Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
File:                     3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier:          5IS1Kat0lEIhiC6EmZKdLlAtCZ08dV03AfUvVZPqqhU=
Subject key identifier:   32:78:35:13:A6:EB:8F:A5:2D:35:2F:CD:42:36:18:AC:70:56:8F:E6
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       7578476A242ECAC5578DAA98D4E4466D3EA19526
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     38136
IP address blocks:        103.248.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Jul 2025 20:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:78:47:6a:24:2e:ca:c5:57:8d:aa:98:d4:e4:46:6d:3e:a1:95:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=32783513A6EB8FA52D352FCD423618AC70568FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:d3:dd:96:78:ba:36:11:19:79:9f:a3:af:
                    7d:5e:29:59:9a:05:78:51:61:fd:88:01:7f:65:d2:
                    21:a1:89:d6:a1:09:00:b4:bf:2e:d5:52:ea:36:4a:
                    14:fe:f8:10:d2:b6:c7:dc:f3:74:d1:53:a4:5a:27:
                    c5:dd:fc:55:e5:23:12:d6:3e:f5:4b:3f:a8:34:0b:
                    da:0c:ec:00:3e:f2:a2:07:8b:f4:60:82:2b:13:61:
                    48:80:b0:c8:f2:1a:7e:47:3f:31:a5:a8:29:51:85:
                    71:06:22:e6:76:bd:35:20:c4:8e:dd:fc:57:7f:47:
                    c5:fa:16:c7:ee:62:41:4d:a7:92:e7:75:4d:d8:ea:
                    1b:9d:e9:62:e3:3b:98:d5:81:87:55:07:e7:71:97:
                    31:0b:b1:67:76:21:5f:01:ed:32:51:9e:34:94:02:
                    2a:89:f6:2c:fc:06:39:b4:55:20:07:0c:cc:f6:3a:
                    8e:70:7f:da:93:ac:2c:ec:e2:51:45:f2:a1:8f:e3:
                    37:e3:5a:74:71:2c:cc:f5:af:7e:ac:1b:32:ca:ce:
                    e0:c2:4e:53:97:4d:5a:39:a6:a2:75:7c:f4:ec:99:
                    23:1f:98:6f:34:31:d2:5c:7b:f7:f8:96:1b:15:49:
                    82:51:2e:1b:91:4b:0e:71:f3:55:7a:53:26:55:cb:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:78:35:13:A6:EB:8F:A5:2D:35:2F:CD:42:36:18:AC:70:56:8F:E6
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:0a:c4:1c:7b:56:f5:ee:2b:47:2f:fe:ac:b1:c4:68:a7:
         15:4a:58:ac:1b:b8:8a:63:7a:c9:b3:23:2c:5e:44:06:2f:98:
         5d:8b:39:79:5f:a7:2b:0d:9f:16:09:77:c5:9d:cc:10:36:64:
         51:25:5a:90:a5:d7:e0:f6:59:8f:df:09:a7:4e:9b:c8:e4:4c:
         4e:31:eb:48:14:9c:cd:7a:d4:e1:62:e8:ec:bb:77:60:62:76:
         3b:6f:08:23:44:23:8b:ae:91:37:c9:f1:bb:8a:b1:29:c2:40:
         96:d2:15:a3:82:02:84:f3:11:23:20:d2:c7:c3:43:2c:c1:5a:
         c1:71:c5:ee:ae:3e:65:2e:ea:af:c8:c7:89:fb:eb:4b:d4:8f:
         25:65:12:70:ad:7d:54:88:cb:75:05:44:ef:f2:69:4d:e5:25:
         c8:27:20:87:5d:dc:39:3e:49:c8:b1:04:42:6d:c1:e3:e9:4e:
         45:42:81:c1:ab:92:f1:20:fd:8c:ba:c3:43:71:4e:04:71:3d:
         e9:40:5e:6a:e8:cd:91:f1:a3:c1:89:b1:47:74:e5:30:67:33:
         89:d3:01:5c:3c:54:fb:da:42:ca:da:96:e0:7e:08:14:56:88:
         b4:43:d3:24:23:e7:21:41:4a:32:06:eb:c3:7b:ca:56:21:e5:
         fd:dd:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:33:21 2025 by rpki-client