Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/3136332e35322e3231332e302f32342d3234203d3e20323138363133.roa
File:                     3136332e35322e3231332e302f32342d3234203d3e20323138363133.roa (raw, json)
Hash identifier:          v5EyQ6CXXT8CFXbf0lRLrg7rACiPFEPaoa/KYk9Xrlo=
Subject key identifier:   27:1C:25:E8:71:E2:1C:87:18:48:67:EF:A6:AB:2F:DA:60:A5:39:3C
Certificate issuer:       /CN=A9143C360000/serialNumber=E4EB01F836DE56CA2E2E87933DAC096764FAFE3E
Certificate serial:       6D5A721DBB3903AC6BAD9006263F0C697FFF95D5
Authority key identifier: E4:EB:01:F8:36:DE:56:CA:2E:2E:87:93:3D:AC:09:67:64:FA:FE:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OsB-DbeVsouLoeTPawJZ2T6_j4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/3136332e35322e3231332e302f32342d3234203d3e20323138363133.roa
Signing time:             Sat 10 Oct 2026 14:32:44 +0000
ROA not before:           Sat 10 Oct 2026 14:27:44 +0000
ROA not after:            Sat 09 Oct 2027 14:32:44 +0000
asID:                     218613
IP address blocks:        163.52.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/E4EB01F836DE56CA2E2E87933DAC096764FAFE3E.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/E4EB01F836DE56CA2E2E87933DAC096764FAFE3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OsB-DbeVsouLoeTPawJZ2T6_j4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5a:72:1d:bb:39:03:ac:6b:ad:90:06:26:3f:0c:69:7f:ff:95:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143C360000, serialNumber=E4EB01F836DE56CA2E2E87933DAC096764FAFE3E
        Validity
            Not Before: Oct 10 14:27:44 2026 GMT
            Not After : Oct  9 14:32:44 2027 GMT
        Subject: CN=271C25E871E21C87184867EFA6AB2FDA60A5393C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:47:35:e7:44:3f:50:9a:57:1f:eb:ac:3e:
                    75:d3:59:df:59:cf:cb:c8:47:1f:6d:da:32:58:25:
                    28:de:1a:0b:a2:ed:9e:9a:1c:df:7c:68:45:8d:b8:
                    e7:34:b8:38:42:8d:3b:96:a0:45:dc:7a:10:e4:c7:
                    2e:d1:c9:44:13:7a:09:f5:2c:ee:4e:ad:0d:d4:26:
                    b1:b4:61:e0:e0:80:66:78:fe:95:1d:bb:a9:eb:7d:
                    7b:82:66:66:0c:6e:ab:7e:6e:57:59:44:67:3d:70:
                    7a:bd:52:5a:83:58:af:e2:d0:8f:af:c5:ce:9a:3c:
                    2b:db:aa:35:ea:f0:36:65:ca:d1:44:60:50:aa:85:
                    ca:92:a3:6a:c1:3b:28:ae:98:b9:ce:71:62:eb:2a:
                    46:2b:82:30:c8:e6:82:bb:dd:a4:d2:a7:23:b0:2b:
                    a1:34:da:41:bb:3f:d3:74:09:c8:59:86:07:70:63:
                    40:97:b7:af:dd:ea:d5:65:ee:9f:1f:16:79:ce:04:
                    59:58:fa:41:69:39:4a:55:89:7b:22:2e:e2:59:12:
                    6b:79:18:f0:24:85:b0:70:23:bf:20:ea:6b:de:b7:
                    6b:38:bc:1d:eb:23:d1:c7:38:03:22:f8:91:cd:7c:
                    50:be:20:95:80:9b:54:a7:79:fa:e0:6f:6f:66:a2:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1C:25:E8:71:E2:1C:87:18:48:67:EF:A6:AB:2F:DA:60:A5:39:3C
            X509v3 Authority Key Identifier:
                keyid:E4:EB:01:F8:36:DE:56:CA:2E:2E:87:93:3D:AC:09:67:64:FA:FE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/E4EB01F836DE56CA2E2E87933DAC096764FAFE3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OsB-DbeVsouLoeTPawJZ2T6_j4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/4/3136332e35322e3231332e302f32342d3234203d3e20323138363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:aa:ff:77:83:21:32:ec:53:ba:08:e3:9e:f9:8b:7e:4f:
         82:50:c4:a8:6f:16:cc:7d:e1:b3:84:3e:9b:35:5f:0c:ea:a5:
         4f:65:ac:e9:ea:31:ab:0f:ac:8f:1b:31:20:69:39:bb:7a:7a:
         00:32:0a:5e:ee:bc:e9:ce:b6:5e:5f:ce:31:21:5e:f8:e5:11:
         b0:9d:a7:d3:14:cb:7f:fb:c2:c9:ef:48:34:aa:5b:5c:42:3d:
         f2:84:e7:73:e8:9c:9e:f7:4c:c5:a0:97:24:ad:99:bd:e9:2c:
         be:e4:12:a4:56:77:c5:54:11:29:50:6e:c0:9f:1d:c8:fc:b1:
         c8:5c:3b:0f:36:af:4d:e0:68:20:55:09:48:dc:b0:2b:d4:43:
         30:76:06:9a:8f:65:92:04:0a:37:39:49:3e:e2:1a:c5:19:b3:
         45:b0:7f:75:71:1b:17:b4:54:ca:ba:41:50:ab:f3:90:df:72:
         5c:10:46:24:75:a1:72:a2:ad:c2:d9:c7:a6:97:41:2f:86:4b:
         d7:19:11:d6:f5:e2:3c:ad:6e:46:de:da:5a:26:14:19:b7:8f:
         ce:4d:bc:aa:4f:86:2b:dc:48:ff:2d:0a:06:80:18:73:c0:e5:
         9c:2f:fe:f8:68:0c:30:59:c0:cd:88:95:9d:ea:27:8d:da:66:
         a9:cf:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:00:33 2026 by rpki-client