Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          tUu1rNcuNzKYWxJxxO/OuyQrLRyhc4AELxhKKW7h/SQ=
Subject key identifier:   1D:50:66:2F:CC:6D:F7:51:10:FD:0F:C7:15:72:A9:63:C6:28:3B:14
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       7CE0E987A9E0F6B7DBBB911AD929F6D034946AA4
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 23:14:02 +0000
ROA not before:           Mon 04 Aug 2025 23:09:02 +0000
ROA not after:            Mon 03 Aug 2026 23:14:02 +0000
asID:                     36236
IP address blocks:        103.84.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 14:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e0:e9:87:a9:e0:f6:b7:db:bb:91:1a:d9:29:f6:d0:34:94:6a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 23:09:02 2025 GMT
            Not After : Aug  3 23:14:02 2026 GMT
        Subject: CN=1D50662FCC6DF75110FD0FC71572A963C6283B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:c6:2a:7c:10:59:b5:5b:e4:6d:3e:55:fa:
                    f5:bb:90:f3:21:2e:9d:8e:6d:37:57:03:db:a6:f0:
                    cb:0e:4a:5f:6e:08:7e:6e:69:b0:3f:92:78:2e:6e:
                    e6:24:12:32:c3:fb:30:cf:77:20:ca:5e:e7:af:ef:
                    64:e8:5f:40:3b:cf:6d:f0:68:1e:d6:3c:69:5a:27:
                    57:46:f2:4a:63:d8:6e:49:b6:8c:78:0f:67:0a:01:
                    e4:38:7b:6f:68:2e:31:83:4a:16:ca:4d:74:96:04:
                    63:76:b6:cc:e3:9e:68:97:8a:af:4b:d5:a6:7e:25:
                    a3:1b:c3:df:66:8e:76:b0:47:e0:dd:25:91:b6:bb:
                    0e:b8:54:1f:62:26:f8:c5:30:96:54:ba:95:72:f3:
                    7b:81:9d:e1:45:ee:04:a2:62:60:8a:b0:6b:b3:90:
                    80:53:8f:d4:3b:6a:e4:68:ee:e2:1e:a6:01:9e:2a:
                    5a:e1:57:55:9f:b7:de:eb:24:ed:b6:24:3b:03:c1:
                    2b:48:97:5e:e9:db:cd:8a:8c:ac:ca:6a:d6:f3:d2:
                    4d:66:05:90:24:3b:e0:f1:bb:f6:92:cb:00:96:72:
                    d8:07:06:18:61:92:33:bf:7d:2d:77:4c:0d:98:4f:
                    33:52:37:8c:62:06:08:de:8e:d6:54:b2:56:ba:17:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:50:66:2F:CC:6D:F7:51:10:FD:0F:C7:15:72:A9:63:C6:28:3B:14
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:ce:87:a7:7e:38:5c:a2:54:a9:90:00:13:82:4d:d4:99:
         84:d8:87:4d:a3:e4:23:d4:ab:e8:9b:0b:ae:ad:23:b7:3e:3a:
         14:53:11:2c:e2:09:57:2a:f9:c0:2f:16:73:aa:61:02:88:d0:
         7b:b3:c8:99:0a:9f:d4:fb:3d:3e:9b:cd:6d:30:c1:54:df:7c:
         41:b9:f6:5f:2e:39:35:f4:ad:53:7b:cf:38:37:a3:10:b3:75:
         c0:ff:b6:b9:ec:98:fd:89:ac:fb:17:ea:a8:b6:83:5b:14:a4:
         33:ad:36:08:1d:91:10:45:37:2a:c7:56:3c:5c:2c:de:5e:cb:
         ed:35:3d:4d:da:72:6a:76:ca:ed:31:89:a0:46:52:69:51:bc:
         51:05:b1:d7:1a:8b:7d:7d:5b:c9:7e:91:de:1d:f6:3d:0c:78:
         9c:24:27:25:43:57:d2:17:68:78:1a:e7:81:21:57:af:85:5b:
         dc:79:ed:8b:df:c2:26:a1:99:95:df:2b:d2:90:ec:b9:d3:4a:
         c0:bf:5f:0a:c8:1b:37:d1:94:70:72:be:74:1d:63:b4:0d:03:
         fe:96:11:f8:55:5b:36:df:b9:2f:20:1b:c7:79:9a:3c:88:f0:
         70:2b:7f:e7:1e:b3:28:fe:99:1c:46:b5:ff:61:c8:b8:f4:3a:
         23:74:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:04 2025 by rpki-client