Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa
File:                     35392e3135332e31322e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier:          GR2NA4AMeysYd17sKi1wGTdEm4/WeHQKISTNi3UqIPo=
Subject key identifier:   0C:FD:86:7E:00:5D:5B:8C:F0:01:32:5D:7A:AE:66:DF:B7:5D:6E:93
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       444C7C73C9B61C77FE2954E11C8902FD65E2F8B0
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa
Signing time:             Tue 28 Jul 2026 19:29:13 +0000
ROA not before:           Tue 28 Jul 2026 19:24:13 +0000
ROA not after:            Tue 27 Jul 2027 19:29:13 +0000
asID:                     36236
IP address blocks:        59.153.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4c:7c:73:c9:b6:1c:77:fe:29:54:e1:1c:89:02:fd:65:e2:f8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Jul 28 19:24:13 2026 GMT
            Not After : Jul 27 19:29:13 2027 GMT
        Subject: CN=0CFD867E005D5B8CF001325D7AAE66DFB75D6E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:99:78:84:c0:82:e2:58:99:d2:84:e0:bc:
                    08:1e:67:69:c7:2c:66:56:97:9c:5b:9b:71:6d:fa:
                    79:6a:de:85:9f:4c:fd:3d:6b:07:72:6c:7d:07:02:
                    05:b8:97:21:c4:5a:39:90:8c:0a:27:29:8d:6c:e3:
                    a1:46:69:df:f7:cd:55:03:ab:ea:68:19:76:a0:fd:
                    9a:5f:5d:0f:f9:e5:78:3d:1f:84:bd:94:81:eb:85:
                    23:ba:38:0d:94:f8:df:bf:58:50:3e:5c:fc:46:e1:
                    7e:08:a9:92:ae:ab:a4:34:34:b6:09:7d:a7:5a:ca:
                    57:74:46:11:20:e8:9c:3a:14:e5:3e:8d:36:48:0f:
                    cf:50:c2:31:4f:95:4b:ed:74:89:0c:18:61:f7:04:
                    72:f4:a1:27:f2:6d:33:46:4a:05:ac:1a:d0:e0:d4:
                    0f:18:ae:a2:27:33:0c:1e:90:42:00:6c:1f:d3:fd:
                    8f:83:b6:0b:f4:36:04:bd:e3:a9:36:59:e5:a3:5e:
                    3b:8f:8d:e2:cf:1b:2c:86:9c:fd:61:c4:cc:07:a3:
                    a7:1a:03:26:38:d9:01:89:da:14:94:b5:fd:41:ba:
                    81:fd:1a:3b:40:ab:b0:1c:a0:c6:0d:a6:13:8b:56:
                    b1:ba:bb:3e:18:4b:a2:a6:dd:40:cf:b4:ae:9f:23:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FD:86:7E:00:5D:5B:8C:F0:01:32:5D:7A:AE:66:DF:B7:5D:6E:93
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31322e302f32332d3233203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:18:86:ab:c0:c8:a7:be:a7:ec:91:83:f3:27:2b:ef:53:c9:
         59:45:01:08:15:34:f0:a0:85:71:59:ef:08:1e:80:e0:b6:9e:
         93:86:c8:32:cb:75:c5:0d:d4:dc:56:38:94:b1:fb:8f:a9:8a:
         8b:42:9f:b0:f2:16:10:7e:96:de:e4:ae:54:0d:91:36:65:65:
         25:b4:88:14:4c:31:db:0f:b8:fe:a3:14:21:5d:9c:ef:9f:f2:
         9e:6f:8b:ec:55:a7:c2:98:a2:8e:8e:a1:2f:27:d3:8b:5f:f7:
         56:33:89:72:2e:ca:d1:86:fe:75:4f:3d:6f:87:49:bd:d3:df:
         41:ee:6e:9e:d4:97:f0:b7:b7:e1:95:0a:c9:b4:1c:f4:45:eb:
         d8:68:46:e9:a5:f9:38:e4:f6:82:95:71:56:1b:d2:48:c7:38:
         8c:22:10:02:1a:df:6c:5e:58:e7:35:61:34:38:fe:c5:2e:c2:
         43:15:42:d6:09:d5:2b:48:96:ca:6c:0c:59:1c:af:83:28:79:
         b0:76:c2:2a:d8:5a:0f:f2:6e:b9:8d:95:7f:cc:d4:a2:c7:20:
         e9:16:64:d8:94:52:8a:dd:b3:b4:3c:d9:b9:69:6a:b3:3e:28:
         1f:4a:55:c4:a8:23:61:e6:09:4a:d8:c6:d9:0e:d3:0a:27:52:
         39:9f:c4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:14 2026 by rpki-client