Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38352e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          IvC6wplZsvhQIcvTpp6OC0XJcEuIvfUlFRmDCtw6J9Y=
Subject key identifier:   1B:9F:CB:15:26:8E:81:5D:64:B5:87:A7:E2:21:98:98:1C:43:BF:01
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       75145B5696134E23E73C71CA8C3AE0A97F25D224
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 23:14:02 +0000
ROA not before:           Mon 04 Aug 2025 23:09:02 +0000
ROA not after:            Mon 03 Aug 2026 23:14:02 +0000
asID:                     36236
IP address blocks:        103.6.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 18:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:14:5b:56:96:13:4e:23:e7:3c:71:ca:8c:3a:e0:a9:7f:25:d2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 23:09:02 2025 GMT
            Not After : Aug  3 23:14:02 2026 GMT
        Subject: CN=1B9FCB15268E815D64B587A7E22198981C43BF01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:0d:bd:b3:37:97:9c:d7:1a:7d:69:5c:a7:
                    05:1c:3d:c5:cb:54:e3:60:93:e0:e1:01:ef:2a:29:
                    d7:fe:33:42:0b:e0:00:03:73:21:33:ea:a2:39:53:
                    1c:55:b4:54:92:8c:42:c4:bf:46:71:92:63:7d:a7:
                    a1:5d:37:c8:2a:ec:cf:bb:b0:c6:a1:8f:eb:fe:4e:
                    e9:1d:e2:06:24:70:da:2d:40:b8:92:dd:ff:ca:0d:
                    16:a8:bb:4e:ed:5c:2a:91:cf:b5:21:ab:74:9a:78:
                    52:2c:6e:18:93:00:3e:32:2e:ca:a1:85:ac:6f:b1:
                    74:d4:05:b2:4d:d2:dc:97:66:5b:d4:2a:e2:4a:8f:
                    da:85:e2:94:fc:82:80:a1:a0:89:19:fb:27:06:26:
                    c2:28:12:8f:33:05:f6:48:b4:12:77:41:44:f1:20:
                    66:cd:7e:52:d6:aa:19:95:2f:a4:d5:89:7d:12:08:
                    80:fe:66:dc:5f:9c:10:1f:7b:eb:36:5d:71:ff:58:
                    1d:48:07:82:e1:af:40:2e:b6:3c:b0:0f:72:65:be:
                    2e:f0:a2:de:1e:9f:a5:42:f6:47:4d:a0:03:0d:27:
                    e2:63:fd:af:9b:d3:3f:c9:58:88:d6:db:70:b9:35:
                    b2:e5:d3:26:a7:d0:0d:6b:3c:60:91:89:46:3d:1b:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:CB:15:26:8E:81:5D:64:B5:87:A7:E2:21:98:98:1C:43:BF:01
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:85:32:c3:d8:e8:ed:b2:c4:8c:3f:a4:f7:1f:88:74:a5:
         0b:61:f3:c0:7c:c1:1c:e7:ab:e1:ab:59:03:72:25:dc:8c:e9:
         c2:b1:42:e3:59:17:1e:89:12:d7:ad:d9:45:62:f9:6f:58:3a:
         98:3c:42:e0:57:24:7f:46:bd:ea:f7:26:3e:d3:a8:01:44:98:
         d5:6d:5b:ff:d8:38:15:e4:a6:1f:6c:b0:a9:fc:f5:22:39:37:
         27:c8:5a:45:a5:cf:9c:67:3b:58:e6:53:ab:75:eb:2d:e4:81:
         d9:ee:47:62:2e:f7:fc:ea:44:b3:e0:8e:e0:33:ee:5f:6a:2b:
         d1:39:5b:9a:e7:4e:11:14:57:3c:2e:6d:79:a8:c6:6d:d4:c5:
         9d:0b:90:10:4f:b4:1a:7b:63:e4:ce:86:03:a9:fd:41:01:5b:
         ea:cf:51:a4:68:31:f8:49:ca:da:67:9a:74:01:b2:cc:41:a3:
         ef:a6:f9:1b:27:2e:8b:64:d8:c4:57:5b:27:7f:f8:21:67:fb:
         f2:27:e4:63:b5:c6:64:02:61:fa:d5:15:ed:24:45:9e:9a:84:
         cf:d6:74:6c:6d:13:98:b0:22:86:48:c1:b9:85:99:48:a5:3d:
         0b:ca:57:05:e8:50:95:6b:39:98:03:50:a4:88:8b:5d:8c:e2:
         71:0e:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:21 2025 by rpki-client