Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
File:                     3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier:          i8F2RRMTpNkdcMS7cljG+Ymy6U8qF9ju4zRoTmyXvsc=
Subject key identifier:   69:90:A1:11:D9:C0:63:A6:93:C1:97:27:CF:25:26:7C:FE:DA:53:6F
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       7A12B1ABBF8E859203DE71375EE1BE6C98493C72
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     983
IP address blocks:        103.248.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Jul 2025 12:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:12:b1:ab:bf:8e:85:92:03:de:71:37:5e:e1:be:6c:98:49:3c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=6990A111D9C063A693C19727CF25267CFEDA536F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:43:fb:3a:34:eb:c9:72:ec:eb:01:de:72:
                    2a:f5:6a:cf:fa:b4:c5:eb:81:1d:a9:f2:ec:eb:46:
                    3e:ae:78:28:1b:f5:68:6e:35:79:ad:f2:7b:14:51:
                    94:4b:5d:6c:7c:2d:63:0d:f4:86:8d:1f:67:79:23:
                    5e:0b:a0:ef:ab:78:1b:df:8f:e8:d0:b6:35:35:74:
                    f9:2e:c4:7d:b6:ab:8d:72:cc:0f:82:26:d2:92:61:
                    e7:fb:00:e9:0b:5d:4a:37:6f:e1:15:fc:7b:64:3d:
                    72:2c:a8:86:09:a9:16:40:7c:0f:e8:fc:04:2b:e0:
                    71:1a:15:b2:d8:d2:08:8c:07:06:a2:03:30:50:21:
                    fe:32:ea:28:86:5b:96:66:f9:d1:48:46:63:1f:d0:
                    0e:fe:93:6c:67:72:0e:49:fd:cd:d6:b0:b0:7b:f9:
                    91:1e:28:7f:e5:3f:c8:3d:bf:53:64:e7:7f:c0:f7:
                    cb:9b:cf:f5:74:9d:49:bf:80:11:a9:70:4e:56:44:
                    5e:7f:41:84:33:ec:f1:ba:5e:b3:ac:18:71:05:a8:
                    a4:2e:27:19:61:bc:eb:2a:81:3a:38:ed:0f:61:91:
                    18:5d:8c:f7:ed:77:b2:0e:5c:6e:2f:01:79:89:eb:
                    0f:d7:27:12:fc:d7:4c:dc:11:b9:ed:c2:4e:84:8e:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:90:A1:11:D9:C0:63:A6:93:C1:97:27:CF:25:26:7C:FE:DA:53:6F
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:52:64:ce:11:34:b1:fd:67:f5:13:c4:f5:13:c9:69:ca:76:
         02:86:f6:dc:e8:96:bd:86:16:6d:32:74:3a:19:05:8e:dd:af:
         9f:a1:6b:98:2c:f2:94:70:2a:14:47:bb:1c:36:d1:20:c0:a0:
         5e:23:4c:bc:e1:64:05:23:bd:25:d1:ca:24:1c:4b:27:9d:65:
         7a:49:02:a9:73:4f:27:c6:9b:6f:1c:df:61:2e:0f:d5:45:e8:
         78:ab:a5:44:24:33:08:bd:9c:0a:53:b6:a1:3e:da:14:d5:34:
         76:d5:3f:30:93:eb:31:0b:04:b5:ee:1c:4f:21:88:63:37:0a:
         1d:19:ee:51:5a:ff:5a:18:de:13:e8:48:59:1e:e2:58:5c:b6:
         74:b4:c5:bb:22:9f:2d:71:92:24:fa:60:48:a1:f9:d9:15:74:
         bc:cd:48:b9:7d:0b:8f:c0:53:4b:52:c5:2c:95:ab:9d:a7:3c:
         0a:cd:5e:c5:17:09:e2:1f:db:ed:90:66:ad:50:28:a9:ac:95:
         38:5f:71:d6:56:cf:c0:b2:b1:f7:e4:50:e2:25:bf:35:c8:81:
         70:5b:c7:61:73:8e:12:63:76:8d:a5:c6:d1:f8:f6:cd:13:32:
         2c:40:ed:2d:13:73:4f:c1:43:d9:c1:ad:64:91:69:1d:fb:43:
         49:d2:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:21:45 2025 by rpki-client