Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa
File:                     3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          nhisdRWQOOZvEkyGXBL82lTKY2b9l0x/StlqBjFuQqo=
Subject key identifier:   54:50:CA:BD:78:71:A1:34:B8:C4:07:4D:4B:43:78:17:93:26:6A:37
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       4F09BA5AEE1AA82E8B3A8A9D0AD38A2B7BFC91C9
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 08 Oct 2024 00:39:59 +0000
ROA not before:           Tue 08 Oct 2024 00:34:59 +0000
ROA not after:            Tue 07 Oct 2025 00:39:59 +0000
asID:                     138995
IP address blocks:        103.244.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 23:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:09:ba:5a:ee:1a:a8:2e:8b:3a:8a:9d:0a:d3:8a:2b:7b:fc:91:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Oct  8 00:34:59 2024 GMT
            Not After : Oct  7 00:39:59 2025 GMT
        Subject: CN=5450CABD7871A134B8C4074D4B43781793266A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:ee:53:04:ce:72:c6:05:9c:01:b2:8a:79:
                    fd:96:eb:f0:a8:28:3c:d7:4b:09:f6:a2:36:8a:19:
                    a5:7f:c7:95:2b:b5:ad:7c:07:7c:43:ed:40:f4:17:
                    f0:3a:c2:69:16:94:cb:59:f9:60:16:d4:d8:b7:b1:
                    3b:8b:00:81:6a:6d:c8:1f:f6:6e:41:9a:10:df:4c:
                    8e:ce:79:71:e1:86:c2:0f:16:13:08:a7:dd:23:b4:
                    03:40:21:34:f8:03:b6:4c:6d:6e:ac:6b:6e:03:0c:
                    17:88:34:50:b2:72:3b:e0:76:02:ec:ae:2b:18:ea:
                    be:77:19:28:93:c7:a7:ee:43:e6:33:93:d4:b9:ca:
                    8a:86:41:9f:9e:26:c7:91:cd:4a:b5:36:50:e9:06:
                    f1:c1:d0:94:a0:5e:a3:58:19:cc:c4:b7:a4:2d:e2:
                    7c:4f:a3:e4:59:bd:d3:d1:25:81:50:b7:c1:57:14:
                    4a:68:93:7e:fc:d8:d4:07:cd:18:3d:d0:0e:fd:74:
                    70:80:a9:0a:2e:46:00:8b:6c:8a:ba:c0:27:96:6d:
                    96:1a:f1:05:0c:71:eb:72:ae:72:c0:aa:39:51:d4:
                    34:e1:fd:b4:38:09:a2:72:80:3d:38:69:31:84:03:
                    31:0d:09:b5:9c:11:ea:37:cd:31:1e:49:f9:9d:d8:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:50:CA:BD:78:71:A1:34:B8:C4:07:4D:4B:43:78:17:93:26:6A:37
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:80:e1:d3:b6:e7:7c:54:93:39:bb:82:17:28:50:04:2b:98:
         94:66:de:72:73:7f:db:b1:af:87:f3:45:d3:cc:47:11:0c:4b:
         f4:23:24:f7:94:2e:52:62:98:a3:6c:38:f6:64:27:c8:0e:06:
         f4:d5:71:72:d7:da:42:65:27:f8:49:47:6f:28:3d:55:b9:40:
         6d:02:05:8e:5d:a2:b1:f6:34:c1:40:62:1b:5d:10:87:52:f8:
         bd:41:ec:df:2b:9d:e4:2b:dc:14:7c:c1:4a:c3:c5:67:c4:15:
         37:49:07:91:6e:9f:56:7a:74:ea:33:3e:af:d6:bf:bd:05:49:
         05:8a:38:e6:db:dd:b2:db:69:12:91:d8:a2:82:c7:9c:ce:d1:
         e7:1f:b3:2c:a0:55:a2:27:67:8f:fe:ca:18:20:ea:48:66:23:
         de:5f:f3:33:ac:96:d0:19:c9:6f:b1:31:b9:15:d0:77:1f:27:
         45:d0:b5:58:92:7a:0d:b6:2f:5e:3d:f1:e9:f4:88:5b:48:0b:
         c8:97:81:ce:fb:d5:58:a0:92:fb:63:90:9e:8f:55:41:a6:7b:
         9b:e9:8c:08:6f:67:32:e9:24:3f:12:66:bf:cd:1e:7b:c2:98:
         91:30:e4:e0:47:dc:5c:99:6c:4f:73:81:93:93:d3:fe:ce:eb:
         f7:35:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:22 2024 by rpki-client on console-ams.rpki-client.org