Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32342d3234203d3e203533383530.roa
File:                     3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (raw, json)
Hash identifier:          FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=
Subject key identifier:   32:AD:11:39:63:E8:73:4B:51:F9:09:6D:FC:C4:58:2F:91:F6:7B:AA
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       506D9EF84ABBBCA8B5FC5DAE62D626BBD26DB0CA
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32342d3234203d3e203533383530.roa
Signing time:             Fri 04 Jul 2025 23:35:52 +0000
ROA not before:           Fri 04 Jul 2025 23:30:52 +0000
ROA not after:            Fri 03 Jul 2026 23:35:52 +0000
asID:                     53850
IP address blocks:        103.208.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 10:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6d:9e:f8:4a:bb:bc:a8:b5:fc:5d:ae:62:d6:26:bb:d2:6d:b0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul  4 23:30:52 2025 GMT
            Not After : Jul  3 23:35:52 2026 GMT
        Subject: CN=32AD113963E8734B51F9096DFCC4582F91F67BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:3c:b3:14:1c:58:ed:21:2b:6d:86:ec:af:
                    ad:a9:6b:73:aa:f6:02:85:0e:4f:2e:e4:31:36:1e:
                    25:07:08:dd:51:f8:3a:23:a5:b9:52:b2:45:53:d4:
                    87:2a:40:53:e5:ad:85:a4:97:06:ce:e9:0e:6d:19:
                    9d:5b:0f:73:fa:af:4f:20:07:0b:f0:18:f8:8d:59:
                    d0:6a:23:27:3d:1f:1c:23:8b:be:c8:09:8c:9f:63:
                    9f:3c:71:a3:23:6d:47:36:7e:dd:26:2c:2b:d4:96:
                    31:d1:f2:ad:d1:9b:fa:25:41:90:1e:58:57:b6:f1:
                    ff:98:09:8f:1e:e5:00:7f:cd:20:2f:c6:1f:23:1f:
                    e5:6a:73:75:34:04:9f:e8:80:99:2c:8c:be:40:2a:
                    81:ab:15:12:01:24:99:47:74:ef:ab:76:bc:18:32:
                    65:89:86:4f:27:64:43:3d:15:37:a2:af:74:e4:91:
                    64:fb:c5:4d:a1:4d:a7:f1:fb:78:39:5b:2a:0c:f7:
                    e7:c9:91:8c:d8:5f:ae:8a:96:d4:eb:6e:0a:91:d7:
                    4a:a0:e9:03:40:ad:ba:3d:68:42:d5:bc:e2:3b:98:
                    30:14:32:33:19:a2:b8:57:49:d5:cb:5b:5d:40:04:
                    71:88:f3:37:89:64:23:83:17:a9:0f:fc:80:f3:86:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AD:11:39:63:E8:73:4B:51:F9:09:6D:FC:C4:58:2F:91:F6:7B:AA
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38342e302f32342d3234203d3e203533383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:55:fb:91:55:92:6f:db:40:c3:20:9f:0a:cb:4a:a1:e0:57:
         ff:b9:ad:c8:96:71:41:c5:af:84:61:a0:69:5e:22:47:63:9a:
         fd:d8:2f:8c:31:65:8f:52:97:34:44:0b:ac:4a:ab:ce:a2:5c:
         9b:89:36:ca:9b:d0:ee:fa:62:72:ea:09:a5:ff:b1:1e:13:f4:
         6e:8e:1b:2d:f1:b2:ba:8f:a5:71:1b:e0:0a:c7:95:39:2c:ad:
         56:74:a1:6f:f2:a7:a6:11:28:8b:7a:37:63:0b:60:f7:61:d8:
         d0:39:0f:6a:9b:7a:19:13:6e:07:78:9b:d5:3b:85:76:c0:1c:
         86:ae:a1:7c:6e:0b:56:f4:2f:22:9d:2e:36:65:e1:23:13:c0:
         85:2d:43:e8:0a:42:79:98:b5:e4:89:3d:fb:9b:f8:f5:25:72:
         2b:f1:d0:bf:22:2d:e4:9b:79:7b:1e:f4:68:63:d3:08:2f:e0:
         29:3b:44:d8:fb:51:11:86:31:d0:8e:92:c8:a1:f5:9c:99:02:
         8c:55:c4:c0:af:22:da:67:c0:2d:5b:63:86:c2:1a:4f:70:c4:
         22:00:4e:56:b7:88:db:9c:f3:ea:c6:69:b5:46:7e:b9:04:e6:
         05:82:72:6c:93:ce:fe:d5:25:5d:f7:e4:5e:18:e4:8f:d2:c6:
         57:75:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 22:53:52 2025 by rpki-client