Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31332e302f32342d3234203d3e203336323336.roa
File:                     35392e3135332e31332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          rRxDBPfgx4zcNe+dKpM3k63Ntn2yHRyT4JS59mHbfuc=
Subject key identifier:   C0:6E:F2:6A:31:71:99:6B:DC:E5:AF:85:3F:9E:FF:86:C9:79:D9:0B
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       3C8438377C5CB0C40978F62D57F79A8666BA5C70
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31332e302f32342d3234203d3e203336323336.roa
Signing time:             Sat 28 Feb 2026 10:13:07 +0000
ROA not before:           Sat 28 Feb 2026 10:08:07 +0000
ROA not after:            Sat 27 Feb 2027 10:13:07 +0000
asID:                     36236
IP address blocks:        59.153.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:84:38:37:7c:5c:b0:c4:09:78:f6:2d:57:f7:9a:86:66:ba:5c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Feb 28 10:08:07 2026 GMT
            Not After : Feb 27 10:13:07 2027 GMT
        Subject: CN=C06EF26A3171996BDCE5AF853F9EFF86C979D90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:a8:76:60:f8:46:0d:fd:c6:44:35:0c:c7:
                    db:ff:d3:13:cb:9d:de:26:ed:9b:db:ec:dd:98:0a:
                    94:cf:55:ce:ea:d5:4e:5c:da:b2:00:80:84:c3:ba:
                    88:26:25:47:da:66:0c:06:19:ab:dd:a4:c3:4f:df:
                    de:bc:73:a5:72:54:fa:62:dc:6a:03:75:fb:e4:7e:
                    70:8a:2e:85:f8:7f:0a:c7:a2:3d:98:8a:3f:2d:87:
                    31:51:75:4f:3b:57:d8:da:84:04:6a:e1:14:4d:17:
                    2f:a3:49:e8:98:63:5f:3e:52:00:e4:25:58:83:38:
                    98:8a:4b:40:28:7f:c8:4a:21:25:8e:f5:2f:f7:7f:
                    c9:86:7d:f7:4a:6a:eb:80:95:20:2e:35:7e:34:fb:
                    6c:dd:b6:d4:63:7f:d3:87:0e:38:ea:65:df:e0:63:
                    25:ef:63:e1:3a:f9:b9:7c:a9:ce:0e:47:ee:9a:34:
                    a0:02:1a:f2:ff:c9:02:85:01:cc:f9:8d:b2:75:ba:
                    45:9e:92:ea:10:4c:01:57:7d:ee:f5:bf:02:48:74:
                    5f:23:8d:56:f3:dc:4d:d8:9b:d5:17:50:4d:a9:d5:
                    31:3b:d4:ea:c8:6e:9e:d3:5b:4d:7f:23:de:46:06:
                    df:c2:a2:a1:1c:51:44:a4:6a:fb:4d:a3:80:dc:a9:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:F2:6A:31:71:99:6B:DC:E5:AF:85:3F:9E:FF:86:C9:79:D9:0B
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31332e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:33:7a:43:3e:ac:3e:b2:2a:76:ad:ed:16:8d:46:bb:0b:b1:
         cf:d1:18:69:16:d4:f4:be:2c:b1:db:9e:94:04:a8:bd:d2:23:
         be:42:9e:57:48:e0:5c:f0:5c:9e:52:c6:c7:e3:27:e0:c1:be:
         cd:a9:7a:49:54:d8:7a:25:28:e4:9b:c0:02:67:82:cd:23:f8:
         d9:cb:4e:45:4a:cf:4b:e8:fd:e4:4e:20:b5:78:f8:c7:6b:b9:
         5e:21:07:47:14:31:96:ce:a8:c3:c2:5b:f1:bf:01:f8:bd:9c:
         9b:de:3e:6f:e9:04:7c:0e:71:40:50:a6:ac:74:50:52:7b:b7:
         c7:89:ca:8b:1a:e1:fc:38:fa:3c:fc:36:60:3e:38:a3:a8:56:
         51:8d:af:f9:8b:01:80:67:57:13:a6:a3:87:a9:f4:31:88:4c:
         87:41:ae:b5:fa:9e:f5:fe:26:99:0e:99:5b:40:81:28:76:fd:
         21:8d:ed:a6:db:c1:11:57:52:46:61:c1:44:fb:ec:be:d1:f6:
         05:ff:0f:22:84:99:05:60:c6:64:e8:d5:3f:3a:2d:e3:e6:12:
         5c:a8:8c:15:f2:91:02:2c:70:b4:3e:e2:ec:da:46:62:94:4e:
         3a:1b:dc:24:7c:bb:a0:fe:69:bc:ce:b5:08:9d:d3:47:68:5a:
         fb:24:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:24 2026 by rpki-client