Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e20313439303230.roa
File:                     3130332e36382e3130382e302f32342d3234203d3e20313439303230.roa (raw, json)
Hash identifier:          eYPR8Cu25/8q+r29OhCMMv5LR2VLperNDhxK9ETwqp4=
Subject key identifier:   DD:77:D5:37:71:8D:AC:85:8D:77:BF:53:9D:2E:F0:F0:39:83:BE:7A
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       08863FA314D111A11AE93DBACFAFF3F40E7D5FAC
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e20313439303230.roa
Signing time:             Mon 17 Jun 2024 09:55:42 +0000
ROA not before:           Mon 17 Jun 2024 09:50:42 +0000
ROA not after:            Mon 16 Jun 2025 09:55:42 +0000
asID:                     149020
IP address blocks:        103.68.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 20:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:86:3f:a3:14:d1:11:a1:1a:e9:3d:ba:cf:af:f3:f4:0e:7d:5f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jun 17 09:50:42 2024 GMT
            Not After : Jun 16 09:55:42 2025 GMT
        Subject: CN=DD77D537718DAC858D77BF539D2EF0F03983BE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:d2:5e:5a:21:5e:e8:e3:98:64:e1:99:31:
                    fb:da:98:f4:d3:21:71:59:ec:c6:eb:e7:2b:a4:af:
                    84:fe:1e:49:b8:fa:f4:9c:1e:4a:d1:5d:cd:b8:08:
                    6c:70:ae:6d:0d:d0:a0:cd:42:f8:65:f5:da:c5:6d:
                    06:33:b3:1a:f5:97:69:84:05:50:d3:c5:14:ad:c2:
                    d7:76:15:23:e3:76:25:54:f1:d0:5b:ab:e2:f2:ef:
                    38:69:8f:a0:4b:d1:28:7e:53:d2:cf:03:f0:b5:b7:
                    1c:bf:45:58:e9:c0:0c:46:5d:cd:0f:e5:a9:fd:76:
                    ae:27:f0:ff:34:f2:5c:e5:57:aa:7a:38:c1:e1:ae:
                    c8:97:54:12:39:9b:52:44:89:1f:41:49:b1:09:84:
                    71:2e:7e:48:a9:af:9f:0c:46:78:8e:11:af:7f:d0:
                    b0:a9:88:94:6b:78:50:08:25:dc:8c:da:c9:29:5b:
                    3f:3b:76:75:fa:6d:25:0e:2b:7e:12:74:5f:3e:19:
                    a2:28:6e:22:01:a1:78:db:50:08:41:47:69:79:e5:
                    fe:aa:58:8e:91:2f:bd:10:e4:77:19:09:11:3e:50:
                    5a:f5:7a:3b:fb:fe:a4:dd:91:28:56:94:2c:26:70:
                    ff:cd:a8:e3:51:df:7c:69:a9:75:bf:80:c2:69:34:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:D5:37:71:8D:AC:85:8D:77:BF:53:9D:2E:F0:F0:39:83:BE:7A
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e20313439303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:77:8d:c9:54:dd:dd:cb:77:d8:39:ff:00:53:3d:04:7e:64:
         30:fc:05:bc:fd:7a:27:6a:73:b5:02:e1:90:9d:8a:9a:39:f3:
         6c:40:6c:12:66:24:e7:b4:b0:7e:fb:19:c9:0c:05:f2:b7:84:
         0c:8c:8c:4f:d5:d8:3b:be:a3:c6:d0:a4:6f:82:e0:32:87:e3:
         f2:bb:39:28:d3:a4:49:02:01:67:9e:ee:36:d7:aa:17:63:71:
         08:9b:cb:cf:1c:09:a9:7a:d2:c2:9f:88:48:40:2a:b9:04:75:
         22:b2:4f:d9:92:fc:c0:26:73:50:3d:5d:6d:64:0f:7f:72:46:
         72:a6:34:53:c4:c3:eb:4d:53:14:39:ca:2d:9f:93:78:f3:66:
         38:2c:b0:6d:9d:52:25:9e:54:c6:13:24:bd:05:ac:cb:cd:9c:
         53:f9:2f:d8:79:0e:bd:b3:de:c2:07:dc:33:82:f0:9a:4d:75:
         07:b5:e7:fc:c4:64:85:f0:40:fe:4c:44:fa:30:e7:2f:00:29:
         21:43:4b:cb:04:9e:4d:b2:33:58:dc:ff:ce:bc:f1:d1:62:8d:
         52:4d:e5:f8:9b:fa:01:a7:5c:8f:39:34:e4:39:69:70:c9:3b:
         b6:cc:d8:ce:52:c6:2a:12:b1:32:76:20:12:49:65:1c:3f:13:
         65:d8:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:13 2024 by rpki-client on console-ams.rpki-client.org