Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa
File:                     3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          EUrL2hU8HqWeVv/pfA+TyhGZSWMVatv7eyVhKzpB5+A=
Subject key identifier:   0F:3C:E9:DF:72:FC:36:FC:96:D5:3D:6E:45:BD:39:5C:E7:77:80:60
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       72A23D518E96E06568124564FC7F8D1CA07C787B
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 05 Dec 2023 02:44:21 +0000
ROA not before:           Tue 05 Dec 2023 02:39:21 +0000
ROA not after:            Tue 03 Dec 2024 02:44:21 +0000
asID:                     138995
IP address blocks:        103.68.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 22:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a2:3d:51:8e:96:e0:65:68:12:45:64:fc:7f:8d:1c:a0:7c:78:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Dec  5 02:39:21 2023 GMT
            Not After : Dec  3 02:44:21 2024 GMT
        Subject: CN=0F3CE9DF72FC36FC96D53D6E45BD395CE7778060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:1d:e0:21:b6:bd:b5:77:6e:05:26:4a:49:
                    42:3e:40:72:7a:19:77:b5:70:40:d1:d4:68:af:70:
                    21:b0:ab:bb:b7:e4:ba:cf:42:00:f0:1b:32:25:2f:
                    30:27:33:44:92:d4:4c:37:dd:4e:ad:cf:97:51:22:
                    c1:98:9f:eb:9c:ca:4e:0b:6b:5c:27:3d:cb:b3:70:
                    46:4e:57:02:1f:72:6b:9c:66:17:95:5f:3b:dc:e2:
                    e0:31:f7:c4:cf:b6:da:e2:91:eb:22:d0:50:14:61:
                    25:3b:cc:a9:35:38:cf:81:a4:b3:78:e2:5c:03:d2:
                    6b:3d:ee:b4:c0:66:45:dd:4a:71:57:a8:8b:08:84:
                    d2:69:a3:30:81:17:42:84:28:bd:db:79:0a:7a:d1:
                    67:0a:03:e0:b2:2c:b4:ce:76:97:c6:92:d2:60:16:
                    7c:dd:9e:f2:53:49:25:74:34:ac:1f:7d:5b:ec:fd:
                    7d:06:79:ce:51:66:86:83:af:30:ef:c2:19:0d:78:
                    59:95:89:8b:bd:d7:b6:7a:89:a6:05:df:2a:ba:88:
                    07:6a:2a:e5:ee:13:6a:f8:08:f1:84:ef:0d:f6:ee:
                    52:ce:53:4f:67:11:2d:bc:42:d2:b7:02:cf:f9:6c:
                    d3:16:5e:7f:85:bc:2e:1e:c3:ff:9e:b7:ef:85:81:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3C:E9:DF:72:FC:36:FC:96:D5:3D:6E:45:BD:39:5C:E7:77:80:60
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:99:1d:9e:78:25:41:88:85:8a:b5:dd:c7:20:5b:f5:7f:ff:
         c1:5f:35:1e:55:9f:fc:fe:eb:dd:fb:96:37:99:70:1a:29:de:
         ce:d7:dc:6d:47:71:ff:01:a3:b8:7c:2c:65:2c:5d:46:c5:3c:
         8e:dd:2c:67:b4:7a:a3:ac:4e:11:9a:19:22:60:d1:7d:85:5c:
         a8:f6:72:a2:1e:5d:83:5d:99:08:a7:bf:cb:17:b6:04:da:c2:
         5d:52:4a:3b:20:e0:83:9b:d5:b4:96:9b:9f:7c:55:11:cc:69:
         2a:89:91:82:77:93:ef:31:59:e6:1f:12:e4:71:7e:84:50:e2:
         80:2a:e6:fa:22:eb:3d:7f:f9:44:98:79:a7:ab:45:0d:6b:46:
         b2:48:04:74:42:a9:0c:e8:7c:64:7d:22:9b:61:fb:4f:72:a8:
         10:bb:ee:88:cc:02:3c:45:a0:47:2e:fd:bd:51:ea:67:7a:03:
         fd:69:3d:62:93:e4:d3:31:a9:21:8f:a9:0a:00:8b:97:b7:99:
         44:c8:4c:77:ea:58:a6:39:8a:fe:88:65:21:02:92:52:77:cc:
         47:20:13:f0:0f:89:6a:b1:2c:1d:c3:e2:10:8a:41:5b:0b:9e:
         24:d0:2a:d6:ee:85:11:7f:17:bb:e9:07:ad:63:d3:f0:ed:ec:
         06:40:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:32:18 2024 by rpki-client on console-fra.rpki-client.org