Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa
File:                     3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          E1FZLkk5M6GOvm5UnK3G3NWIYJqivBqn8ntAh+WceCc=
Subject key identifier:   39:83:C0:95:34:1A:66:EB:5E:1A:02:CA:36:1E:CE:0B:A4:1E:2C:1F
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       75DC9AB8F13D15AA289324E86211DFB43DBA121B
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa
Signing time:             Sat 14 Sep 2024 19:39:59 +0000
ROA not before:           Sat 14 Sep 2024 19:34:59 +0000
ROA not after:            Sat 13 Sep 2025 19:39:59 +0000
asID:                     42831
IP address blocks:        103.244.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 23:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:9a:b8:f1:3d:15:aa:28:93:24:e8:62:11:df:b4:3d:ba:12:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Sep 14 19:34:59 2024 GMT
            Not After : Sep 13 19:39:59 2025 GMT
        Subject: CN=3983C095341A66EB5E1A02CA361ECE0BA41E2C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:5a:02:87:d4:8e:d0:d3:7b:44:d3:1d:14:
                    84:aa:1b:d5:f8:f1:0f:9b:d6:11:8d:b9:89:a6:72:
                    27:dd:f0:88:14:d9:af:44:db:3e:8d:3e:2b:7e:cf:
                    47:e1:88:00:c3:1d:db:7d:e5:14:5c:d9:72:56:f9:
                    83:1e:f7:b8:f8:af:68:d8:6e:94:ec:61:d6:9f:1b:
                    24:1a:46:bb:96:5e:e2:3e:15:13:c7:c3:0e:da:e7:
                    8f:61:e9:be:31:b2:87:e1:4c:fc:62:58:24:ab:39:
                    53:22:d5:8d:f4:ff:8d:7a:a9:39:70:e3:c7:28:58:
                    e8:fe:8d:4f:5b:80:36:f8:c4:82:87:20:cd:cd:df:
                    91:25:1e:b5:13:82:d8:03:dd:a7:e5:47:cb:2d:42:
                    3b:08:0b:b2:a7:c0:47:73:86:4f:c5:32:a4:ab:4b:
                    d7:de:b9:00:7d:45:18:57:87:16:ec:00:2d:91:a4:
                    1c:d6:62:7d:69:1b:cc:30:da:52:9e:31:33:a9:0c:
                    8e:da:35:07:fc:6d:d2:d9:01:ea:38:2a:8a:8f:b8:
                    0b:7f:55:0b:25:ee:d4:a7:15:21:b2:87:cc:b6:60:
                    39:39:3e:fe:56:35:42:04:da:2c:13:af:a6:4f:ea:
                    63:be:e0:f3:4e:7e:2e:e7:95:6d:b5:e1:fa:c3:d5:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:83:C0:95:34:1A:66:EB:5E:1A:02:CA:36:1E:CE:0B:A4:1E:2C:1F
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:90:a4:40:41:ff:4e:7e:23:de:e5:72:3d:90:12:da:6e:
         bf:0b:bf:92:9c:c1:c3:74:fb:c1:c7:e7:13:55:6d:fe:6a:34:
         cb:6b:04:33:e2:d9:f9:0b:1c:ad:b2:aa:ba:e3:fc:d2:a2:f1:
         2e:97:87:0e:3a:c4:bd:dd:df:d1:52:ee:f0:e5:c0:7a:6c:68:
         b2:dd:5f:9a:c3:65:e7:d2:86:6f:97:9c:48:0a:61:41:8b:5a:
         8d:4a:9f:62:12:5a:80:ef:07:96:f5:07:c0:97:79:e6:47:e8:
         1f:9a:fc:51:2b:4b:c0:ea:38:1e:4f:f9:a0:35:4d:96:92:3c:
         6d:99:f1:f6:81:97:65:57:60:de:7b:28:4f:5b:9e:c8:e9:71:
         b5:65:c9:6f:63:72:4d:fa:c0:38:06:6c:84:0f:ac:e9:0b:8d:
         d9:48:e1:22:0a:c7:1e:c8:3e:d9:b0:3a:3f:64:27:29:38:f6:
         8b:3e:24:c9:e5:2b:3e:76:fc:5b:1d:ab:14:6f:22:2c:89:62:
         64:d7:dd:8c:1e:b5:ca:23:cd:52:c8:35:18:f7:36:5b:68:86:
         2a:d1:ae:e8:4c:ed:fc:b9:d7:5f:ee:76:2a:ce:6f:ca:3c:0b:
         8c:75:08:a7:09:ec:09:83:ab:ce:d2:87:d5:3c:b3:57:78:ae:
         c3:f2:6c:71
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUddyauPE9FaookyToYhHftD26EhswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg5RTk3OEUwRjc3
RTYxQkFFQ0QwMzkxQjA3MzRENjJDNzJBODEzOUZCMB4XDTI0MDkxNDE5MzQ1OVoX
DTI1MDkxMzE5Mzk1OVowMzExMC8GA1UEAxMoMzk4M0MwOTUzNDFBNjZFQjVFMUEw
MkNBMzYxRUNFMEJBNDFFMkMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALbkWgKH1I7Q03tE0x0UhKob1fjxD5vWEY25iaZyJ93wiBTZr0TbPo0+K37P
R+GIAMMd233lFFzZclb5gx73uPivaNhulOxh1p8bJBpGu5Ze4j4VE8fDDtrnj2Hp
vjGyh+FM/GJYJKs5UyLVjfT/jXqpOXDjxyhY6P6NT1uANvjEgocgzc3fkSUetROC
2APdp+VHyy1COwgLsqfAR3OGT8UypKtL1965AH1FGFeHFuwALZGkHNZifWkbzDDa
Up4xM6kMjto1B/xt0tkB6jgqio+4C39VCyXu1KcVIbKHzLZgOTk+/lY1QgTaLBOv
pk/qY77g805+LueVbbXh+sPV9jcCAwEAAaOCAj4wggI6MB0GA1UdDgQWBBQ5g8CV
NBpm614aAso2Hs4LpB4sHzAfBgNVHSMEGDAWgBSel44Pd+Ybrs0DkbBzTWLHKoE5
+zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC80LzlFOTc4RTBGNzdFNjFCQUVDRDAzOTFCMDczNEQ2MkM3MkE4
MTM5RkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25wZU9EM2ZtRzY3TkE1R3djMDFpeHlxQk9mcy5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC80LzMxMzAzMzJlMzIzNDM0MmUzMjMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzNDMyMzgzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/TjMA0GCSqGSIb3DQEBCwUAA4IBAQB2
nJCkQEH/Tn4j3uVyPZAS2m6/C7+SnMHDdPvBx+cTVW3+ajTLawQz4tn5Cxytsqq6
4/zSovEul4cOOsS93d/RUu7w5cB6bGiy3V+aw2Xn0oZvl5xICmFBi1qNSp9iElqA
7weW9QfAl3nmR+gfmvxRK0vA6jgeT/mgNU2WkjxtmfH2gZdlV2DeeyhPW57I6XG1
ZclvY3JN+sA4BmyED6zpC43ZSOEiCsceyD7ZsDo/ZCcpOPaLPiTJ5Ss+dvxbHasU
byIsiWJk192MHrXKI81SyDUY9zZbaIYq0a7oTO38uddf7nYqzm/KPAuMdQinCewJ
g6vO0ofVPLNXeK7D8mxx
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org