Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          44Yffy6ykcHb4FqDFAkSV2sraV4K9phndX4kOzcwcd8=
Subject key identifier:   BC:4B:24:1B:08:E1:FB:8E:67:E0:C5:13:D7:27:8B:87:19:82:29:98
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       5B7EE88888CA9DB1ADB3118ACD77F760D7885503
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 23:29:12 +0000
ROA not before:           Mon 06 Jul 2026 23:24:12 +0000
ROA not after:            Mon 05 Jul 2027 23:29:12 +0000
asID:                     36236
IP address blocks:        103.84.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 02:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7e:e8:88:88:ca:9d:b1:ad:b3:11:8a:cd:77:f7:60:d7:88:55:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Jul  6 23:24:12 2026 GMT
            Not After : Jul  5 23:29:12 2027 GMT
        Subject: CN=BC4B241B08E1FB8E67E0C513D7278B8719822998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:cf:e3:7c:b9:f2:dc:97:f2:c1:4b:ee:d3:
                    d2:d9:4a:cd:c4:e2:b2:74:05:02:9d:06:c3:39:f5:
                    1e:a3:71:73:72:63:d3:28:b7:b3:d2:6a:44:97:5d:
                    d3:ed:f0:14:4c:17:c5:78:ec:05:ff:21:7f:9a:b2:
                    21:1c:a3:7c:1f:db:13:73:b6:d5:4f:7f:d8:f8:dc:
                    42:0c:d4:13:4f:6e:90:44:74:ff:28:27:51:8e:62:
                    49:03:45:e0:8a:0c:70:7b:0a:a3:87:9c:30:9d:e2:
                    89:0f:5b:3a:cd:3d:3c:48:cf:3d:e3:7d:c4:ad:82:
                    e3:79:04:50:98:08:0c:e0:84:a0:d6:23:91:07:8d:
                    6e:42:33:04:a9:6d:bf:9d:97:1a:e8:b2:07:70:07:
                    c9:2d:61:27:37:72:7d:34:f9:2b:48:a7:5a:e6:77:
                    49:2d:31:cf:0a:a7:f4:16:cb:ab:00:09:13:3d:bc:
                    34:d2:d7:50:7c:4f:e3:df:af:5a:a0:91:af:83:d3:
                    6c:f0:d4:b1:83:e1:3b:b0:a2:68:92:e0:fb:9e:61:
                    58:7e:09:7d:c3:e5:17:ff:c1:4e:b1:1f:59:27:7f:
                    39:68:19:ce:2e:48:cb:d1:4b:18:17:a5:cb:20:45:
                    8b:a6:ad:4d:fd:49:db:4b:3d:5f:f4:58:a7:31:91:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:24:1B:08:E1:FB:8E:67:E0:C5:13:D7:27:8B:87:19:82:29:98
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135332e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:b6:eb:e2:5d:25:c1:b7:56:10:31:62:de:a9:5d:0a:4a:48:
         e4:8c:06:44:c2:ec:63:96:5c:b9:10:3d:51:cf:9b:59:13:83:
         95:71:73:f7:fe:0c:78:1d:b9:3e:22:3c:fa:3c:d6:75:c4:6b:
         c1:d2:ff:7b:04:d3:39:53:a3:b0:28:70:a8:22:b7:d3:04:d4:
         ce:c6:3d:c8:10:a1:7e:45:82:6e:1c:5e:3f:f6:3c:59:0f:6d:
         29:6c:ac:05:17:9b:07:12:73:b1:e2:62:4f:0a:d0:f2:7a:7d:
         ea:0e:d6:27:2f:70:ff:8a:03:be:9b:4b:cb:74:2d:37:eb:0e:
         2f:a9:ec:6c:eb:f0:cc:ad:47:5d:ba:35:47:be:01:d9:69:f8:
         ec:09:41:19:80:08:e1:4d:5b:9b:52:8f:0b:54:6a:ea:d3:6d:
         92:da:3c:96:23:2a:7c:7e:10:f7:09:09:2f:c8:8f:ec:a5:4e:
         d8:e6:f2:dd:65:9b:1e:da:02:c2:18:19:7f:c6:54:c3:12:02:
         a8:05:66:65:44:d5:ba:a3:71:43:06:21:b4:2a:18:bd:a7:a7:
         7c:9a:f5:1e:82:9e:a4:78:3e:6c:74:2b:60:39:5f:d5:b3:96:
         5d:fa:55:52:74:0e:a1:1a:1c:3e:87:2a:43:e9:16:47:2f:bc:
         d8:78:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:49:19 2026 by rpki-client