Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa
File:                     3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          dlloXSMhj2H3A4bvx+rxm2r75ntnD0WLHSnpbjkuVn0=
Subject key identifier:   A3:7D:C6:29:4C:C3:0D:5C:D6:F0:A3:F1:B7:F1:A7:99:AD:DB:B4:24
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       758F71DCFE19B91397731EB5B3DAD81E70EF59C6
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 23:14:02 +0000
ROA not before:           Mon 04 Aug 2025 23:09:02 +0000
ROA not after:            Mon 03 Aug 2026 23:14:02 +0000
asID:                     36236
IP address blocks:        103.254.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 03:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8f:71:dc:fe:19:b9:13:97:73:1e:b5:b3:da:d8:1e:70:ef:59:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 23:09:02 2025 GMT
            Not After : Aug  3 23:14:02 2026 GMT
        Subject: CN=A37DC6294CC30D5CD6F0A3F1B7F1A799ADDBB424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:73:32:95:cd:33:56:57:9e:4b:9a:5f:44:
                    32:1d:f3:5c:f1:b3:2c:2e:c4:e0:23:c3:fb:4c:4e:
                    c0:89:0b:9f:4d:83:f8:3b:9c:2c:6d:10:9d:68:cb:
                    ee:65:29:4e:1d:b3:70:0d:58:2a:9e:3d:c2:46:6a:
                    ca:07:60:9f:b5:34:1e:f1:8c:7f:55:a0:15:6b:e4:
                    18:2f:83:9c:d7:99:61:17:e5:53:0f:a1:6f:ad:fa:
                    f7:36:bc:03:6e:88:07:cf:3d:5c:11:0a:37:a9:1a:
                    60:a1:09:45:55:9a:2e:1f:e9:7b:7c:7e:b3:95:ba:
                    b6:9e:7c:2c:ce:f5:98:b2:ff:7e:5b:97:c5:75:b4:
                    66:5e:cd:27:d2:0c:e8:e8:aa:0c:58:0e:ee:aa:1a:
                    dd:b9:cc:9e:7d:7a:cc:ad:29:5e:45:97:50:2e:df:
                    ab:ec:d2:99:8b:7b:e4:ca:3f:36:11:a2:92:16:16:
                    be:94:c6:f6:b0:f9:b5:3d:8f:e7:14:3f:bf:08:77:
                    8a:6e:fc:3d:e7:7a:28:fb:87:a7:18:13:e8:47:4f:
                    9f:5d:1d:15:f8:8a:93:01:97:56:a3:d5:86:47:33:
                    c6:06:87:d4:ae:a2:fd:38:f1:59:77:41:23:02:1a:
                    ba:9b:b2:31:72:41:d5:01:e9:4c:54:b6:dd:67:42:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:C6:29:4C:C3:0D:5C:D6:F0:A3:F1:B7:F1:A7:99:AD:DB:B4:24
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136312e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:1b:76:0e:08:74:f9:a5:75:0e:01:89:6a:0a:29:5a:b6:ce:
         c1:ec:62:0d:d4:57:b1:2e:41:19:03:f0:bc:09:5d:84:3f:15:
         a9:b1:43:b5:54:3d:c1:c1:6e:5e:e1:60:a2:47:53:49:63:45:
         27:a5:f1:50:ff:17:17:63:2d:88:b9:3c:cd:f2:47:c7:a9:eb:
         4b:a4:1e:68:08:5c:4f:c8:e6:85:7a:0a:8c:09:4e:f8:12:0b:
         bf:e5:56:32:bf:6e:0d:4a:45:06:18:d4:a4:0b:0c:d3:65:bf:
         84:fd:d5:44:bf:ef:75:ad:ef:09:d2:03:4e:0a:6b:4e:87:89:
         5e:8c:f5:f1:12:b8:ce:5e:86:de:14:7d:b3:0e:27:2b:30:03:
         86:61:45:75:85:77:ca:9d:b2:66:41:85:3d:70:3b:1b:99:72:
         53:82:77:d4:53:3a:a2:af:c2:4e:ea:f2:49:a2:1b:98:80:d1:
         c8:a3:e8:cc:ac:7f:8d:e4:eb:2b:a2:7f:5b:c6:fa:c2:f8:fd:
         67:02:53:41:29:5d:89:d0:15:de:03:a6:bb:fc:40:c3:f6:78:
         70:bf:3d:31:17:df:02:48:18:2d:d2:fe:cc:cf:20:86:b6:64:
         bd:3c:ed:e8:01:8d:15:59:a7:0c:6e:bf:3f:22:52:d1:1c:a1:
         21:19:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:40 2025 by rpki-client