Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa
File:                     3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          yhBIua7jbVYWioDMlfCf8z8V2rPeJabGzCVmsHONy3M=
Subject key identifier:   03:E0:6F:8A:08:CC:57:41:E0:96:6F:CC:12:02:EE:9F:CD:E7:31:E1
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       49A183DB3B429C7C6C657268BA3896640666B416
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa
Signing time:             Fri 04 Sep 2026 20:29:14 +0000
ROA not before:           Fri 04 Sep 2026 20:24:14 +0000
ROA not after:            Fri 03 Sep 2027 20:29:14 +0000
asID:                     36236
IP address blocks:        103.254.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 07:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a1:83:db:3b:42:9c:7c:6c:65:72:68:ba:38:96:64:06:66:b4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Sep  4 20:24:14 2026 GMT
            Not After : Sep  3 20:29:14 2027 GMT
        Subject: CN=03E06F8A08CC5741E0966FCC1202EE9FCDE731E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:ed:bb:4a:d1:f9:39:bb:a4:79:fe:1c:31:
                    ad:b5:ba:c1:67:42:6a:a0:64:d3:bb:c8:7e:de:a8:
                    16:bb:1d:1f:4c:d9:53:19:0e:95:36:09:d9:bb:bc:
                    61:3e:48:b9:a2:20:9c:83:af:f8:3e:1f:98:4a:a7:
                    08:96:b9:b4:09:e2:ce:e8:cf:bf:51:32:ac:07:3b:
                    03:76:45:88:03:72:93:8f:1c:19:b5:82:ea:10:54:
                    b3:3c:9f:5c:ca:d7:c0:7c:38:15:72:6c:d8:94:64:
                    f9:da:2f:56:f9:ca:f1:0e:a0:e6:31:f6:e7:b5:95:
                    d9:f4:e6:62:46:23:11:33:05:1e:a1:dd:98:9f:fc:
                    d3:43:ad:2a:7a:c1:03:71:03:29:21:b6:5e:32:fc:
                    8e:c2:c7:29:dd:d4:c6:d5:ae:94:b8:2a:3c:cc:63:
                    f7:f3:33:4d:d2:ef:09:ec:8c:24:1e:9b:5a:8a:f6:
                    6c:69:6b:a6:0d:82:4f:d9:0a:ec:85:05:bb:6e:31:
                    a2:ad:57:e3:da:39:07:ea:93:2e:d3:6d:11:75:5f:
                    57:89:8d:9d:0f:38:13:43:b9:1c:11:db:42:87:24:
                    e0:b7:f2:e0:af:88:ea:65:24:c7:93:7a:0f:95:a6:
                    18:5c:20:10:2b:a5:18:cd:15:b4:d4:28:4b:7a:21:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:6F:8A:08:CC:57:41:E0:96:6F:CC:12:02:EE:9F:CD:E7:31:E1
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:56:88:44:3f:11:2d:a2:b7:f0:8f:f6:e0:40:39:9e:df:
         39:f9:6f:43:b4:3a:aa:79:48:9f:76:62:f5:f5:3e:78:82:a3:
         69:57:fd:4d:df:e8:19:9c:9c:fb:de:81:17:3f:b1:5d:b1:b2:
         e0:2f:1f:0d:ed:1b:85:ff:c6:3a:c7:57:9a:11:e0:ed:38:99:
         9f:6a:f8:9c:16:2d:93:38:28:8e:f5:65:6e:37:2f:93:fa:50:
         8e:3b:fe:77:fd:17:07:dd:2e:7c:54:ab:07:dc:8b:53:bf:82:
         0c:58:df:05:d2:f2:0f:66:d7:a5:95:f5:ad:80:86:1e:56:b7:
         3f:d4:cb:64:00:5e:06:b9:2b:79:54:67:12:e5:88:a8:9f:74:
         9e:aa:e9:e5:ce:b0:3f:34:36:5c:80:ce:24:dc:d9:27:2f:0a:
         27:0d:e2:2b:d4:f5:07:30:0c:53:ea:68:f8:26:14:0c:72:29:
         8b:7d:a7:b6:f5:e2:e0:7e:f9:02:a0:c6:cd:cc:e4:21:36:27:
         26:7b:66:d8:c7:53:36:76:02:1f:90:3a:cb:24:5e:02:88:16:
         c6:79:7e:0d:9e:2a:aa:71:1c:34:1a:59:1f:f0:9d:2f:32:f0:
         53:98:6a:69:05:b3:eb:6b:6c:4f:fa:28:7f:a1:75:80:52:31:
         b9:4f:b1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:07:44 2026 by rpki-client