Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa
File:                     3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          8Agh8f6iBEnrO8ebKwoNONIXMnKHSfej0YElILAGvX0=
Subject key identifier:   62:2C:5A:1D:FF:38:10:A6:38:96:F8:5F:D9:A8:67:06:49:6E:4A:4E
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       51CA91A644E418D031FAB41A751363A72C4CE64C
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa
Signing time:             Mon 06 Nov 2023 23:51:32 +0000
ROA not before:           Mon 06 Nov 2023 23:46:32 +0000
ROA not after:            Mon 04 Nov 2024 23:51:32 +0000
asID:                     138995
IP address blocks:        103.244.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 17:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ca:91:a6:44:e4:18:d0:31:fa:b4:1a:75:13:63:a7:2c:4c:e6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Nov  6 23:46:32 2023 GMT
            Not After : Nov  4 23:51:32 2024 GMT
        Subject: CN=622C5A1DFF3810A63896F85FD9A86706496E4A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:1f:36:96:90:f4:ef:9a:c3:7a:9d:b9:de:
                    e2:49:53:dc:bd:52:f4:f2:5d:c6:56:d1:49:89:58:
                    f4:0c:48:1e:b6:6f:6b:87:03:93:9b:7b:e7:1e:9f:
                    4f:86:03:9a:3f:e8:00:b8:21:04:f0:53:b7:fa:88:
                    a8:06:39:23:bf:ca:15:b3:be:36:ca:46:7d:12:a4:
                    20:f5:c6:f3:fd:3a:9d:9b:f9:1e:1a:a1:88:4b:e5:
                    27:89:dd:42:5e:c6:b8:f3:fc:37:5a:00:be:7b:eb:
                    44:4b:db:93:85:3b:09:03:b7:76:e1:49:50:ce:4b:
                    e1:81:a4:26:16:66:c6:a8:a1:c4:a5:09:40:e6:d7:
                    48:08:64:43:06:98:86:50:a2:68:02:aa:00:25:9b:
                    22:14:71:75:5e:78:59:64:1f:e0:e9:e3:0a:b7:d3:
                    c2:20:45:e7:ef:8b:e5:1b:85:2a:2f:f7:4f:64:f7:
                    92:48:91:0d:bf:4b:ac:48:2b:fd:34:c0:72:97:b3:
                    f6:8d:4e:69:bd:3a:fc:b3:30:e6:8f:79:69:f9:93:
                    79:1b:cb:b4:1b:24:de:22:90:4f:bf:a4:da:de:35:
                    8a:97:c1:da:6a:d5:3c:a2:0c:4e:70:ad:bd:84:42:
                    75:4f:2a:32:ac:cb:f4:77:c8:79:54:ad:69:a6:5c:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2C:5A:1D:FF:38:10:A6:38:96:F8:5F:D9:A8:67:06:49:6E:4A:4E
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:1c:a6:cb:0e:c4:7c:73:45:2d:e2:5b:ec:2d:4c:de:69:c3:
         15:ab:98:26:13:91:26:61:dd:be:bc:bf:2f:08:e5:35:30:02:
         a1:4e:29:07:99:ac:98:1b:87:84:24:85:91:1b:1b:bd:e8:db:
         cc:66:78:70:28:1c:f5:92:a3:8a:89:f8:12:fb:1a:3c:89:3b:
         e5:04:f5:1e:c9:b2:ec:7f:40:1f:2e:1e:bc:af:ce:21:00:9a:
         84:ed:39:c3:85:59:fc:dd:af:9a:bb:f8:ee:19:b8:d5:ad:ca:
         90:8d:7c:33:f9:f7:3c:9b:1c:2e:c3:25:0c:d7:3d:4f:72:83:
         b1:73:41:48:b8:8f:96:69:e3:41:03:9e:ad:be:a2:3c:23:81:
         c7:30:c7:1e:de:fb:45:7b:65:a8:45:5f:d3:f7:70:99:f6:3f:
         03:63:72:13:12:e7:79:93:8f:42:b4:f9:ca:0e:9b:40:6a:03:
         2b:a3:76:d1:5e:f9:b0:c9:6c:23:1f:9b:6b:8e:85:67:9a:78:
         06:0b:fc:fb:6e:50:4b:5e:ae:ad:37:69:d0:cb:3b:b4:9d:f9:
         22:c8:1e:b3:c2:63:79:e6:d2:ca:8d:ac:71:82:9e:52:90:8a:
         10:4a:cb:29:6d:35:83:00:c0:e4:e9:f4:f5:d9:cd:72:e6:da:
         09:e5:82:0a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUUcqRpkTkGNAx+rQadRNjpyxM5kwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg5RTk3OEUwRjc3
RTYxQkFFQ0QwMzkxQjA3MzRENjJDNzJBODEzOUZCMB4XDTIzMTEwNjIzNDYzMloX
DTI0MTEwNDIzNTEzMlowMzExMC8GA1UEAxMoNjIyQzVBMURGRjM4MTBBNjM4OTZG
ODVGRDlBODY3MDY0OTZFNEE0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOVqHzaWkPTvmsN6nbne4klT3L1S9PJdxlbRSYlY9AxIHrZva4cDk5t75x6f
T4YDmj/oALghBPBTt/qIqAY5I7/KFbO+NspGfRKkIPXG8/06nZv5HhqhiEvlJ4nd
Ql7GuPP8N1oAvnvrREvbk4U7CQO3duFJUM5L4YGkJhZmxqihxKUJQObXSAhkQwaY
hlCiaAKqACWbIhRxdV54WWQf4OnjCrfTwiBF5++L5RuFKi/3T2T3kkiRDb9LrEgr
/TTAcpez9o1Oab06/LMw5o95afmTeRvLtBsk3iKQT7+k2t41ipfB2mrVPKIMTnCt
vYRCdU8qMqzL9HfIeVStaaZc5XUCAwEAAaOCAkAwggI8MB0GA1UdDgQWBBRiLFod
/zgQpjiW+F/ZqGcGSW5KTjAfBgNVHSMEGDAWgBSel44Pd+Ybrs0DkbBzTWLHKoE5
+zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC80LzlFOTc4RTBGNzdFNjFCQUVDRDAzOTFCMDczNEQ2MkM3MkE4
MTM5RkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25wZU9EM2ZtRzY3TkE1R3djMDFpeHlxQk9mcy5jZXIwgaYGCCsG
AQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC80LzMxMzAzMzJlMzIzNDM0MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMTMzMzgzOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9OIwDQYJKoZIhvcNAQELBQADggEB
AKscpssOxHxzRS3iW+wtTN5pwxWrmCYTkSZh3b68vy8I5TUwAqFOKQeZrJgbh4Qk
hZEbG73o28xmeHAoHPWSo4qJ+BL7GjyJO+UE9R7Jsux/QB8uHryvziEAmoTtOcOF
Wfzdr5q7+O4ZuNWtypCNfDP59zybHC7DJQzXPU9yg7FzQUi4j5Zp40EDnq2+ojwj
gccwxx7e+0V7ZahFX9P3cJn2PwNjchMS53mTj0K0+coOm0BqAyujdtFe+bDJbCMf
m2uOhWeaeAYL/PtuUEterq03adDLO7Sd+SLIHrPCY3nm0sqNrHGCnlKQihBKyylt
NYMAwOTp9PXZzXLm2gnlggo=
-----END CERTIFICATE-----
Generated at Sun May 5 16:43:40 2024 by rpki-client on console-ams.rpki-client.org