Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          mk9bih5iIdTPHtkygon3Np0B0EIvgsZzt2bvzLKQbn0=
Subject key identifier:   D4:7D:59:B6:C6:62:34:CA:DD:D9:98:7B:57:19:70:A9:B4:3C:CB:16
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       59B6A867637FC36D1EB11FAFA7271D1757F453E1
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 23:14:02 +0000
ROA not before:           Mon 04 Aug 2025 23:09:02 +0000
ROA not after:            Mon 03 Aug 2026 23:14:02 +0000
asID:                     36236
IP address blocks:        103.6.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 18:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b6:a8:67:63:7f:c3:6d:1e:b1:1f:af:a7:27:1d:17:57:f4:53:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 23:09:02 2025 GMT
            Not After : Aug  3 23:14:02 2026 GMT
        Subject: CN=D47D59B6C66234CADDD9987B571970A9B43CCB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:90:4f:72:ff:a4:49:2b:81:10:cd:8a:e5:
                    d5:08:a1:48:c3:57:fd:fe:67:e4:2b:99:c6:01:69:
                    8b:d1:17:90:01:03:87:4c:84:9b:0d:e7:98:f2:56:
                    02:7b:6e:d3:d0:74:09:5b:a8:1a:eb:8f:93:83:1e:
                    76:9b:66:54:d5:b3:64:03:e2:94:f5:ff:dc:91:5e:
                    67:be:10:26:96:f2:82:d3:37:e1:ef:82:e5:2d:4e:
                    cf:fa:eb:5d:c2:73:b6:85:52:d6:57:c4:c3:15:5c:
                    29:00:2d:b7:f2:aa:5f:64:a8:39:fe:5b:8c:57:66:
                    94:b7:46:5d:4f:e4:4a:48:92:f3:5a:5b:c6:c0:2c:
                    68:d3:6f:3b:d6:21:7c:11:e4:2b:11:be:91:7f:03:
                    72:07:2d:06:cc:bf:c2:6b:0a:54:1a:d6:a0:e0:10:
                    ea:4d:db:3e:8c:eb:f7:6c:b9:55:bd:ef:73:de:9c:
                    fe:58:ef:09:e8:21:c1:bb:c1:bb:dc:0e:4b:99:70:
                    bb:9f:79:87:0f:58:81:ae:af:10:58:56:64:d7:4b:
                    8d:7d:7e:47:d4:ca:38:f7:98:71:da:6c:eb:ee:b6:
                    3a:8f:11:c1:c8:4a:08:42:c3:c4:5c:b3:0c:9a:58:
                    02:dd:5d:e8:81:62:2f:a6:1e:78:aa:b4:b7:77:29:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7D:59:B6:C6:62:34:CA:DD:D9:98:7B:57:19:70:A9:B4:3C:CB:16
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:4e:c2:70:8b:c5:4e:b4:53:f1:10:ec:55:b5:f7:ab:38:
         51:5c:b4:cc:b3:4e:61:93:fa:19:f9:9f:a5:21:b4:5e:e5:eb:
         5c:94:52:3b:f2:c9:c5:0c:99:66:da:4f:75:1d:4f:f1:af:7c:
         09:be:7a:41:f3:46:8f:2d:b9:a4:5e:37:4b:b4:f6:0a:5e:18:
         5d:87:bb:eb:39:37:92:15:96:1f:9d:c9:47:ba:40:4c:87:dd:
         07:38:d8:33:51:0e:f9:0b:f4:3a:4b:22:97:7c:1d:8e:61:bb:
         57:17:9c:e3:c8:55:bb:ea:ed:f9:11:b5:31:11:22:18:79:21:
         fa:bb:25:82:8f:9e:55:33:1d:60:00:aa:24:24:cf:05:6b:b9:
         1c:7f:e9:c0:e3:5f:44:0b:45:e4:fa:54:63:7f:05:35:da:fb:
         f3:97:38:71:52:b2:c0:9d:5b:68:ff:19:55:ef:55:ef:60:4a:
         8d:67:7c:40:78:07:12:98:ec:63:40:36:16:92:b8:70:6a:1c:
         84:19:fd:0f:93:de:5d:a3:c6:53:7c:94:dc:f7:c1:c8:77:aa:
         0c:20:46:cd:eb:a3:8e:9f:41:62:21:f8:58:30:ed:e1:7a:ca:
         cb:65:e0:a7:ec:00:ee:a4:b4:f0:f5:50:69:a8:c0:2c:bf:81:
         4e:41:50:e8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUWbaoZ2N/w20esR+vpycdF1f0U+EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MDgwNDIzMDkwMloX
DTI2MDgwMzIzMTQwMlowMzExMC8GA1UEAxMoRDQ3RDU5QjZDNjYyMzRDQURERDk5
ODdCNTcxOTcwQTlCNDNDQ0IxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMcHkE9y/6RJK4EQzYrl1QihSMNX/f5n5CuZxgFpi9EXkAEDh0yEmw3nmPJW
Antu09B0CVuoGuuPk4MedptmVNWzZAPilPX/3JFeZ74QJpbygtM34e+C5S1Oz/rr
XcJztoVS1lfEwxVcKQAtt/KqX2SoOf5bjFdmlLdGXU/kSkiS81pbxsAsaNNvO9Yh
fBHkKxG+kX8DcgctBsy/wmsKVBrWoOAQ6k3bPozr92y5Vb3vc96c/ljvCeghwbvB
u9wOS5lwu595hw9Yga6vEFhWZNdLjX1+R9TKOPeYcdps6+62Oo8RwchKCELDxFyz
DJpYAt1d6IFiL6YeeKq0t3cpawUCAwEAAaOCAjcwggIzMB0GA1UdDgQWBBTUfVm2
xmI0yt3ZmHtXGXCptDzLFjAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgZ0GCCsG
AQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzMvMzEzMDMzMmUzNjJlMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzYz
MjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABnBlQwDQYJKoZIhvcNAQELBQADggEBAGMMTsJwi8VO
tFPxEOxVtferOFFctMyzTmGT+hn5n6UhtF7l61yUUjvyycUMmWbaT3UdT/GvfAm+
ekHzRo8tuaReN0u09gpeGF2Hu+s5N5IVlh+dyUe6QEyH3Qc42DNRDvkL9DpLIpd8
HY5hu1cXnOPIVbvq7fkRtTERIhh5Ifq7JYKPnlUzHWAAqiQkzwVruRx/6cDjX0QL
ReT6VGN/BTXa+/OXOHFSssCdW2j/GVXvVe9gSo1nfEB4BxKY7GNANhaSuHBqHIQZ
/Q+T3l2jxlN8lNz3wch3qgwgRs3ro46fQWIh+Fgw7eF6ystl4KfsAO6ktPD1UGmo
wCy/gU5BUOg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:26 2025 by rpki-client