Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa
File:                     3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          /p93pBjT86S7izviqCaR/MAuasldMrWFoRB8N2IVIuM=
Subject key identifier:   C5:34:06:14:F1:9A:58:4C:EE:6B:AF:D4:10:CF:B0:D5:5D:7A:1B:44
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       6B216728E8712AD87E5832F223AA3523415A69E9
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 03 Jan 2023 02:07:02 +0000
ROA not before:           Tue 03 Jan 2023 02:02:02 +0000
ROA not after:            Tue 02 Jan 2024 02:07:02 +0000
asID:                     138995
IP address blocks:        103.68.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Mar 2023 08:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:21:67:28:e8:71:2a:d8:7e:58:32:f2:23:aa:35:23:41:5a:69:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jan  3 02:02:02 2023 GMT
            Not After : Jan  2 02:07:02 2024 GMT
        Subject: CN=C5340614F19A584CEE6BAFD410CFB0D55D7A1B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:7e:62:56:f3:7b:d0:8e:5c:0d:bf:c1:20:
                    8d:54:1d:95:8c:cb:eb:3f:df:ce:91:26:3e:a9:4b:
                    38:ee:82:a4:e7:c1:76:a3:53:e3:78:48:32:69:82:
                    d3:8d:fd:6c:1b:48:7c:b4:b6:a6:eb:e2:39:7b:63:
                    fc:61:47:16:f8:23:63:7e:fc:83:71:3c:69:c4:6e:
                    50:4a:e1:cc:70:32:83:b2:8f:0a:1d:69:c3:ea:32:
                    81:64:74:5f:27:10:76:5a:6d:a4:e0:d5:15:f8:a5:
                    17:47:19:5b:78:ef:da:1e:5e:49:69:0d:ab:9e:3f:
                    23:2b:36:ee:2c:d5:a2:f0:d7:25:23:27:c8:3d:43:
                    00:b8:55:87:35:2e:02:77:61:41:9a:55:f9:66:6a:
                    f2:d9:12:54:a1:27:6a:0d:a4:0d:d3:46:49:da:8e:
                    0d:8a:2c:5c:73:78:2d:01:3d:3e:11:c9:51:09:e1:
                    ae:4b:9f:c9:b6:8a:cb:12:db:e9:bb:40:28:89:a9:
                    59:4a:fa:a4:2c:c0:d7:fd:da:7d:e0:47:2a:5f:9c:
                    a4:00:72:0d:7b:f5:ce:f8:1e:d4:6f:2b:70:9f:56:
                    4e:0f:3f:25:27:9e:37:e5:a2:b5:74:b7:69:e3:5c:
                    39:68:2e:6a:79:26:ad:4e:27:a4:0e:c8:d9:74:61:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C5:34:06:14:F1:9A:58:4C:EE:6B:AF:D4:10:CF:B0:D5:5D:7A:1B:44
            X509v3 Authority Key Identifier: 
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:95:34:ed:31:eb:9e:90:80:31:6d:b8:29:35:b3:35:c5:ce:
         4f:cb:01:48:7a:2f:83:8b:f4:80:73:33:4a:0a:a1:db:d1:e0:
         bb:a3:f0:c4:b7:be:79:1f:8a:db:72:54:e5:22:9a:55:3d:44:
         91:45:d5:28:a0:9e:bf:ae:b1:d1:a6:62:d6:a1:16:8e:7e:35:
         b8:29:c3:99:a3:7a:b7:a8:ce:d9:a3:55:c4:5c:6d:8e:6a:d9:
         90:54:33:0d:99:a6:54:f3:31:a3:10:d7:75:5d:4e:35:d2:3c:
         81:de:b3:87:db:9e:42:bb:7f:c2:e0:df:2e:df:60:2c:21:2b:
         e7:96:26:27:3a:55:e3:b4:73:0a:5c:1d:c5:01:b5:b0:04:7f:
         52:5f:b5:ab:5b:f5:4c:5a:60:4e:fe:25:47:33:18:bd:d4:90:
         45:33:a2:a3:cc:7a:e8:54:a5:f8:fb:d7:c5:85:a4:7b:4f:f0:
         2b:93:33:54:dc:91:ff:04:f7:ee:d4:9a:d9:c0:97:73:19:b7:
         f3:df:c7:45:9c:a8:ee:8f:3c:f0:0e:ec:bc:4c:e4:3a:27:66:
         f0:d8:cb:89:c5:e3:8e:cf:fa:7a:41:61:f6:13:5f:1b:d8:04:
         b3:0d:87:c4:13:58:61:65:f4:bf:f1:2e:e3:53:22:12:c1:f6:
         15:43:53:ca
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUayFnKOhxKth+WDLyI6o1I0FaaekwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTIzMDEwMzAyMDIwMloX
DTI0MDEwMjAyMDcwMlowMzExMC8GA1UEAxMoQzUzNDA2MTRGMTlBNTg0Q0VFNkJB
RkQ0MTBDRkIwRDU1RDdBMUI0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK3AfmJW83vQjlwNv8EgjVQdlYzL6z/fzpEmPqlLOO6CpOfBdqNT43hIMmmC
0439bBtIfLS2puviOXtj/GFHFvgjY378g3E8acRuUErhzHAyg7KPCh1pw+oygWR0
XycQdlptpODVFfilF0cZW3jv2h5eSWkNq54/Iys27izVovDXJSMnyD1DALhVhzUu
AndhQZpV+WZq8tkSVKEnag2kDdNGSdqODYosXHN4LQE9PhHJUQnhrkufybaKyxLb
6btAKImpWUr6pCzA1/3afeBHKl+cpAByDXv1zvge1G8rcJ9WTg8/JSeeN+WitXS3
aeNcOWguankmrU4npA7I2XRhJmkCAwEAAaOCAj4wggI6MB0GA1UdDgQWBBTFNAYU
8ZpYTO5rr9QQz7DVXXobRDAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzYzODJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzMzM4MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0RvMA0GCSqGSIb3DQEBCwUAA4IBAQAc
lTTtMeuekIAxbbgpNbM1xc5PywFIei+Di/SAczNKCqHb0eC7o/DEt755H4rbclTl
IppVPUSRRdUooJ6/rrHRpmLWoRaOfjW4KcOZo3q3qM7Zo1XEXG2OatmQVDMNmaZU
8zGjENd1XU410jyB3rOH255Cu3/C4N8u32AsISvnliYnOlXjtHMKXB3FAbWwBH9S
X7WrW/VMWmBO/iVHMxi91JBFM6KjzHroVKX4+9fFhaR7T/ArkzNU3JH/BPfu1JrZ
wJdzGbfz38dFnKjujzzwDuy8TOQ6J2bw2MuJxeOOz/p6QWH2E18b2ASzDYfEE1hh
ZfS/8S7jUyISwfYVQ1PK
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:52:17 2023 by rpki-client on console-fra.rpki-client.org