Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
File:                     3130332e36382e3130382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          F6/A8X0bwdTuQhkBPj8Rg2BKVJB7vnu46apG2DA0gc0=
Subject key identifier:   8A:20:4B:23:CF:D8:E3:FB:BF:D8:40:F3:A4:C7:8B:C7:FA:88:58:67
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       010601B535BF872582EF5E3B90167FDD823ACFE7
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     61138
IP address blocks:        103.68.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 07:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:06:01:b5:35:bf:87:25:82:ef:5e:3b:90:16:7f:dd:82:3a:cf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=8A204B23CFD8E3FBBFD840F3A4C78BC7FA885867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:9f:c6:21:c8:9a:c5:65:7f:48:24:36:f8:
                    bc:9b:d8:90:b0:d5:b1:34:68:ea:21:8e:96:89:f3:
                    71:0f:a0:91:57:3d:33:16:ae:9b:7c:38:1d:ed:99:
                    df:83:af:2a:65:c2:60:54:23:be:66:ae:e9:78:0c:
                    00:27:1c:d9:9a:20:31:80:70:f6:6e:d4:47:91:d6:
                    dc:2b:a1:fa:9a:84:b9:83:65:f4:ee:ce:c5:d5:68:
                    a5:39:00:2a:c2:01:55:e0:6c:39:dc:d9:4f:d9:91:
                    53:aa:13:86:61:11:c8:9c:ec:2b:67:e6:b2:ce:f1:
                    ef:e4:b7:93:84:30:42:46:f6:1f:41:ca:0d:55:0f:
                    f5:86:88:d0:86:5c:63:5f:91:67:78:f2:fb:ae:d2:
                    81:d6:d5:f8:cd:6d:84:02:1a:89:00:f2:ea:2f:d6:
                    16:ed:50:c2:0b:9c:40:17:69:e5:30:d8:62:8d:2f:
                    2c:b1:07:17:bb:f1:0d:d8:76:b0:ec:f4:86:fc:b3:
                    f2:9e:f9:e7:62:cd:36:86:9d:0e:68:e9:94:0c:64:
                    3f:49:c2:77:b3:ee:39:90:26:81:73:a7:56:4d:c9:
                    bf:31:11:e9:16:a5:bf:82:37:b2:e4:32:7d:69:80:
                    50:37:8c:fc:c2:cb:cc:30:09:29:24:50:db:d9:a6:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:20:4B:23:CF:D8:E3:FB:BF:D8:40:F3:A4:C7:8B:C7:FA:88:58:67
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:4e:0a:04:e2:bb:19:e4:e3:36:68:4f:d2:c4:2a:3c:4a:
         bc:3f:78:2c:44:af:8e:fa:da:c2:7a:4a:7d:88:f9:fc:6a:b9:
         a3:c5:bf:0e:c0:7e:1a:f9:0f:6f:e4:67:9b:51:93:c1:87:fd:
         99:57:d1:95:73:a0:b5:a6:77:11:c3:1b:9e:53:4c:5e:d5:0f:
         a4:ca:7a:c1:2a:9d:7f:1e:51:cf:d0:32:02:86:d9:f7:00:29:
         98:85:3b:fc:aa:c3:b8:8b:f1:77:8e:03:73:b6:5f:31:d0:d6:
         f4:f9:22:e1:b4:e3:7a:ab:f8:e7:89:21:fc:4d:97:2b:b6:5f:
         15:fe:bf:c7:7d:f8:b5:e8:9a:1b:b9:d6:66:50:da:67:37:3b:
         2c:c6:44:a7:77:58:4e:4d:19:50:76:d1:1a:db:25:01:2c:a6:
         5a:54:2e:80:16:f9:c5:84:8e:46:58:f1:b1:a8:07:64:b0:a7:
         98:37:8e:86:02:9c:e9:ea:83:50:73:2c:59:da:12:c8:65:6c:
         f1:d4:fd:24:11:4b:2d:e0:2f:40:d8:96:83:b0:a0:1d:02:b7:
         5a:95:3c:a7:67:8a:70:25:7a:f5:b7:4b:84:ad:2e:3b:4e:87:
         6f:34:79:8a:cb:aa:35:d1:3f:57:20:59:4f:e9:9b:dc:b3:13:
         ad:ac:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:37 2024 by rpki-client on console-fra.rpki-client.org