Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa
File:                     3130332e362e38372e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          wLbXT3gZQzew+SEEt+fm3iWc4VKItWXSFuKwaJ78ZIc=
Subject key identifier:   B1:46:89:8A:64:20:90:22:E7:CB:CB:3D:4E:80:F1:42:5C:83:BD:36
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       246AF72DE94B3D233AD212378972F7171AF09646
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 23:29:13 +0000
ROA not before:           Mon 06 Jul 2026 23:24:13 +0000
ROA not after:            Mon 05 Jul 2027 23:29:13 +0000
asID:                     36236
IP address blocks:        103.6.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 02:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6a:f7:2d:e9:4b:3d:23:3a:d2:12:37:89:72:f7:17:1a:f0:96:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Jul  6 23:24:13 2026 GMT
            Not After : Jul  5 23:29:13 2027 GMT
        Subject: CN=B146898A64209022E7CBCB3D4E80F1425C83BD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:84:3d:28:aa:50:48:8c:ef:54:d1:28:b4:
                    03:12:96:30:bc:70:5f:99:10:01:b9:51:f7:ad:9c:
                    78:f9:23:e1:64:9e:0d:5e:09:49:ca:64:a1:f2:5b:
                    c1:d6:18:41:c7:0e:13:35:f8:59:cd:8e:fe:9f:87:
                    4c:6c:67:d7:d1:1c:f4:cc:ab:ad:d3:dc:1d:77:c1:
                    89:59:ba:ff:dc:0e:30:87:8a:50:1e:b8:6c:33:3c:
                    d9:2f:2f:99:a2:57:f0:74:c8:39:fa:98:23:be:89:
                    27:d5:68:6a:4b:e3:0f:2f:3e:d3:5f:9b:d3:cd:ed:
                    ec:1c:17:ee:53:b4:86:73:12:15:bb:94:52:da:e4:
                    82:fb:dc:77:00:b3:ab:23:08:0f:89:dd:5c:fc:d0:
                    a2:00:fa:9e:98:f9:a8:b5:7d:cd:8e:08:73:a9:6f:
                    f0:53:3d:ac:6a:34:e9:8a:1a:a1:f9:da:b6:eb:0f:
                    b6:5e:4e:5c:9c:ba:f1:b9:c9:0c:d8:b3:fb:a1:b5:
                    25:a7:ea:16:61:4b:5f:22:a6:bd:0e:91:3c:e3:00:
                    2a:02:04:7c:fd:ed:72:ab:e2:f5:b2:5b:b7:66:20:
                    50:5d:e5:9e:ca:7c:73:9d:a6:2f:db:cc:ab:e5:7e:
                    c6:27:fd:11:dd:67:86:ba:b6:aa:61:63:a3:99:52:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:46:89:8A:64:20:90:22:E7:CB:CB:3D:4E:80:F1:42:5C:83:BD:36
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e362e38372e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:81:bd:55:91:b1:42:ff:e2:bd:d7:ab:34:12:cb:40:ae:ca:
         53:79:ab:71:cd:f4:4d:a2:02:f0:f6:0e:61:26:eb:e9:78:d5:
         da:39:f0:bb:0a:15:30:1f:3c:42:5d:85:98:a3:94:c8:27:3d:
         d1:17:cf:5d:3b:ab:aa:31:2b:1b:60:23:cc:1c:2b:36:4a:9f:
         a1:0d:50:84:e9:cd:07:0e:5f:4b:e9:6d:39:d7:c2:8f:0e:fc:
         38:7c:6e:7e:34:76:0c:31:28:e2:62:a1:1d:f7:e8:a7:e5:bd:
         8a:5d:2e:ce:21:43:71:cb:a2:10:a0:4e:6f:cd:05:4c:5c:e5:
         d7:ce:f8:cb:20:5b:b7:4c:a0:3b:e4:85:05:97:96:d8:a9:6f:
         06:8a:08:d9:6c:a3:09:31:8a:a0:f0:c2:dd:63:0a:1e:9d:27:
         2b:32:e8:4b:b6:11:e2:46:47:0a:e8:53:29:cc:2d:29:d2:06:
         4b:b8:4c:99:5c:fa:5c:12:65:3d:3d:83:1d:ff:d1:5e:8d:b8:
         8d:99:f0:64:5b:62:40:0c:d6:63:6d:f1:d6:fb:d5:bb:3f:bf:
         7e:9a:c5:62:a3:98:8b:ac:99:34:21:6a:1b:b5:64:de:5e:b5:
         17:50:1f:b5:dc:5e:35:62:03:2e:69:56:98:7d:7f:18:f6:de:
         0a:7e:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:48:46 2026 by rpki-client