Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
File:                     3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=
Subject key identifier:   C9:0A:E4:F7:5C:52:75:D8:B1:C4:75:DE:CB:FB:F1:72:88:8C:76:D1
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       66F80241BC9908E2C84A3DBD6C4494DB4A5F0BD0
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 04 Jul 2025 23:35:52 +0000
ROA not before:           Fri 04 Jul 2025 23:30:52 +0000
ROA not after:            Fri 03 Jul 2026 23:35:52 +0000
asID:                     61138
IP address blocks:        103.208.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 17:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f8:02:41:bc:99:08:e2:c8:4a:3d:bd:6c:44:94:db:4a:5f:0b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul  4 23:30:52 2025 GMT
            Not After : Jul  3 23:35:52 2026 GMT
        Subject: CN=C90AE4F75C5275D8B1C475DECBFBF172888C76D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:15:e9:a2:79:78:93:2d:c7:ff:b4:53:f3:
                    52:cb:a2:f6:fb:0c:e4:9b:21:31:66:b0:c2:23:69:
                    c5:05:85:81:57:8a:6c:e0:59:dd:6f:88:dc:fc:e7:
                    cf:39:2d:cf:e7:4a:d1:4c:e2:c0:e2:fb:6f:a6:bd:
                    78:ec:b5:a4:46:dd:f3:c7:3a:b4:4b:36:d2:84:ec:
                    70:8c:e9:a1:e6:d0:67:d2:8c:be:cc:71:5e:70:02:
                    db:e3:25:9b:5e:f7:d0:06:f8:55:12:a2:f4:b3:c1:
                    cb:00:88:c1:c9:a8:cc:2b:31:bc:ee:7b:c6:6c:02:
                    53:df:3b:db:ea:e9:1a:96:78:f5:2a:e3:62:bb:8e:
                    3a:cd:6b:2c:05:88:4a:29:4a:2e:1d:13:d6:d2:6b:
                    23:c0:5f:56:c3:fe:05:df:1e:ee:9b:c8:f1:c2:e7:
                    ab:a2:bb:9d:ad:b1:57:1e:88:60:36:b9:97:a2:fc:
                    44:5d:38:f2:19:fc:19:c2:11:77:c6:71:a4:b4:91:
                    5c:d2:23:f6:a5:5a:d5:13:10:e4:f6:18:71:0b:6e:
                    86:bc:22:a6:fd:31:05:65:40:42:3e:04:74:7d:22:
                    95:9e:80:cc:bc:bc:e7:e0:8f:dd:0f:f8:49:fc:90:
                    8e:06:d8:9f:22:c0:14:27:e4:27:c5:20:b7:d3:c3:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0A:E4:F7:5C:52:75:D8:B1:C4:75:DE:CB:FB:F1:72:88:8C:76:D1
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:13:51:16:4e:ca:57:90:91:00:b7:d0:4c:49:da:cb:49:2e:
         dd:bc:0c:e9:06:cf:51:9c:bc:e7:62:28:0d:68:e9:51:53:22:
         91:58:1d:a6:7f:af:20:dc:3b:18:c8:04:a6:f3:c8:79:19:99:
         84:c8:2d:b4:d1:cd:85:53:9b:b1:91:8a:87:fd:f8:a6:ac:47:
         24:8a:a6:7e:b6:fa:d1:2b:1e:10:19:62:0f:4f:29:53:54:3d:
         2a:40:c1:78:49:3c:27:bd:75:7a:bd:0d:32:72:86:9f:11:09:
         4f:7a:bf:1f:01:50:9b:dd:19:e3:16:a6:7a:45:84:ca:40:cd:
         d8:2b:c3:fb:4d:a8:46:86:23:55:de:8c:54:bc:0d:55:b8:05:
         e6:a8:c5:98:ef:91:2d:25:70:92:f7:08:b4:9b:4c:14:b5:7e:
         4e:73:f0:8c:ed:8d:84:c8:6e:c2:fa:f4:97:1d:11:4b:e9:5e:
         70:21:b1:55:53:7d:e4:fb:a1:b5:4e:5a:02:7d:79:4e:70:f6:
         68:84:1a:94:4e:56:3f:b3:19:93:c5:93:0d:81:94:24:76:f4:
         ad:2c:b7:10:7b:9c:bc:a7:d4:0d:94:b3:18:0b:61:fb:09:ce:
         12:2c:02:1e:49:77:0f:6f:60:44:a7:c8:82:f8:59:e5:fa:d8:
         40:e5:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 02:35:36 2025 by rpki-client