Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa
File:                     3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (raw, json)
Hash identifier:          wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=
Subject key identifier:   80:BB:CD:44:B8:0E:D0:9A:DF:18:39:70:A5:EA:21:44:52:5F:B6:0E
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       616AA968E6B48D465ADC2606C5134A8B28E35F93
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa
Signing time:             Mon 27 Oct 2025 02:24:20 +0000
ROA not before:           Mon 27 Oct 2025 02:19:20 +0000
ROA not after:            Mon 26 Oct 2026 02:24:20 +0000
asID:                     400810
IP address blocks:        103.208.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 05:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6a:a9:68:e6:b4:8d:46:5a:dc:26:06:c5:13:4a:8b:28:e3:5f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Oct 27 02:19:20 2025 GMT
            Not After : Oct 26 02:24:20 2026 GMT
        Subject: CN=80BBCD44B80ED09ADF183970A5EA2144525FB60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:0f:e3:27:fb:39:52:bc:d0:ed:68:d7:47:
                    6f:4f:44:58:bc:ff:41:56:a7:1c:99:db:60:0e:21:
                    fe:20:92:0c:83:a6:23:27:60:08:94:57:40:8c:25:
                    68:73:8d:b4:44:9f:91:37:0c:d3:c9:b9:f5:ed:47:
                    74:47:0b:43:25:54:ea:4a:4e:ff:45:0b:3d:95:07:
                    45:f4:f6:23:07:e2:7c:f5:03:66:e0:52:34:af:41:
                    e7:1d:ec:8a:82:a2:95:95:a6:d8:b9:ec:04:80:61:
                    7d:af:d7:26:45:33:da:39:02:bc:9b:40:e3:ca:ac:
                    3f:da:73:cd:8b:68:cb:09:23:66:4b:3c:7f:7c:e2:
                    a2:e7:2c:64:9c:74:eb:02:96:24:c9:eb:8d:f5:80:
                    53:df:7c:a9:d1:48:7f:e8:4d:38:06:f9:4d:78:11:
                    b1:3e:93:dd:1a:7f:4a:45:9c:fd:eb:7d:44:e9:6d:
                    94:b9:4b:ba:2b:cb:6f:c3:83:18:18:b5:69:d2:2e:
                    ab:5b:05:dc:04:5d:6d:76:16:53:d1:db:71:12:39:
                    90:ef:24:f7:4c:f7:05:de:c5:5e:7e:74:e2:9a:50:
                    7c:18:bc:28:4d:55:cb:bc:71:ed:45:33:73:13:7e:
                    7b:db:e8:da:ab:eb:5b:b8:e6:15:14:05:ef:5f:cf:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BB:CD:44:B8:0E:D0:9A:DF:18:39:70:A5:EA:21:44:52:5F:B6:0E
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:3f:db:90:99:83:21:d5:38:90:a2:86:91:73:e3:2f:31:84:
         7c:44:67:d6:90:1f:ef:de:48:55:d6:5a:03:1c:ba:88:ad:f6:
         39:fb:40:ab:89:da:90:ba:f7:7d:8b:88:33:f4:58:a7:00:02:
         01:43:d6:7e:6f:3f:4d:23:33:e1:7b:f5:94:65:d0:3a:70:95:
         29:ff:b3:94:69:72:62:85:10:a1:a3:11:2e:8f:f9:17:9d:c9:
         15:be:a1:b2:ef:66:7e:46:54:8c:3b:25:ac:6c:49:7f:8c:22:
         3b:de:e9:0f:ac:61:90:90:25:62:79:f7:7d:42:96:20:fc:76:
         d3:a5:92:13:6e:cc:ba:94:ce:6f:55:b5:cc:02:c9:83:06:25:
         9f:bd:bb:da:a8:ae:9c:37:af:d7:b7:6c:54:f5:e0:02:09:53:
         b6:4f:1a:3c:55:ba:95:a3:08:6d:ad:2c:6d:3c:99:f2:0c:31:
         48:76:6b:30:20:29:15:03:d1:52:38:e2:55:15:a6:91:0a:f4:
         b3:f5:be:d0:cb:fd:ed:15:80:a9:70:c5:b6:81:41:82:00:dc:
         bb:6e:d7:c9:0c:db:0b:cc:8f:8e:7a:4f:6b:58:ba:24:11:8f:
         38:ab:b0:66:fb:b9:40:f4:ca:08:de:df:ba:83:90:e0:19:07:
         0c:ce:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:51 2025 by rpki-client