Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135352e302f32342d3234203d3e203336323336.roa
File:                     3130332e38342e3135352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          YEd52VkzoI8zCyjkYNkCy8xhr5KimdkQE2T5S+s8ZEA=
Subject key identifier:   76:81:6D:5F:3D:14:8D:59:9D:8C:8F:A9:45:59:DC:35:80:12:78:D8
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       5D5B5C59690FB1D063E55CADDDEB724DF580A614
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 23:29:12 +0000
ROA not before:           Mon 06 Jul 2026 23:24:12 +0000
ROA not after:            Mon 05 Jul 2027 23:29:12 +0000
asID:                     36236
IP address blocks:        103.84.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 02:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5b:5c:59:69:0f:b1:d0:63:e5:5c:ad:dd:eb:72:4d:f5:80:a6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Jul  6 23:24:12 2026 GMT
            Not After : Jul  5 23:29:12 2027 GMT
        Subject: CN=76816D5F3D148D599D8C8FA94559DC35801278D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:78:6b:04:cc:dc:d6:a0:e4:dd:1b:ec:e6:
                    ce:e7:c3:71:51:77:d4:29:c6:be:cc:21:71:16:85:
                    43:2e:dc:bd:36:e8:9f:e8:38:df:c3:c2:58:d4:c1:
                    c4:b5:84:b3:ee:d6:fa:69:f0:e9:52:57:39:e5:da:
                    d9:8d:4e:18:c0:6b:7e:ee:0f:15:ad:97:2d:61:95:
                    11:c8:a6:93:34:59:41:0f:06:54:13:e0:3f:8c:38:
                    bd:1e:ec:fb:b1:a3:80:5b:3e:39:c3:82:19:55:dd:
                    d9:25:63:e4:99:32:2f:db:42:07:4b:33:87:f4:18:
                    a0:11:b4:a4:54:0b:28:73:03:87:d3:eb:b7:e2:26:
                    40:1b:eb:db:28:2e:b8:dd:e1:80:c4:fc:bb:8e:a8:
                    02:53:4f:17:cd:06:e1:b8:f9:4e:f7:14:ba:15:27:
                    65:9a:5d:71:78:9e:76:e4:b4:d4:ff:7d:eb:b6:12:
                    b3:99:a8:a0:2b:c8:47:1c:cc:1b:97:2e:3d:1b:3d:
                    61:e4:42:c9:58:50:d7:74:ad:48:50:68:15:76:18:
                    57:81:04:8c:4b:a9:3c:4b:2b:82:2f:3f:19:dc:df:
                    af:9d:2f:89:54:68:e2:af:06:59:6d:4c:e9:de:9a:
                    f9:92:80:0e:b0:a0:51:9b:dc:c6:33:15:69:12:1f:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:6D:5F:3D:14:8D:59:9D:8C:8F:A9:45:59:DC:35:80:12:78:D8
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e38342e3135352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:1f:0c:2b:20:a0:40:64:cf:54:f2:f3:36:4b:fa:4e:d0:86:
         41:d2:1e:ff:a4:4b:69:3d:a8:c5:c7:e5:3b:4c:bf:5e:48:13:
         4a:50:6c:a4:35:6d:bc:38:e6:14:15:f9:a4:da:73:26:cf:06:
         b1:2a:05:03:8f:eb:0a:75:c5:21:e9:8d:82:c4:78:2d:dc:e9:
         4f:05:d2:d0:cb:d3:8d:9c:cf:3d:5a:df:00:ac:00:18:6f:cd:
         5a:a4:79:62:f9:79:c7:ee:18:e1:37:8d:a9:2c:1b:79:8c:91:
         27:ee:29:54:17:3f:e7:01:4d:99:3a:33:77:3d:69:02:74:c7:
         35:b1:a5:55:0d:b9:09:da:81:ba:f1:8d:90:46:98:28:91:a5:
         9c:21:d5:bd:d0:98:d6:43:7b:7c:14:26:94:5e:21:bc:cb:32:
         c7:87:fb:47:8f:e9:93:60:5a:44:aa:aa:fc:21:7e:35:c2:46:
         93:32:e3:04:50:a6:02:51:12:19:ca:26:15:f8:b3:61:8f:25:
         8f:06:c1:a5:66:3f:26:84:1d:72:a9:bf:ef:66:78:ec:68:74:
         9f:86:64:12:48:2e:3f:fd:88:5f:ba:32:59:cf:52:9d:55:5e:
         c7:78:51:a6:b7:6e:ab:9c:08:2e:22:81:65:c3:c0:0c:33:e1:
         cc:5c:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:49:20 2026 by rpki-client