Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38362e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          xtyeNYErlHkIeLzxhC4QzxZhNYxHQnEH4QW9Hj869a4=
Subject key identifier:   27:6A:ED:4F:EA:92:C8:57:74:A6:7A:45:A1:FD:1A:11:5B:B1:0A:4B
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       2DCB7CE98B1F94B00DADEFD310BB46E2043A3A11
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 23:14:01 +0000
ROA not before:           Mon 04 Aug 2025 23:09:01 +0000
ROA not after:            Mon 03 Aug 2026 23:14:01 +0000
asID:                     36236
IP address blocks:        103.6.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 14:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cb:7c:e9:8b:1f:94:b0:0d:ad:ef:d3:10:bb:46:e2:04:3a:3a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 23:09:01 2025 GMT
            Not After : Aug  3 23:14:01 2026 GMT
        Subject: CN=276AED4FEA92C85774A67A45A1FD1A115BB10A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:e3:f7:94:50:2c:24:dd:57:98:6c:f6:d4:
                    cd:a8:2c:83:37:34:37:96:e4:89:85:f6:5f:f5:e1:
                    89:92:85:39:9a:4b:1e:14:8f:5f:49:b3:10:1c:db:
                    2b:db:80:6a:b9:cc:3e:16:10:2a:df:6e:0b:6d:16:
                    c3:21:05:ac:e5:a7:31:4f:d6:0f:00:ce:37:c0:44:
                    df:2c:b6:39:29:48:f7:14:d2:e3:4a:17:2f:d9:17:
                    4a:82:71:90:86:27:27:c3:a0:7b:17:d7:71:1d:58:
                    d5:c9:c6:5c:81:d1:7f:ee:63:76:6e:c9:f8:ff:f3:
                    60:03:03:dd:70:b8:b6:1e:dd:17:55:84:98:56:06:
                    99:2d:d8:e9:b3:df:e8:26:b2:ca:d1:07:f5:8f:81:
                    c3:46:b9:70:24:4e:ee:7e:4a:8e:e4:cc:bb:c5:88:
                    d2:84:d6:b9:67:6b:d3:33:bc:18:48:f9:be:8f:ca:
                    99:1b:26:82:3b:d7:c9:62:60:f5:6b:50:95:72:ec:
                    93:8c:03:10:93:b4:8c:d9:ef:66:3b:9a:e5:a9:3a:
                    8a:61:ca:c1:02:cd:93:fc:e3:33:f2:cd:10:57:75:
                    74:89:9b:f6:fd:bd:6a:19:ec:18:aa:70:32:36:70:
                    2e:1f:cd:49:43:df:55:23:7e:98:80:d6:fb:28:3c:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6A:ED:4F:EA:92:C8:57:74:A6:7A:45:A1:FD:1A:11:5B:B1:0A:4B
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38362e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:57:49:52:e8:be:12:08:ee:1b:e7:27:37:ab:40:07:6d:
         4b:32:fa:91:dc:60:1c:44:60:c7:a7:a4:e8:4e:35:cf:4f:c9:
         c4:22:33:58:f1:d3:88:b3:5b:aa:c8:31:93:a6:2e:03:6c:81:
         e3:57:77:23:9d:c7:22:ce:50:9a:df:34:26:bf:66:97:4e:f5:
         2d:a8:98:f7:77:a2:fd:93:2d:63:17:92:fc:37:aa:04:33:3d:
         51:31:2d:2d:4f:b1:da:61:c2:d3:b1:fd:4d:54:f3:5b:86:fb:
         6e:a4:a6:00:9a:62:ff:c5:ef:9f:dc:f6:74:0d:42:28:2a:27:
         3a:13:ae:d9:83:9b:f4:6e:50:f1:36:ea:13:79:54:ba:b4:f6:
         8d:b8:6e:4b:5f:04:db:0b:64:61:5b:25:eb:a3:c1:95:40:ed:
         69:12:ad:89:2e:3b:3e:d4:78:5e:7c:a5:44:51:ee:56:ca:c1:
         99:a2:99:e5:93:8b:88:1b:9a:79:0a:cf:ef:cc:51:b4:9d:0f:
         fa:0f:8c:41:c3:f9:e1:b9:4c:79:46:da:a7:9e:0c:07:71:8e:
         83:94:7b:00:13:3d:ff:a0:90:fd:1d:80:c7:f1:7f:d0:f9:f8:
         72:9e:3f:0c:7b:a1:7f:be:d5:29:cc:1a:67:f4:d4:84:60:6c:
         a1:27:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:26 2025 by rpki-client