Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203533383530.roa
File:                     3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (raw, json)
Hash identifier:          c1CmWIprRghJM5qA0rzW2dyWXCf9Hsni/hlHNnZFKuM=
Subject key identifier:   35:56:57:66:6B:A2:D7:12:47:19:12:2B:3A:90:92:80:10:D6:59:9C
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       193D563AF58F50CEB70661DA80845941CEC0B035
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203533383530.roa
Signing time:             Wed 04 Jun 2025 22:44:49 +0000
ROA not before:           Wed 04 Jun 2025 22:39:49 +0000
ROA not after:            Wed 03 Jun 2026 22:44:49 +0000
asID:                     53850
IP address blocks:        103.208.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 01:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3d:56:3a:f5:8f:50:ce:b7:06:61:da:80:84:59:41:ce:c0:b0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jun  4 22:39:49 2025 GMT
            Not After : Jun  3 22:44:49 2026 GMT
        Subject: CN=355657666BA2D7124719122B3A90928010D6599C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:dc:7a:6a:5a:a3:3c:80:c3:f7:43:79:cf:
                    60:a3:e7:6c:63:3e:c3:06:cf:d4:55:15:14:28:b0:
                    06:54:43:48:5e:bf:3e:b4:1b:f4:f9:27:ac:d9:f8:
                    f1:99:9e:b1:2f:98:a5:fd:07:1c:10:a7:df:53:ad:
                    31:37:7c:f7:0e:33:55:fb:ff:9b:59:40:a9:05:31:
                    86:0a:65:a6:a8:61:89:a2:08:82:49:bf:77:e6:c6:
                    1f:b4:0a:e5:d2:c6:72:0b:d4:50:55:bb:fb:6b:ee:
                    bc:cc:de:7e:77:30:d4:3d:9a:1c:81:84:6b:44:35:
                    73:fe:20:ca:30:d7:14:70:ca:33:bf:9f:70:f4:6b:
                    78:36:dc:b1:88:8d:07:1c:eb:16:6e:07:21:6c:bb:
                    bc:79:78:0c:a8:e7:22:68:87:0b:e6:57:5a:7c:8b:
                    2f:bd:29:4d:22:cb:a0:0a:d7:15:ed:cc:82:6f:64:
                    4d:bc:4c:a4:dd:4e:d4:65:ed:d9:a5:f5:61:1d:d4:
                    75:5a:c0:7f:0c:d5:66:24:25:55:cd:39:a5:a6:10:
                    56:a0:47:86:79:7a:bb:d1:a8:7a:d3:5f:1e:b2:5c:
                    53:f3:a7:21:fc:27:e6:44:3e:7c:84:59:5f:8d:74:
                    1b:7f:95:28:29:d0:a2:b9:7b:33:58:74:01:c3:ba:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:57:66:6B:A2:D7:12:47:19:12:2B:3A:90:92:80:10:D6:59:9C
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203533383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:38:64:2a:09:11:13:ea:24:47:12:f5:71:b3:6b:74:b2:
         b9:05:d9:a8:ec:bc:2d:47:43:25:2e:78:10:b1:dd:0a:a6:27:
         39:66:b6:e7:16:20:31:73:a5:c0:77:84:1f:60:66:bd:c0:43:
         51:e4:77:b7:cb:58:7a:d8:b0:fe:21:be:72:2f:8e:85:fd:aa:
         b4:12:9d:dd:80:bb:63:66:be:e6:6a:30:f6:f4:e8:14:16:b1:
         05:45:ab:db:c2:29:7f:48:1c:18:dc:e9:b0:da:a5:3f:f4:c5:
         fc:c8:c6:2e:dc:9e:11:b5:bb:75:35:03:ba:5a:8b:30:98:4a:
         f4:4b:1b:d7:16:68:76:84:de:33:d9:8b:49:c5:da:dc:92:83:
         d7:02:c2:de:4a:0d:48:54:a7:99:8b:68:40:38:31:82:8e:a3:
         25:18:63:2d:cb:fc:dc:a3:30:89:32:dc:0f:9a:d7:c6:a2:6e:
         00:b9:e8:9d:c3:9d:c7:72:1f:47:e1:8d:fd:55:16:48:fd:2a:
         e6:d5:bf:80:e7:c4:df:af:ec:75:22:9a:0b:6e:a9:19:62:86:
         12:80:c8:c4:46:87:f9:d1:9e:89:79:69:fd:64:4a:cd:02:41:
         bd:ad:7b:76:e7:ce:5b:b6:78:86:37:c9:6e:04:41:46:5b:7a:
         43:76:fd:08
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGT1WOvWPUM63BmHagIRZQc7AsDUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTI1MDYwNDIyMzk0OVoX
DTI2MDYwMzIyNDQ0OVowMzExMC8GA1UEAxMoMzU1NjU3NjY2QkEyRDcxMjQ3MTkx
MjJCM0E5MDkyODAxMEQ2NTk5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJNZ3HpqWqM8gMP3Q3nPYKPnbGM+wwbP1FUVFCiwBlRDSF6/PrQb9PknrNn4
8ZmesS+Ypf0HHBCn31OtMTd89w4zVfv/m1lAqQUxhgplpqhhiaIIgkm/d+bGH7QK
5dLGcgvUUFW7+2vuvMzefncw1D2aHIGEa0Q1c/4gyjDXFHDKM7+fcPRreDbcsYiN
BxzrFm4HIWy7vHl4DKjnImiHC+ZXWnyLL70pTSLLoArXFe3Mgm9kTbxMpN1O1GXt
2aX1YR3UdVrAfwzVZiQlVc05paYQVqBHhnl6u9GoetNfHrJcU/OnIfwn5kQ+fIRZ
X410G3+VKCnQorl7M1h0AcO6ohUCAwEAAaOCAjwwggI4MB0GA1UdDgQWBBQ1Vldm
a6LXEkcZEis6kJKAENZZnDAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzIzMDM4MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzUzMzM4MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfQVDANBgkqhkiG9w0BAQsFAAOCAQEAKqo4
ZCoJERPqJEcS9XGza3SyuQXZqOy8LUdDJS54ELHdCqYnOWa25xYgMXOlwHeEH2Bm
vcBDUeR3t8tYetiw/iG+ci+Ohf2qtBKd3YC7Y2a+5mow9vToFBaxBUWr28Ipf0gc
GNzpsNqlP/TF/MjGLtyeEbW7dTUDulqLMJhK9Esb1xZodoTeM9mLScXa3JKD1wLC
3koNSFSnmYtoQDgxgo6jJRhjLcv83KMwiTLcD5rXxqJuALnoncOdx3IfR+GN/VUW
SP0q5tW/gOfE36/sdSKaC26pGWKGEoDIxEaH+dGeiXlp/WRKzQJBva17dufOW7Z4
hjfJbgRBRlt6Q3b9CA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:20:22 2025 by rpki-client