Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa
File:                     3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier:          tTXwkNxmoWQtvUnwN/M2xM4PdzZ4vwwupy5Di9xiHs8=
Subject key identifier:   11:81:9C:03:33:5C:5B:5D:8B:5E:00:0E:51:F0:E0:62:C8:12:A1:57
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       751A8C481042BF3CBF816556CD4552479F83E2B0
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa
Signing time:             Thu 18 Jan 2024 19:44:24 +0000
ROA not before:           Thu 18 Jan 2024 19:39:24 +0000
ROA not after:            Thu 16 Jan 2025 19:44:24 +0000
asID:                     136557
IP address blocks:        103.68.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 05:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1a:8c:48:10:42:bf:3c:bf:81:65:56:cd:45:52:47:9f:83:e2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jan 18 19:39:24 2024 GMT
            Not After : Jan 16 19:44:24 2025 GMT
        Subject: CN=11819C03335C5B5D8B5E000E51F0E062C812A157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:cc:c8:4b:03:ff:ce:8d:57:06:23:ea:94:
                    9f:09:5a:c9:83:e2:9a:7c:67:66:91:08:be:ea:ad:
                    c0:51:a5:d3:8f:5f:ef:f0:86:2e:7c:06:8f:20:af:
                    fa:e5:34:ee:e2:93:18:92:54:8c:a7:51:b2:b0:89:
                    9f:13:53:35:fe:6a:da:a3:43:50:a2:b1:87:64:f0:
                    28:05:62:5f:68:3d:75:11:ba:b5:12:0d:a3:10:2f:
                    ea:66:86:c4:9b:df:f0:50:01:c3:99:b1:de:06:96:
                    44:8e:5e:8c:cb:f8:94:5d:d7:49:1e:e2:b5:00:ed:
                    89:8e:af:39:4c:47:61:9b:06:a5:4b:16:1a:e5:95:
                    ea:d7:03:cf:b0:f6:ca:05:ba:11:e1:a2:e0:8a:84:
                    e8:51:4a:e5:c7:28:8c:3d:6b:5d:02:53:92:09:44:
                    07:5e:a0:8e:2f:1c:b4:ab:9a:63:41:6c:4d:8c:83:
                    42:ff:22:b8:33:b9:d9:82:f5:4b:bf:a2:7c:f6:62:
                    ab:5f:df:95:56:bc:2b:52:b7:ed:e7:f1:c1:c1:a7:
                    4d:76:77:7a:3f:1a:1a:c5:1f:db:ac:8e:af:9f:3b:
                    e2:00:86:5e:ce:44:a3:a5:da:71:3b:ba:b1:03:9f:
                    0d:7c:76:03:44:04:ea:9e:60:5b:11:37:43:86:88:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:9C:03:33:5C:5B:5D:8B:5E:00:0E:51:F0:E0:62:C8:12:A1:57
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:45:9c:f9:47:05:39:62:54:b1:b6:0a:f1:7d:3a:02:1f:
         10:13:d1:fd:85:ee:ab:5f:b5:bb:df:56:72:30:3c:38:19:2f:
         c4:3f:bc:f8:90:81:91:d1:06:59:77:3f:4e:72:b6:ab:3f:77:
         60:09:ad:4c:5e:a7:a8:2d:01:0f:6a:ee:82:0c:99:2f:e0:d0:
         df:56:d1:59:b7:ae:bf:57:e5:dd:12:1d:f1:81:01:3a:1b:3c:
         c2:36:bd:b0:e0:77:86:ca:4f:fc:29:80:98:e8:76:ed:07:0b:
         b9:4d:81:54:f8:c8:b8:d6:c3:f9:ce:0c:f4:c5:45:12:68:2a:
         7e:3d:0d:9a:4f:53:72:fc:3f:c5:82:15:74:78:78:cb:ab:a5:
         25:ac:5d:5f:7c:43:29:bf:22:ad:00:c1:ea:10:43:c5:ee:79:
         8e:c2:0c:3e:fe:5c:78:48:0e:fe:d6:35:39:28:85:c4:b7:7b:
         66:49:42:2e:25:1e:f9:89:bf:0d:b1:cd:e1:9a:3f:6d:b4:f9:
         ff:d2:3c:5a:1b:bc:fa:80:12:63:93:f6:ef:9f:75:15:e8:6e:
         d5:ba:57:ef:93:50:c4:4f:49:f9:1f:99:41:a7:55:6c:96:f1:
         21:7a:23:a3:e4:2e:b5:87:9d:68:50:98:99:55:e3:52:ee:a7:
         74:88:94:55
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUdRqMSBBCvzy/gWVWzUVSR5+D4rAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTI0MDExODE5MzkyNFoX
DTI1MDExNjE5NDQyNFowMzExMC8GA1UEAxMoMTE4MTlDMDMzMzVDNUI1RDhCNUUw
MDBFNTFGMEUwNjJDODEyQTE1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALuOzMhLA//OjVcGI+qUnwlayYPimnxnZpEIvuqtwFGl049f7/CGLnwGjyCv
+uU07uKTGJJUjKdRsrCJnxNTNf5q2qNDUKKxh2TwKAViX2g9dRG6tRINoxAv6maG
xJvf8FABw5mx3gaWRI5ejMv4lF3XSR7itQDtiY6vOUxHYZsGpUsWGuWV6tcDz7D2
ygW6EeGi4IqE6FFK5ccojD1rXQJTkglEB16gji8ctKuaY0FsTYyDQv8iuDO52YL1
S7+ifPZiq1/flVa8K1K37efxwcGnTXZ3ej8aGsUf26yOr5874gCGXs5Eo6XacTu6
sQOfDXx2A0QE6p5gWxE3Q4aIa90CAwEAAaOCAj4wggI6MB0GA1UdDgQWBBQRgZwD
M1xbXYteAA5R8OBiyBKhVzAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzYzODJlMzEzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzMzM2MzUzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0RtMA0GCSqGSIb3DQEBCwUAA4IBAQBj
XkWc+UcFOWJUsbYK8X06Ah8QE9H9he6rX7W731ZyMDw4GS/EP7z4kIGR0QZZdz9O
crarP3dgCa1MXqeoLQEPau6CDJkv4NDfVtFZt66/V+XdEh3xgQE6GzzCNr2w4HeG
yk/8KYCY6HbtBwu5TYFU+Mi41sP5zgz0xUUSaCp+PQ2aT1Ny/D/FghV0eHjLq6Ul
rF1ffEMpvyKtAMHqEEPF7nmOwgw+/lx4SA7+1jU5KIXEt3tmSUIuJR75ib8Nsc3h
mj9ttPn/0jxaG7z6gBJjk/bvn3UV6G7Vulfvk1DET0n5H5lBp1VslvEheiOj5C61
h51oUJiZVeNS7qd0iJRV
-----END CERTIFICATE-----
Generated at Tue May 7 03:10:45 2024 by rpki-client on console-fra.rpki-client.org