Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          BGMbyl2hXTlgNj04MVuAwD1p+dHgakzxAYKBrBNKsPk=
Subject key identifier:   47:BE:56:97:27:8B:AE:ED:44:44:3E:7C:41:0B:CC:3A:66:25:BB:F7
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       7A1BF88FD475427CA016D8475F0C183EE48D07B0
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 23:29:12 +0000
ROA not before:           Mon 06 Jul 2026 23:24:12 +0000
ROA not after:            Mon 05 Jul 2027 23:29:12 +0000
asID:                     36236
IP address blocks:        103.6.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 02:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1b:f8:8f:d4:75:42:7c:a0:16:d8:47:5f:0c:18:3e:e4:8d:07:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Jul  6 23:24:12 2026 GMT
            Not After : Jul  5 23:29:12 2027 GMT
        Subject: CN=47BE5697278BAEED44443E7C410BCC3A6625BBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:0f:87:b4:a6:54:c5:ea:32:10:6b:ed:66:
                    95:1d:a4:68:7e:c8:38:3f:df:0e:39:35:48:e0:cd:
                    c9:46:2a:8a:b8:fd:a0:a2:e3:ff:43:4c:c4:ce:a1:
                    f6:4b:da:18:47:15:3b:dd:88:17:8a:ef:84:83:00:
                    98:45:58:8d:31:f0:70:b2:1a:98:8b:4f:61:aa:f1:
                    76:66:4e:87:01:46:ac:73:9b:92:96:04:71:ac:30:
                    23:55:65:d6:dd:ed:f1:43:95:0e:f7:91:36:75:6f:
                    f1:63:65:c9:50:c4:23:35:af:4b:19:92:4e:4d:94:
                    86:1f:9a:2c:c8:a9:fa:bd:eb:13:f8:35:a6:93:c5:
                    48:55:9e:b2:f1:9c:6e:67:b5:6d:54:14:21:82:ec:
                    30:28:80:78:65:0f:00:df:6b:77:25:8e:f1:84:27:
                    06:13:a0:3b:fc:dd:e1:59:c3:2f:bd:ec:a0:dc:3f:
                    a8:32:5d:a1:ed:3b:8c:38:1d:d1:c6:9d:34:be:ee:
                    a6:f0:b0:6a:94:95:2c:d8:a0:b0:cf:f8:9a:43:4c:
                    6e:bd:24:27:a8:29:da:7d:e8:03:ed:9f:29:9c:42:
                    b5:19:fc:a3:f0:20:9a:cb:df:a6:dd:51:35:df:a5:
                    7d:1b:1b:d6:b5:84:19:5c:13:7d:47:52:93:d2:bb:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BE:56:97:27:8B:AE:ED:44:44:3E:7C:41:0B:CC:3A:66:25:BB:F7
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6b:0f:ea:be:61:bf:de:74:d8:b2:c2:69:cf:c2:b2:69:03:
         81:35:33:6d:8f:6d:c6:e1:49:ea:16:ea:ae:64:c7:20:ca:0b:
         c6:2e:73:1c:fb:a5:47:a1:56:3f:52:de:70:54:ef:2f:66:21:
         80:dd:46:1a:01:ff:79:4f:65:f1:36:94:0c:32:c0:b8:c6:e3:
         1d:bc:06:e9:ab:b2:4e:57:ec:c5:4b:f3:f8:e8:6c:68:cd:f2:
         9d:8b:61:7a:4c:32:3f:14:63:57:c8:b0:21:e6:90:9a:74:d9:
         5b:de:df:1e:41:43:da:73:ff:29:37:d8:66:ea:1c:1f:8f:08:
         e7:1c:73:f9:6d:f9:23:72:2a:a6:06:d7:68:ab:d0:b3:e3:bb:
         c2:c6:b3:ec:d6:2f:04:ec:65:56:df:20:44:d7:53:5d:01:bd:
         bc:8d:a4:09:86:00:32:72:39:18:ee:7c:4a:91:35:db:85:20:
         9f:1d:7c:90:ec:fb:1c:2e:ba:db:d6:a4:6d:53:80:59:89:46:
         39:63:dd:74:4d:72:62:5f:09:9c:2e:68:76:87:18:a2:3f:3a:
         84:8b:b8:a9:2f:bf:e7:9b:3e:8b:a1:a4:53:4f:4d:64:57:da:
         d7:a7:7f:f5:fd:cc:c1:13:c9:9d:5d:11:6e:40:90:68:fa:ef:
         7e:12:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:48:45 2026 by rpki-client