Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa
File:                     3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          EFokon3uzovDNn0Unk4MoVGX2uXU8iSPtyRbEFKVwE8=
Subject key identifier:   10:9B:C6:65:DD:A7:08:BB:C3:D3:61:07:28:FE:44:1F:BB:4A:8F:52
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       2A8DC48A192569672483C7C084C10CA6C463A616
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa
Signing time:             Fri 11 Jul 2025 15:15:30 +0000
ROA not before:           Fri 11 Jul 2025 15:10:30 +0000
ROA not after:            Fri 10 Jul 2026 15:15:30 +0000
asID:                     61138
IP address blocks:        103.208.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 03:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8d:c4:8a:19:25:69:67:24:83:c7:c0:84:c1:0c:a6:c4:63:a6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul 11 15:10:30 2025 GMT
            Not After : Jul 10 15:15:30 2026 GMT
        Subject: CN=109BC665DDA708BBC3D3610728FE441FBB4A8F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:e3:dd:d0:5b:c4:6a:83:77:98:dd:d6:ee:
                    65:a7:83:31:e6:2f:e6:b9:5c:78:21:97:47:63:d9:
                    27:6a:2a:f2:b8:2b:14:b5:92:74:ff:bb:35:b6:e9:
                    dc:5f:ab:43:9a:02:8e:a4:9f:f6:0c:5a:25:1f:43:
                    fb:02:b7:35:bc:18:1d:a7:cf:51:42:5a:f7:fd:38:
                    cc:2f:f1:a8:d8:11:fc:12:b3:79:dc:d8:a1:21:85:
                    5d:cd:8e:0d:cb:a1:f2:22:2f:b9:b6:38:be:b1:77:
                    16:b4:e7:dd:8c:ad:1c:c1:d1:c3:59:23:2d:ff:4a:
                    3a:ea:52:03:3e:b9:b0:6d:f6:a6:13:ba:ac:7d:ed:
                    4c:d9:f6:78:e3:46:af:2e:d5:b1:d9:cb:19:98:7a:
                    fb:24:fe:29:e5:d3:bb:99:27:3a:b8:46:c2:91:f0:
                    7a:72:02:2d:14:27:45:22:48:d7:b2:62:65:79:96:
                    bd:cb:de:a8:c6:d4:00:d6:65:37:06:44:3e:9c:7d:
                    3b:4c:6c:8c:b5:7a:6a:c5:6b:be:d5:d7:57:6b:38:
                    6d:4b:bb:90:03:bb:27:3a:e0:d9:7f:90:c0:71:4c:
                    34:0a:cc:6f:01:32:2a:45:8c:ba:3f:a6:cb:99:39:
                    3d:49:40:7b:ad:22:09:94:98:5a:d7:ea:16:82:bf:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:C6:65:DD:A7:08:BB:C3:D3:61:07:28:FE:44:1F:BB:4A:8F:52
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:27:12:35:11:c5:2f:bd:9d:af:52:c5:62:24:af:9c:49:
         4e:0a:95:34:76:e2:02:6f:f2:58:d7:03:c4:af:3c:cd:3f:ed:
         2e:ee:6c:4b:55:53:87:1d:b7:a7:e5:0d:f1:7b:f8:5e:a1:35:
         cb:00:47:d8:cb:8a:17:ff:cb:71:32:62:e3:a5:8a:cd:01:20:
         c9:d0:f6:26:33:be:49:db:d1:f9:88:33:70:30:ac:e9:51:5f:
         f0:64:fb:1b:e6:31:30:e2:fb:0e:92:7c:6f:b4:d1:c5:0c:9b:
         47:33:6c:61:4c:a0:d4:7d:ad:1f:6a:f8:27:cd:49:df:56:e4:
         15:38:0c:df:80:31:d3:6e:e5:46:f1:6f:b4:23:ea:a6:b0:48:
         43:a0:bc:0e:45:ec:3e:68:f7:4f:9b:03:78:eb:da:64:48:0e:
         bf:af:86:9f:c2:66:bb:34:df:e5:e6:9e:f2:a7:cf:99:b7:b2:
         a8:61:2e:02:34:1e:95:02:65:a9:9a:83:97:81:4f:e0:3d:1a:
         ab:2e:98:37:d3:e4:85:1b:d4:ca:b2:49:e6:b5:0c:bb:c5:4a:
         b6:46:ed:13:32:9a:7f:b1:8e:08:57:c3:38:e3:b8:8e:25:13:
         90:9d:e0:88:96:41:a5:12:19:62:35:df:8d:7a:c6:f0:9a:95:
         2a:29:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:27 2025 by rpki-client