Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135322e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          JHkCyTG8zDSZ3hH6U/zKftFLAsmriDHfovBxfaBjPIk=
Subject key identifier:   3D:DE:7B:F4:E1:30:27:0C:7B:78:74:00:40:E2:C0:85:AE:E5:67:30
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       3950E669E0C4FE71B8E16F8B6A016B7431964970
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135322e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 23:14:01 +0000
ROA not before:           Mon 04 Aug 2025 23:09:01 +0000
ROA not after:            Mon 03 Aug 2026 23:14:01 +0000
asID:                     36236
IP address blocks:        103.84.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 14:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:50:e6:69:e0:c4:fe:71:b8:e1:6f:8b:6a:01:6b:74:31:96:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 23:09:01 2025 GMT
            Not After : Aug  3 23:14:01 2026 GMT
        Subject: CN=3DDE7BF4E130270C7B78740040E2C085AEE56730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:a4:aa:44:83:1c:7c:42:06:4d:2e:6c:b3:
                    27:66:c4:fb:c0:f0:a9:e2:ef:a6:e1:2f:a5:6c:00:
                    b0:5f:71:44:62:0b:34:43:b7:60:68:a8:30:42:3c:
                    43:20:98:12:29:20:74:96:a5:76:3e:c4:53:da:6b:
                    bf:94:0e:4a:12:a7:e2:39:2f:f5:1d:48:f4:f9:85:
                    16:5b:fb:74:19:00:bc:53:03:2a:48:b1:e9:68:ba:
                    33:62:52:c5:08:ac:bd:a0:41:cc:ea:38:c2:c6:a7:
                    b9:cb:4a:b6:95:a5:4f:b3:93:f4:1c:02:db:0d:ed:
                    47:f6:7e:4b:48:1d:84:73:43:9a:f6:ca:35:13:05:
                    3d:be:b8:af:eb:6d:98:26:59:71:6d:35:82:cd:4e:
                    33:27:80:df:a6:77:dc:77:c4:07:61:95:93:1c:fa:
                    f5:74:9e:96:e9:33:3a:ba:2c:71:23:04:76:42:2f:
                    7c:70:16:84:5e:cc:3e:15:2f:12:65:ec:47:ef:e7:
                    3c:ad:fb:2d:93:f9:c7:0f:0b:83:b7:39:de:35:91:
                    49:a5:09:e3:2e:ff:3f:4c:a1:d2:aa:f1:13:a1:92:
                    ce:01:87:3e:ef:be:cb:2e:9b:71:a2:63:dd:c6:d4:
                    90:86:61:c2:4e:5a:c5:4f:ef:ad:b2:f5:8e:f1:21:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DE:7B:F4:E1:30:27:0C:7B:78:74:00:40:E2:C0:85:AE:E5:67:30
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:90:d2:fc:eb:94:56:88:7e:42:90:bf:f3:c6:b9:2b:ca:
         87:ef:ce:4d:47:52:51:4f:1b:83:1c:49:82:79:da:ea:ed:86:
         d8:de:bc:64:3c:d0:4b:b7:e2:d3:d7:7a:3c:ea:5b:2c:77:81:
         99:67:1d:44:c0:ea:09:69:8a:41:ac:a1:27:fd:8b:e3:0b:cb:
         e3:5e:ba:74:33:a0:b2:e7:a0:be:82:de:0a:f1:7a:4b:e8:ce:
         bf:d9:b1:c3:fd:64:dc:b1:b3:b7:0a:53:d3:11:a4:be:5a:5b:
         a1:98:38:58:03:8a:60:8f:01:9c:ae:25:0d:44:19:62:f3:ed:
         ea:f3:f6:c8:42:85:66:66:ca:57:00:a9:22:d2:2e:2a:f6:cd:
         0a:79:61:dd:98:bc:17:5e:83:f1:1c:ff:0b:2e:91:8d:b1:b4:
         de:24:cc:4a:13:92:e6:25:e9:c2:e8:ac:05:a0:82:17:47:9a:
         75:34:75:4b:04:21:6e:70:53:5c:ad:17:20:5a:03:cf:25:ed:
         12:8c:cc:9c:32:34:bd:b2:2b:b4:9f:de:9b:53:3c:e1:94:57:
         01:6a:d9:85:2e:63:59:e2:32:ce:a2:31:3b:97:e9:60:4a:a5:
         4e:92:d4:af:aa:42:cb:ab:3c:a6:82:28:6e:0d:2e:ee:0d:b6:
         8a:30:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:53 2025 by rpki-client