Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32332d3234203d3e203631313338.roa
File:                     3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (raw, json)
Hash identifier:          CHT6G56fzaLGy1vOGCTjWL6I4eUNVpiRyVpCS5exgPs=
Subject key identifier:   27:96:54:81:58:90:C0:28:AA:88:AF:24:95:DB:32:B6:AA:21:A1:E4
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       52F130A4AF7A349278828DB3FF4C9CBBE809C213
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32332d3234203d3e203631313338.roa
Signing time:             Sun 04 May 2025 00:01:46 +0000
ROA not before:           Sat 03 May 2025 23:56:46 +0000
ROA not after:            Sun 03 May 2026 00:01:46 +0000
asID:                     61138
IP address blocks:        103.208.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 07:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f1:30:a4:af:7a:34:92:78:82:8d:b3:ff:4c:9c:bb:e8:09:c2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: May  3 23:56:46 2025 GMT
            Not After : May  3 00:01:46 2026 GMT
        Subject: CN=279654815890C028AA88AF2495DB32B6AA21A1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:e5:b5:fa:a8:97:b3:fe:e2:52:9b:4f:9c:
                    a7:8a:d7:da:92:55:bd:09:c1:ce:b5:fd:8a:cc:54:
                    d6:68:9b:50:75:42:b3:99:6a:d0:a0:c3:10:d1:69:
                    6b:89:9f:d4:f6:70:be:d1:da:f5:2d:b3:06:cb:26:
                    fe:0b:d2:b4:6e:0f:27:04:f0:87:d6:cb:b3:80:74:
                    55:ab:37:8e:4a:de:76:ab:fc:6c:d1:a5:b7:2d:a3:
                    fc:3e:8d:e7:26:b2:65:19:03:04:12:9b:32:02:b1:
                    32:ce:19:11:44:9b:3e:36:84:8e:28:6d:ee:79:15:
                    df:00:c9:96:b2:ce:1b:07:d8:29:f4:c5:1f:62:fc:
                    12:35:4d:5a:1b:1a:bf:4e:49:26:4b:50:3a:26:42:
                    e5:18:fb:fb:a7:d5:98:44:59:cf:ad:e7:6a:db:f8:
                    f5:3e:39:e0:56:74:fd:e6:79:63:fd:0a:c7:c0:ad:
                    65:ed:fa:f8:2e:12:61:40:1b:3c:40:ac:b8:3e:c3:
                    82:dd:db:39:84:8f:a6:64:5d:47:31:1c:b6:ce:04:
                    18:83:25:8d:07:f1:a8:cb:ff:86:22:46:fe:1c:79:
                    61:6c:cc:61:37:12:5a:85:c9:69:08:71:88:44:32:
                    10:1a:1d:5b:05:d5:e8:a5:b6:c9:7d:21:cf:ee:f6:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:96:54:81:58:90:C0:28:AA:88:AF:24:95:DB:32:B6:AA:21:A1:E4
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38362e302f32332d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:db:5b:ba:51:49:b0:a7:86:0f:6f:49:1c:78:7f:b3:6f:c3:
         a2:ba:b7:7d:c5:d1:0e:1b:5b:e0:5a:96:b6:7d:ec:be:e7:21:
         f1:b0:fe:ef:b1:d9:c9:25:49:d0:f6:2b:be:52:f8:35:6c:26:
         09:97:da:1f:3a:c4:5d:81:fb:9d:3c:d6:70:10:27:80:21:85:
         21:c9:28:06:9e:10:08:cd:56:be:d7:83:40:87:e1:d7:45:24:
         4d:bb:43:d4:dd:60:b9:4f:c2:1c:18:50:96:38:70:e1:df:c7:
         7f:0a:20:27:3d:ef:31:ab:72:43:bc:a3:63:c5:b7:8a:e1:c5:
         90:a6:62:11:20:c4:3b:39:94:4b:38:af:8a:b2:41:40:df:5f:
         66:d4:a5:61:c1:0d:f9:a6:50:8e:36:31:5a:67:40:37:30:fc:
         35:be:54:93:7e:21:31:1b:4e:63:9f:f0:86:f4:e4:32:16:52:
         fc:7d:d2:11:01:d4:f5:6a:f1:d5:0f:6b:5b:4b:b2:8c:2b:2a:
         db:75:53:6c:64:66:85:90:3d:cb:98:e5:7d:59:2a:03:f1:c6:
         9d:aa:10:44:ca:ff:01:e1:ab:d5:50:f9:cc:03:f6:49:08:ff:
         96:c1:0e:a5:f6:6e:ba:a6:30:14:c7:ab:22:7f:14:87:af:19:
         67:10:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:11 2025 by rpki-client