Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
File:                     3130332e36382e3130382e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          y71Jqn/IsEeUZRC1HkfWAUfedxJ4Io2cxc3Cn/07aRQ=
Subject key identifier:   A6:79:08:EF:E5:7C:41:A2:2C:FC:DB:E7:D2:EC:6D:17:D0:46:C8:82
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       3B1C6AAB7EEFFFC101BFFCC593CE80C3771C0CD7
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     61138
IP address blocks:        103.68.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 07:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1c:6a:ab:7e:ef:ff:c1:01:bf:fc:c5:93:ce:80:c3:77:1c:0c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=A67908EFE57C41A22CFCDBE7D2EC6D17D046C882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:fd:5d:1c:08:12:ca:1e:36:df:5a:65:0a:
                    e1:7d:a7:e2:aa:8a:d2:0d:0c:b6:11:18:96:ae:b0:
                    7d:43:56:e3:6e:61:49:98:e6:e6:1c:07:c4:01:29:
                    d9:5b:79:fe:fc:f6:3b:b9:19:1c:bb:39:8a:33:66:
                    80:53:1a:77:a5:be:73:fe:2c:43:50:55:3a:f2:be:
                    13:2c:87:1b:c3:e6:63:ad:89:57:8e:6d:d5:25:96:
                    c7:c0:f1:1d:44:cf:65:04:e2:f2:1a:01:07:3f:a4:
                    0f:64:f1:72:f3:a0:71:f8:00:0a:23:bb:d8:2f:e6:
                    8d:38:fd:58:bd:30:11:c4:4a:c0:b8:24:0c:4a:47:
                    48:9a:75:17:36:3d:bb:b8:4f:9b:bb:a0:0e:cf:eb:
                    81:26:d4:bf:0d:5f:ac:94:d6:24:da:fd:90:f1:5c:
                    51:61:f0:5f:cc:8e:c9:6b:e5:2c:ee:8b:5a:b6:2b:
                    0b:65:9b:d2:15:2e:92:87:38:66:25:9b:d4:7b:b5:
                    49:91:43:f3:ef:cd:36:ec:a0:48:30:46:99:2b:93:
                    6a:27:61:f8:6b:8e:68:76:ce:af:88:80:22:a9:e2:
                    33:75:7d:5d:99:02:e8:5c:64:73:0d:ff:08:f8:56:
                    83:2e:4e:a9:ac:9c:6b:a3:d9:2b:f0:3f:da:9a:db:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:79:08:EF:E5:7C:41:A2:2C:FC:DB:E7:D2:EC:6D:17:D0:46:C8:82
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:94:84:b6:5a:15:94:79:9b:b6:93:74:c2:4a:bc:f9:c8:03:
         45:41:97:e1:a1:b1:e3:25:e3:72:1f:96:c4:07:71:10:74:05:
         d6:5b:81:f9:f6:db:e2:e2:8e:e1:58:b9:11:d0:ee:ae:db:01:
         a5:b8:30:ac:e9:73:b4:77:28:bc:35:e3:06:cd:52:0f:3a:b6:
         80:66:94:59:35:30:52:03:0c:d3:df:96:95:fb:e3:24:67:a4:
         af:83:ab:40:19:ce:50:b4:f9:dd:7b:12:b6:d2:6d:54:e3:65:
         6a:4a:9c:a8:7c:b0:dc:59:dc:19:d2:ed:ad:8a:14:99:cb:33:
         7d:c9:65:e7:b8:97:c7:43:58:8b:87:dd:8a:9f:00:20:ab:98:
         20:0e:be:94:9e:63:5b:e5:96:58:30:5b:09:10:ff:04:0a:7e:
         34:c8:0d:18:5a:e0:01:ea:75:2e:e7:e8:e3:d9:ba:49:5c:68:
         57:65:1c:91:4e:db:a1:9c:dc:2c:dc:89:f1:3e:47:23:2c:54:
         b1:19:56:4e:d0:9d:3b:e1:dd:bf:7e:b4:af:e5:16:d9:94:e0:
         c0:92:ff:c4:23:e9:7c:de:bc:82:62:66:74:e7:0e:87:be:9a:
         07:4c:e1:9a:46:7a:91:ae:ce:88:50:e8:d8:9f:14:9d:79:e6:
         52:e7:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org