Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
File:                     3130332e36382e3130382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          d0xznYTe1Mc16mNQbI30L3lRW3QGyCPyoeLu+JhOPc8=
Subject key identifier:   22:A6:0C:FE:7C:17:BB:79:33:CF:8E:ED:66:B4:7E:3F:CD:60:22:55
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       2743335630CF872236241219F74F7437B4980B95
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 05 Dec 2023 02:44:21 +0000
ROA not before:           Tue 05 Dec 2023 02:39:21 +0000
ROA not after:            Tue 03 Dec 2024 02:44:21 +0000
asID:                     61138
IP address blocks:        103.68.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 17:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:43:33:56:30:cf:87:22:36:24:12:19:f7:4f:74:37:b4:98:0b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Dec  5 02:39:21 2023 GMT
            Not After : Dec  3 02:44:21 2024 GMT
        Subject: CN=22A60CFE7C17BB7933CF8EED66B47E3FCD602255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:dc:4a:03:3c:5d:95:4e:06:3b:00:5b:49:
                    e6:60:57:8c:2c:ce:1f:c7:fd:67:27:c8:71:a9:48:
                    bc:d0:a1:fa:d6:52:43:f3:b7:68:ed:c1:26:d3:9a:
                    54:8c:cf:02:47:2e:dd:59:ae:a0:44:3d:63:ee:cd:
                    bf:96:13:80:30:24:c6:fe:7f:3e:db:fc:27:03:f4:
                    6a:bf:2b:82:c6:a9:9f:24:ec:87:b4:4c:1f:c5:f6:
                    0c:7d:5c:32:85:c3:e1:22:17:8b:6a:43:b4:46:1a:
                    36:10:66:73:41:97:47:a4:f8:b5:4a:b7:3f:fc:6f:
                    36:dd:66:a6:78:c1:f2:ac:17:d1:33:8a:60:90:ad:
                    7d:26:8d:d1:e8:13:1f:b1:4a:81:5c:1f:60:ec:e6:
                    46:39:85:69:d4:59:24:76:9d:e3:1d:b2:f4:b9:59:
                    b1:b3:b2:55:9e:26:2a:05:5d:43:1c:ec:68:97:66:
                    da:7b:ab:8a:9e:bf:cb:6c:78:2a:c1:e5:09:4f:3e:
                    f1:9b:b4:7e:16:33:e2:06:91:87:67:3b:5c:cb:96:
                    c5:5b:24:6e:89:b3:41:3d:9e:76:7b:fb:e9:1f:f7:
                    a9:ca:1f:7d:ea:f7:b9:fb:5e:db:08:1b:1f:c7:d0:
                    3b:44:53:c6:5f:8e:c0:e4:3f:b9:41:a4:b7:17:cc:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A6:0C:FE:7C:17:BB:79:33:CF:8E:ED:66:B4:7E:3F:CD:60:22:55
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:1f:b1:20:b2:6e:27:fe:60:e2:c0:76:aa:78:15:5e:ec:aa:
         ff:f2:34:1f:7d:b5:7e:60:8b:69:04:d6:ed:4f:ec:d7:e8:f3:
         9e:c0:32:81:ef:51:e1:6f:32:5c:5f:b4:2b:2a:88:21:15:5a:
         ed:9b:2f:95:68:e7:c9:eb:8d:bf:e1:2c:4a:d7:ee:31:a9:a9:
         b6:f5:35:c7:29:49:08:8e:9c:fb:04:33:45:3d:40:2b:55:10:
         5f:af:49:09:53:a6:d5:f0:ed:b4:14:3f:1d:2a:a2:88:3b:50:
         9f:ab:fd:9c:a0:7d:a1:0a:d1:2a:48:aa:04:6c:89:7a:b0:e5:
         96:39:72:0a:ee:5d:62:99:0a:d9:24:c6:15:39:44:67:9e:69:
         1a:f6:d2:32:9c:f2:cb:64:e1:d6:23:10:e2:f8:d4:e6:ec:fa:
         25:47:e5:f5:f0:31:60:43:8e:01:93:74:43:d8:ae:cf:fd:0a:
         d5:ce:a8:a6:b2:68:25:f2:b8:3b:ec:d1:cc:8b:18:a3:fe:13:
         ea:5e:b6:b1:50:6d:6e:1a:90:e4:b5:97:10:9e:c8:db:30:80:
         d5:df:70:c5:5c:13:cb:02:3f:c9:9e:e8:56:a3:86:4d:2e:ad:
         fe:bc:b1:e4:35:b9:92:f2:f6:80:82:46:13:0a:aa:c6:2c:88:
         f2:09:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 18:14:27 2024 by rpki-client on console-fra.rpki-client.org