD6GThcqKADjxZjMWoSbl8MXEADgegufBZ7YGXUGZMMRH
nIt23K04qmMZm1/2mDs3Q5OQLp/Rn59qMNQBivGu7mkLtv1fjLzqTNOuZp6phKi2
u49uIH46x4UYqEl37QERQm+TQC7AGiok4E9nEo5DcTf2ZbMnrAvYB5jDGMoKdjft
oBoOOSXXrkYBoak4GhIOEv5Sv6AbI4FLtD1+B3Rd18w/jA3z26E09W6jP9C1psvy
whjtn/gSXCwVPdGckCzHVz5lw50F6cD7QYrCzhE96uUjWt4dRdD6PS3hNY153QOx
EXjCYvX0HcgTLTV9kg==
-----END CERTIFICATE-----
Generated at Fri Apr 19 10:27:01 2024 by rpki-client on console-ams.rpki-client.org