Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20323134343531.roa
File:                     3130332e3234342e3232362e302f32342d3234203d3e20323134343531.roa (raw, json)
Hash identifier:          g4JId+v3UNbmSA3F2ovECdVzf7QMh+84PzJXxRokrCE=
Subject key identifier:   77:5C:1E:9B:A5:C8:41:A1:48:1A:1C:EB:B0:87:E4:5D:54:2E:70:A0
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       2D36730D9DA6088EB6D4E72E4AF83FE2304C7E7E
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20323134343531.roa
Signing time:             Tue 08 Apr 2025 02:40:47 +0000
ROA not before:           Tue 08 Apr 2025 02:35:47 +0000
ROA not after:            Tue 07 Apr 2026 02:40:47 +0000
asID:                     214451
IP address blocks:        103.244.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 13:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:36:73:0d:9d:a6:08:8e:b6:d4:e7:2e:4a:f8:3f:e2:30:4c:7e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Apr  8 02:35:47 2025 GMT
            Not After : Apr  7 02:40:47 2026 GMT
        Subject: CN=775C1E9BA5C841A1481A1CEBB087E45D542E70A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:b7:27:cd:17:53:67:8a:ad:37:dd:f9:25:
                    6a:2d:9c:c1:10:f1:52:f3:d8:18:c0:95:e1:75:fe:
                    ad:1a:f5:11:fa:1e:ba:9e:bf:be:37:2a:5b:06:9b:
                    c1:e2:08:f7:f8:ef:e3:ae:6c:8c:04:4f:e9:87:b4:
                    2b:ad:af:34:b1:ea:09:79:ab:5b:1f:3f:36:f7:6f:
                    0b:9d:75:52:d8:65:a8:30:38:41:6b:4b:9b:cb:15:
                    4c:93:32:7f:5f:ca:b8:fa:08:81:0c:91:43:83:63:
                    a8:ad:82:49:01:ca:5e:24:08:7a:d1:20:fc:30:a1:
                    a8:64:77:2d:31:83:8f:9b:d9:69:81:aa:fc:1e:7e:
                    1b:75:1a:97:a0:f4:b9:e8:5e:d0:f9:64:c2:4a:ee:
                    82:c9:76:54:d2:6e:15:6c:4b:18:9d:81:e9:c6:26:
                    ec:7b:32:eb:85:99:bb:3c:6d:5a:9d:9f:bd:0e:b9:
                    99:9b:c6:61:cb:09:80:d6:59:11:51:a4:b5:83:6a:
                    35:0f:9d:d1:fb:4b:11:38:1f:d5:4a:bf:39:00:51:
                    c1:52:30:62:99:ae:e4:eb:78:ac:9f:c0:53:9e:77:
                    d5:da:12:97:43:88:0a:fd:cc:26:08:0f:5c:db:26:
                    81:7d:cd:c4:68:a3:9e:6b:b3:f1:f7:30:d1:f3:a5:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5C:1E:9B:A5:C8:41:A1:48:1A:1C:EB:B0:87:E4:5D:54:2E:70:A0
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/3130332e3234342e3232362e302f32342d3234203d3e20323134343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ef:1f:58:fa:d9:8b:32:6e:aa:e5:e3:d7:a5:71:61:3c:20:
         92:8a:91:b4:f5:af:24:83:76:3f:3d:94:fe:b3:53:d4:fb:91:
         d4:a2:8d:f1:ac:ee:bd:58:10:e2:86:c5:9d:87:57:b9:72:1f:
         c9:5d:64:87:10:08:42:d5:cf:62:ad:8b:c1:83:61:b3:5c:a4:
         a0:fd:9e:2b:ca:ce:3b:63:23:57:4c:9f:cd:b8:26:53:f3:fd:
         a7:fe:60:8b:45:f0:4d:9e:b2:2b:cf:3b:c1:79:86:8b:f9:82:
         8c:a4:87:81:f9:8f:43:60:d0:67:b5:88:29:97:ab:e1:40:07:
         5f:13:c0:6b:8c:54:ab:fd:36:6c:c3:2d:15:86:28:3b:1f:6b:
         37:21:0e:60:05:c3:d8:ee:9c:cb:61:d1:1d:98:59:d6:50:d6:
         54:04:e6:51:af:50:4d:13:21:93:87:9d:d8:22:bb:4c:bb:68:
         99:fc:26:09:f7:33:dd:87:af:1d:b3:c2:18:36:4f:9b:da:8d:
         c3:f0:59:58:7e:6f:6c:a2:b3:cf:c2:98:64:b2:fe:fe:a2:99:
         61:52:38:79:1b:55:84:d3:6e:67:98:09:5b:f2:4e:64:97:65:
         58:33:0a:fb:6d:c2:a9:46:0b:3f:29:a1:68:0f:21:02:af:ab:
         8b:d0:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:13 2025 by rpki-client