Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa
File:                     3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa (raw, json)
Hash identifier:          Ns5xDJKR4vRtG6CjaHHDOPNytVIKIRhm7N2whXE/PbU=
Subject key identifier:   BE:EB:A2:C8:47:89:DF:7C:BD:C0:0D:31:57:48:B3:F4:63:E5:08:32
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       42CD7897D51CE8D2C2B6E5EFD296B48F26BF01F6
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa
Signing time:             Fri 31 Jan 2025 18:17:56 +0000
ROA not before:           Fri 31 Jan 2025 18:12:56 +0000
ROA not after:            Fri 30 Jan 2026 18:17:56 +0000
asID:                     151642
IP address blocks:        103.244.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 06:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cd:78:97:d5:1c:e8:d2:c2:b6:e5:ef:d2:96:b4:8f:26:bf:01:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000
        Validity
            Not Before: Jan 31 18:12:56 2025 GMT
            Not After : Jan 30 18:17:56 2026 GMT
        Subject: CN=BEEBA2C84789DF7CBDC00D315748B3F463E50832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:a4:35:ad:69:51:1d:dc:a5:31:88:c6:33:
                    da:87:71:6c:24:b9:14:72:82:d6:76:bc:03:94:a2:
                    81:d8:4e:a6:91:a7:c3:64:62:cf:40:1d:6a:d5:33:
                    04:ba:0b:c2:5f:d4:18:b9:a5:70:7d:17:bd:fa:a7:
                    32:ea:41:1f:92:2c:ac:ff:a2:7b:6b:d4:20:94:31:
                    be:bf:9a:88:fc:35:23:9d:40:ae:ad:0e:44:eb:c5:
                    77:8c:39:65:5a:da:12:fa:a1:32:5c:13:fc:f2:6a:
                    4f:78:e3:29:db:09:1b:aa:a4:54:d0:3d:5e:05:53:
                    95:cd:74:81:a1:63:61:13:05:1f:3e:fe:44:d7:58:
                    73:0d:33:ea:b0:2a:88:cd:6f:7a:d4:6a:93:e7:38:
                    45:4f:18:dd:fd:28:86:14:52:ef:84:5f:4a:dc:98:
                    06:47:fe:aa:eb:b9:5d:74:04:74:56:56:0f:2e:00:
                    06:4d:21:ac:85:a0:b0:32:71:68:e0:33:dc:53:2a:
                    62:85:5f:f7:30:2e:78:76:4e:b0:21:80:ff:4b:13:
                    07:97:17:1f:4e:01:92:2f:c8:61:2c:80:31:ee:f2:
                    7d:59:6a:c7:a3:e7:d7:f2:c5:7b:cd:28:7c:8d:fa:
                    1f:9d:0b:ce:cd:be:fc:11:d5:da:81:85:62:2d:e0:
                    13:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EB:A2:C8:47:89:DF:7C:BD:C0:0D:31:57:48:B3:F4:63:E5:08:32
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32332d3234203d3e20313531363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:17:ee:6c:0c:24:a5:6d:2d:5a:a2:18:ff:6e:08:96:86:
         fc:af:33:ea:87:ed:39:7c:6c:6a:00:99:3d:65:c9:b1:0d:00:
         93:cb:73:07:d3:59:5a:c2:b4:05:d2:2f:fe:bd:c3:fd:75:02:
         59:7b:65:07:5d:38:95:ce:b4:3a:a3:05:a7:e1:f5:1a:23:bd:
         db:d8:45:78:84:05:f5:94:9c:5a:67:1e:20:6f:f8:83:82:9e:
         43:20:8e:82:70:9d:b4:b8:98:0b:0a:f0:cb:ac:c4:4d:49:58:
         7c:6e:92:85:c9:a7:73:e7:88:6b:ab:b7:be:b8:99:b9:a6:64:
         d7:6e:96:16:2f:2b:76:a7:34:53:02:d8:1d:12:97:5a:83:8f:
         67:0c:2f:42:f6:52:1c:46:25:53:a2:4e:40:af:dc:76:37:06:
         24:c1:85:82:1f:0a:87:c2:a0:1b:b3:bb:35:da:5c:29:02:75:
         c4:c9:f8:b1:72:79:6a:aa:ea:a2:68:8c:c9:fd:fe:9a:d5:27:
         39:d6:da:4e:9b:1e:c0:72:94:ae:9a:23:9e:76:77:fc:84:c0:
         d4:9d:15:2c:07:da:a9:79:cd:83:5d:b4:42:ed:43:c0:b2:0e:
         cc:44:3c:0b:b5:10:29:6d:cd:52:8c:4c:62:e0:5a:d5:4d:05:
         3e:d5:e1:33
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUQs14l9Uc6NLCtuXv0pa0jya/AfYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg5RTk3OEUwRjc3
RTYxQkFFQ0QwMzkxQjA3MzRENjJDNzJBODEzOUZCMB4XDTI1MDEzMTE4MTI1NloX
DTI2MDEzMDE4MTc1NlowMzExMC8GA1UEAxMoQkVFQkEyQzg0Nzg5REY3Q0JEQzAw
RDMxNTc0OEIzRjQ2M0U1MDgzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKHKpDWtaVEd3KUxiMYz2odxbCS5FHKC1na8A5SigdhOppGnw2Riz0AdatUz
BLoLwl/UGLmlcH0XvfqnMupBH5IsrP+ie2vUIJQxvr+aiPw1I51Arq0OROvFd4w5
ZVraEvqhMlwT/PJqT3jjKdsJG6qkVNA9XgVTlc10gaFjYRMFHz7+RNdYcw0z6rAq
iM1vetRqk+c4RU8Y3f0ohhRS74RfStyYBkf+quu5XXQEdFZWDy4ABk0hrIWgsDJx
aOAz3FMqYoVf9zAueHZOsCGA/0sTB5cXH04Bki/IYSyAMe7yfVlqx6Pn1/LFe80o
fI36H50Lzs2+/BHV2oGFYi3gE1MCAwEAAaOCAkAwggI8MB0GA1UdDgQWBBS+66LI
R4nffL3ADTFXSLP0Y+UIMjAfBgNVHSMEGDAWgBSel44Pd+Ybrs0DkbBzTWLHKoE5
+zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC80LzlFOTc4RTBGNzdFNjFCQUVDRDAzOTFCMDczNEQ2MkM3MkE4
MTM5RkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25wZU9EM2ZtRzY3TkE1R3djMDFpeHlxQk9mcy5jZXIwgaYGCCsG
AQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC80LzMxMzAzMzJlMzIzNDM0MmUzMjMyMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNl
MjAzMTM1MzEzNjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn9OIwDQYJKoZIhvcNAQELBQADggEB
AJsdF+5sDCSlbS1aohj/bgiWhvyvM+qH7Tl8bGoAmT1lybENAJPLcwfTWVrCtAXS
L/69w/11All7ZQddOJXOtDqjBafh9RojvdvYRXiEBfWUnFpnHiBv+IOCnkMgjoJw
nbS4mAsK8MusxE1JWHxukoXJp3PniGurt764mbmmZNdulhYvK3anNFMC2B0Sl1qD
j2cML0L2UhxGJVOiTkCv3HY3BiTBhYIfCofCoBuzuzXaXCkCdcTJ+LFyeWqq6qJo
jMn9/prVJznW2k6bHsBylK6aI552d/yEwNSdFSwH2ql5zYNdtELtQ8CyDsxEPAu1
ECltzVKMTGLgWtVNBT7V4TM=
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:13:24 2025 by rpki-client