Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232372e302f32342d3234203d3e203136323736.roa
File:                     3130332e3234342e3232372e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          UAuSTkCakg1WxGf/FAxBu7lnZoJZSlpyXWSwbcAdBZE=
Subject key identifier:   3A:7E:23:4C:D6:88:22:1E:AF:E4:9C:BF:C0:8B:23:FB:01:FE:B3:F6
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial:       FD9C0581109976D618D37987CC55A94BD43495
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232372e302f32342d3234203d3e203136323736.roa
Signing time:             Mon 25 May 2026 12:26:57 +0000
ROA not before:           Mon 25 May 2026 12:21:57 +0000
ROA not after:            Mon 24 May 2027 12:26:57 +0000
asID:                     16276
IP address blocks:        103.244.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 07:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fd:9c:05:81:10:99:76:d6:18:d3:79:87:cc:55:a9:4b:d4:34:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
        Validity
            Not Before: May 25 12:21:57 2026 GMT
            Not After : May 24 12:26:57 2027 GMT
        Subject: CN=3A7E234CD688221EAFE49CBFC08B23FB01FEB3F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:d1:66:ed:27:47:31:52:19:3b:8a:cd:7e:
                    4a:a9:66:a6:b6:91:e6:90:7e:12:10:0a:e1:d5:13:
                    4f:22:06:db:f3:5c:90:81:3b:59:a5:84:ce:e2:9f:
                    e3:4f:e8:03:d8:cd:8a:d4:48:57:c0:91:7a:43:39:
                    dd:8b:7d:17:03:09:2a:83:6a:a8:59:92:a7:ef:23:
                    a0:d1:09:aa:6a:51:5c:b6:e7:f6:8f:02:1d:19:5b:
                    83:55:fb:df:cd:c9:b6:e3:aa:d8:ff:b8:45:a5:f9:
                    7a:ec:ca:1b:53:db:3b:97:4c:bf:c8:0f:3b:b8:81:
                    41:ac:9c:02:e3:a5:13:7b:44:13:4c:70:c6:35:88:
                    e1:7d:b1:41:64:54:cf:17:75:40:95:c1:99:2d:e7:
                    e8:b7:1b:51:28:91:19:41:fd:be:4b:ab:14:de:13:
                    60:f0:ba:61:03:83:a9:42:12:94:dd:63:f5:f9:79:
                    37:cc:3e:34:8c:f1:af:ae:34:50:c1:90:2c:97:99:
                    7e:78:dc:e9:82:ee:56:63:62:9d:94:02:84:e3:4a:
                    54:ea:b6:6c:27:4b:4a:2b:25:08:94:9a:17:02:59:
                    da:c4:b1:74:15:ca:b1:dc:c1:b8:21:e7:d6:96:12:
                    8f:5d:91:d9:85:92:c4:a1:b7:1c:df:62:97:fe:30:
                    1c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7E:23:4C:D6:88:22:1E:AF:E4:9C:BF:C0:8B:23:FB:01:FE:B3:F6
            X509v3 Authority Key Identifier:
                keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232372e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:69:0a:9a:80:cc:77:35:45:bc:83:d8:ee:28:0c:0e:8b:f5:
         b8:83:e1:10:ad:15:6c:75:b7:1a:e7:5d:c3:7f:16:27:8d:a5:
         77:06:17:41:67:ba:15:7c:70:10:4a:62:2b:2c:26:b4:e1:fc:
         09:54:d3:1f:2e:4a:b5:49:3a:17:4b:4e:50:bd:fd:28:f4:b5:
         06:46:b4:bc:ca:ed:c0:4e:01:f7:f5:07:10:9f:cb:bb:38:55:
         f7:fd:b7:e2:4f:b2:dd:3f:6c:aa:95:82:85:cf:af:1b:ae:45:
         db:de:97:fe:e3:0d:2b:3c:2c:58:df:f9:e2:d3:9d:b4:f9:47:
         c6:91:e5:5c:1d:05:7b:ce:01:d9:9a:06:b2:8b:67:38:c4:ae:
         64:c7:ff:0c:50:33:31:18:da:93:b2:05:e0:94:da:3e:24:9e:
         cb:08:88:c7:92:0e:fe:ae:d9:7f:99:44:ff:6e:31:3a:98:d1:
         58:7a:c9:86:70:51:4d:ec:7e:69:96:7b:1f:65:a1:05:bc:b5:
         1c:8f:dc:42:53:5c:cb:b0:c9:8b:54:2f:4f:41:07:8a:b8:27:
         94:75:a6:c6:af:c0:8a:b9:c2:4c:3d:7a:32:57:88:48:10:e3:
         9d:58:7e:19:09:90:f3:51:e2:04:da:bd:c6:9b:3a:4a:d3:de:
         d2:f3:99:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:09 2026 by rpki-client