Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa
File:                     3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          izZNnO39hVosHUktjUPKv2bA3wg0Au2PfcK/qzAJ1W8=
Subject key identifier:   7B:C4:93:09:A5:5A:3F:2F:77:76:DA:85:B4:04:CD:35:7B:A0:B0:1F
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       3B3A8DB46177434E37E662B0C311AEEFCEE05CB5
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa
Signing time:             Sat 14 Oct 2023 19:29:38 +0000
ROA not before:           Sat 14 Oct 2023 19:24:38 +0000
ROA not after:            Sat 12 Oct 2024 19:29:38 +0000
asID:                     42831
IP address blocks:        103.244.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 19:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3a:8d:b4:61:77:43:4e:37:e6:62:b0:c3:11:ae:ef:ce:e0:5c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Oct 14 19:24:38 2023 GMT
            Not After : Oct 12 19:29:38 2024 GMT
        Subject: CN=7BC49309A55A3F2F7776DA85B404CD357BA0B01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:00:0f:03:2d:b8:c9:d6:cc:92:bf:9c:8a:
                    26:cd:f3:2a:8a:f8:55:41:f1:e8:61:53:b9:3f:4d:
                    d6:11:8f:0c:08:20:7e:7e:c7:48:fc:f3:53:5f:f6:
                    9d:00:1c:fb:b1:e0:3b:4b:cb:44:7a:35:0f:5d:80:
                    b7:c1:70:f8:23:98:6a:00:b2:e9:c8:82:ab:1f:d9:
                    c1:41:5c:62:cd:f3:c5:8a:2c:90:89:af:90:12:e5:
                    ef:b0:c3:98:ec:cd:ca:a4:1e:79:b4:a1:f5:84:66:
                    bc:4c:85:4f:44:ee:69:c7:03:fb:a0:fa:58:d5:bc:
                    88:c0:de:6c:24:4c:0f:34:54:f5:4d:d6:38:c3:bc:
                    e3:c1:68:7d:13:9c:dd:a1:5c:1d:c0:79:65:e4:9c:
                    36:5e:7f:e9:cd:b0:8d:aa:02:55:64:9f:6b:62:0d:
                    b6:48:ba:8c:54:8f:61:63:69:67:9b:3c:a5:1a:a3:
                    9e:3c:79:56:a1:e4:2e:91:64:37:bf:4a:b0:7a:a9:
                    6b:0f:79:0c:53:3f:de:b8:a2:c8:f8:24:d6:4e:45:
                    f8:2d:2d:c5:80:c6:c8:6a:ca:8f:18:6f:b9:d2:fe:
                    93:97:6a:b8:37:a8:47:59:e3:63:30:d7:b0:41:8a:
                    5d:81:d4:f9:b7:8d:fb:19:ec:f7:41:ac:f2:2b:95:
                    64:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C4:93:09:A5:5A:3F:2F:77:76:DA:85:B4:04:CD:35:7B:A0:B0:1F
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e2:9c:92:e4:17:e1:f7:b2:cc:80:5b:52:10:47:34:7f:22:
         0c:d1:e3:f4:94:a2:f3:57:7f:0c:26:ca:8f:31:c5:4a:6d:00:
         62:22:c6:74:8e:e0:d8:04:e5:e7:cf:50:64:ca:fe:f1:36:54:
         2f:e1:b7:13:45:02:69:09:93:55:ea:5e:2d:3f:c1:d3:5b:9c:
         41:ac:b6:7f:ec:3e:25:ef:b3:d0:85:cf:8c:d5:bb:ca:bd:e4:
         4d:22:1f:42:75:4a:1e:dd:48:7e:6c:a0:a1:9b:4f:14:91:25:
         73:c1:f5:a9:63:ae:c2:ad:3d:58:6c:55:63:08:4e:dd:df:0b:
         da:41:f3:fb:33:ee:8b:76:90:ee:32:40:1b:79:5f:1d:bd:8e:
         86:21:45:8b:d0:6c:11:51:04:da:dc:bc:2d:da:ce:dc:f8:89:
         4b:72:3e:a4:95:38:71:a0:bf:1d:e5:c0:c8:62:b4:93:15:01:
         57:9c:c8:a3:fc:13:8e:1a:31:49:1e:85:f1:16:0c:38:00:c0:
         89:70:32:36:f7:48:2d:d2:2e:d4:f0:90:cf:a3:b4:43:ea:06:
         6e:41:8e:da:83:02:db:4c:97:bf:23:d8:ef:6d:90:d4:e7:06:
         c7:00:10:c4:d3:d2:b7:d5:21:49:0a:34:be:d9:13:80:e1:84:
         3d:86:c3:28
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUOzqNtGF3Q0435mKwwxGu787gXLUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg5RTk3OEUwRjc3
RTYxQkFFQ0QwMzkxQjA3MzRENjJDNzJBODEzOUZCMB4XDTIzMTAxNDE5MjQzOFoX
DTI0MTAxMjE5MjkzOFowMzExMC8GA1UEAxMoN0JDNDkzMDlBNTVBM0YyRjc3NzZE
QTg1QjQwNENEMzU3QkEwQjAxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkCAA8DLbjJ1sySv5yKJs3zKor4VUHx6GFTuT9N1hGPDAggfn7HSPzzU1/2
nQAc+7HgO0vLRHo1D12At8Fw+COYagCy6ciCqx/ZwUFcYs3zxYoskImvkBLl77DD
mOzNyqQeebSh9YRmvEyFT0TuaccD+6D6WNW8iMDebCRMDzRU9U3WOMO848FofROc
3aFcHcB5ZeScNl5/6c2wjaoCVWSfa2INtki6jFSPYWNpZ5s8pRqjnjx5VqHkLpFk
N79KsHqpaw95DFM/3riiyPgk1k5F+C0txYDGyGrKjxhvudL+k5dquDeoR1njYzDX
sEGKXYHU+beN+xns90Gs8iuVZG0CAwEAAaOCAj4wggI6MB0GA1UdDgQWBBR7xJMJ
pVo/L3d22oW0BM01e6CwHzAfBgNVHSMEGDAWgBSel44Pd+Ybrs0DkbBzTWLHKoE5
+zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC80LzlFOTc4RTBGNzdFNjFCQUVDRDAzOTFCMDczNEQ2MkM3MkE4
MTM5RkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25wZU9EM2ZtRzY3TkE1R3djMDFpeHlxQk9mcy5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC80LzMxMzAzMzJlMzIzNDM0MmUzMjMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzNDMyMzgzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/TjMA0GCSqGSIb3DQEBCwUAA4IBAQB/
4pyS5Bfh97LMgFtSEEc0fyIM0eP0lKLzV38MJsqPMcVKbQBiIsZ0juDYBOXnz1Bk
yv7xNlQv4bcTRQJpCZNV6l4tP8HTW5xBrLZ/7D4l77PQhc+M1bvKveRNIh9CdUoe
3Uh+bKChm08UkSVzwfWpY67CrT1YbFVjCE7d3wvaQfP7M+6LdpDuMkAbeV8dvY6G
IUWL0GwRUQTa3Lwt2s7c+IlLcj6klThxoL8d5cDIYrSTFQFXnMij/BOOGjFJHoXx
Fgw4AMCJcDI290gt0i7U8JDPo7RD6gZuQY7agwLbTJe/I9jvbZDU5wbHABDE09K3
1SFJCjS+2ROA4YQ9hsMo
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:57 2024 by rpki-client on console-fra.rpki-client.org