Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
File:                     3130332e36382e3130382e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          0HIvLpr3wPQYmWvvxmNljBSmMiGbLSB3IMw560CtJVg=
Subject key identifier:   39:49:3F:E5:BD:87:36:37:88:48:B0:51:31:13:1A:C2:0B:8E:F1:FF
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       4518D33922C5F362AB5B842F19A8C349E501D614
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     61138
IP address blocks:        103.68.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 10:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:18:d3:39:22:c5:f3:62:ab:5b:84:2f:19:a8:c3:49:e5:01:d6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=39493FE5BD8736378848B05131131AC20B8EF1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:48:b7:c9:a0:73:f1:08:b7:df:2d:80:a7:
                    e0:34:e3:cb:3e:1e:0e:2e:5f:50:bd:26:bd:36:6f:
                    95:56:82:21:4d:a9:1c:e9:b8:7d:81:98:ea:5c:44:
                    69:fe:a9:64:40:53:8c:67:5a:c3:3f:b2:90:ac:14:
                    50:52:5e:6f:e0:d8:2f:09:36:d5:91:0e:ff:61:bd:
                    f3:a8:79:06:e4:d2:9c:6b:76:4c:b2:26:92:6a:22:
                    5e:5d:41:80:59:ff:a8:1f:01:5e:e8:d0:df:24:50:
                    30:d2:a4:59:e1:ec:b3:dc:0d:d4:40:c1:42:d0:a6:
                    9d:fe:af:44:00:76:75:b4:98:1f:b7:ce:d3:a2:44:
                    8a:67:63:cb:36:1d:e8:7f:f2:1d:62:7b:e8:f5:c0:
                    eb:bc:07:67:99:47:43:b9:3f:4d:15:b3:45:18:97:
                    c5:64:62:d1:b8:94:e6:97:62:00:ee:0f:5b:26:eb:
                    59:6d:59:c5:d2:88:af:ae:1c:25:82:22:5b:2e:3e:
                    42:38:55:c7:c7:22:8f:00:5f:a3:c9:81:58:b4:7a:
                    ad:ee:09:3e:db:79:7d:85:eb:75:24:52:6b:05:c4:
                    06:70:da:27:70:10:ab:27:d6:6c:83:9b:6b:0e:66:
                    1a:b0:c7:bb:28:aa:23:fa:f5:26:9f:2b:a0:91:58:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:3F:E5:BD:87:36:37:88:48:B0:51:31:13:1A:C2:0B:8E:F1:FF
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:10:3a:72:bf:77:78:6e:1e:dd:d1:5f:0b:c7:8d:e9:c3:81:
         d9:50:9a:48:ba:57:d4:91:cf:e0:a6:76:c1:90:72:9e:ae:71:
         35:32:f1:d3:32:30:6f:ab:45:ed:83:67:20:ce:fc:b6:0c:fc:
         12:28:a9:cd:72:f9:c4:02:8d:08:22:04:f4:b4:b1:a3:d7:03:
         e3:68:78:49:cb:24:90:9a:ee:18:02:80:51:bc:70:d6:0c:a1:
         5d:05:5a:06:74:98:4c:de:a6:84:a7:94:f1:59:85:a9:81:89:
         fb:62:da:b1:14:08:03:df:43:c6:c5:82:f7:24:2b:6d:ab:f2:
         8d:82:b4:27:fb:de:12:82:77:dd:8c:25:dd:46:f6:61:b5:1e:
         c6:92:77:50:f0:3b:86:69:e6:d2:21:43:90:46:35:c9:25:76:
         a8:7a:c6:97:b7:d6:5b:94:5a:f0:7f:03:0b:15:c0:f6:09:e8:
         9f:50:a0:e8:1e:30:6b:e8:0b:93:f1:22:5a:51:d3:f1:43:54:
         b7:13:d1:c6:94:bd:b6:de:85:84:de:63:18:3d:d6:a8:88:c8:
         db:e6:ec:f0:c1:2f:ff:61:34:8d:c0:4c:8a:d3:c6:69:18:c3:
         a7:c2:a9:65:e7:50:40:65:ff:41:fb:17:af:5d:0b:6a:94:53:
         00:50:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:43:41 2024 by rpki-client on console-ams.rpki-client.org