Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa
File:                     3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier:          F3ECKlP6xdBEZ7JfKrzGg1lgPgw5MfNd8aqVG+epag8=
Subject key identifier:   87:2A:DE:55:5A:EF:6E:1D:0E:75:AE:59:A2:0C:6B:7E:2C:6E:17:FB
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       673FF93D67B6F6EEF7380FD9D144CC60EF86EC33
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa
Signing time:             Tue 05 Dec 2023 02:44:21 +0000
ROA not before:           Tue 05 Dec 2023 02:39:21 +0000
ROA not after:            Tue 03 Dec 2024 02:44:21 +0000
asID:                     133448
IP address blocks:        103.68.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3f:f9:3d:67:b6:f6:ee:f7:38:0f:d9:d1:44:cc:60:ef:86:ec:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Dec  5 02:39:21 2023 GMT
            Not After : Dec  3 02:44:21 2024 GMT
        Subject: CN=872ADE555AEF6E1D0E75AE59A20C6B7E2C6E17FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:30:19:f0:be:4a:88:53:da:63:84:c0:00:
                    24:57:fb:5b:c9:60:46:e8:7b:0f:66:04:36:1e:85:
                    24:74:04:cb:9e:c6:54:e7:8d:ce:d7:11:98:83:d4:
                    d7:d9:07:9f:79:1b:64:bf:4b:91:16:52:a4:1b:30:
                    b1:ea:4c:cf:bf:4d:f9:2d:09:ee:13:3c:74:67:10:
                    02:d4:f0:b1:61:0a:77:c3:32:bf:c9:12:04:c8:ce:
                    0d:4c:00:5b:b4:f2:d5:8c:85:36:a8:14:cd:3a:af:
                    34:ab:02:a8:f0:1e:14:2d:31:7c:22:d6:8f:78:a5:
                    50:dc:ac:b8:42:e3:88:2d:66:21:c1:aa:69:55:14:
                    10:23:a3:dd:4b:14:2f:4d:d2:77:e2:30:24:87:57:
                    ee:4d:3a:6a:49:82:a6:65:b7:86:6d:99:16:2f:3c:
                    5f:2d:7f:58:44:85:af:53:d6:32:ae:63:42:c7:c1:
                    06:a9:1a:f4:4e:76:84:d0:30:fd:23:19:ed:92:9e:
                    27:bd:e9:64:06:c1:3e:55:2d:ea:c0:d3:56:a2:25:
                    f6:b3:6f:58:d1:82:dd:db:b5:c5:41:20:99:b5:33:
                    4c:79:ab:ad:f2:9f:56:3e:b6:da:4c:17:79:66:ea:
                    64:3d:28:7b:4e:05:de:01:58:17:52:60:ac:a7:27:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2A:DE:55:5A:EF:6E:1D:0E:75:AE:59:A2:0C:6B:7E:2C:6E:17:FB
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:ea:9a:57:9d:07:2d:27:3f:54:23:8e:ef:20:fc:51:8d:0e:
         2c:f9:ef:48:10:3b:49:f4:7d:19:d0:28:f6:4e:03:78:95:a7:
         57:65:8c:a8:92:cb:df:d7:ec:55:88:da:25:f7:50:4e:62:c8:
         9f:ab:45:0f:0f:72:52:8f:d2:c3:16:c7:56:b5:dd:bf:f6:b4:
         d7:ad:06:a0:8a:69:1e:72:f6:37:ab:34:9c:6a:5e:74:11:c6:
         e4:97:ef:41:3a:cf:6b:73:e9:8c:9c:c0:8b:7a:13:ae:a4:d5:
         d4:bc:56:e0:ca:0f:e6:c4:9d:bc:32:38:18:b0:13:67:43:57:
         85:3c:83:3f:f0:6d:02:6f:c9:6d:3d:3c:4b:b9:c3:b7:d8:f8:
         43:3f:66:2a:1a:82:f2:fb:9e:b4:d3:bd:06:af:b7:a7:5c:12:
         39:6e:ca:92:94:46:e7:a6:fd:6b:8d:d8:22:b6:61:16:ec:dc:
         ee:78:53:87:69:d2:a3:f0:db:3b:05:f8:85:48:10:30:78:12:
         81:fa:65:d1:bd:a2:02:06:75:25:59:c9:9c:06:e4:10:b0:37:
         bd:f8:6e:d7:a9:a2:56:fa:71:df:ef:ee:e3:e8:9a:f8:d1:fb:
         7a:c4:69:83:67:39:81:69:ba:65:17:8e:4b:07:50:c6:c1:7f:
         6f:fd:d6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:11:58 2024 by rpki-client on console-fra.rpki-client.org