Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
File:                     3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier:          y74Xp0XnuK3wa2JG/fegow7q2dM6xNH74OfC4cT3Puo=
Subject key identifier:   AC:C9:0A:C7:CB:28:EE:CF:AF:28:0F:37:4E:45:5E:16:F0:CA:B5:39
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       3DBB0289BA7DF6D898B41390CB01C7983589DF15
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
Signing time:             Fri 19 Jun 2026 07:53:13 +0000
ROA not before:           Fri 19 Jun 2026 07:48:13 +0000
ROA not after:            Fri 18 Jun 2027 07:53:13 +0000
asID:                     38136
IP address blocks:        103.248.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 21:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bb:02:89:ba:7d:f6:d8:98:b4:13:90:cb:01:c7:98:35:89:df:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Jun 19 07:48:13 2026 GMT
            Not After : Jun 18 07:53:13 2027 GMT
        Subject: CN=ACC90AC7CB28EECFAF280F374E455E16F0CAB539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:33:fc:12:dc:44:0a:f8:21:0b:c6:3b:09:3d:
                    de:21:c1:d8:71:37:14:c0:d3:b8:0e:40:13:27:fd:
                    a4:0c:97:80:18:cc:76:44:8a:31:b6:f8:37:84:94:
                    37:c8:17:95:c8:66:8c:ae:76:06:fd:7d:fa:0e:b3:
                    4b:31:2d:98:09:d3:ca:f3:14:fd:25:ea:79:d5:c2:
                    e9:f6:f0:0e:ad:a9:be:b7:e9:4d:6a:94:80:72:a5:
                    cc:f7:47:e6:2d:5c:aa:5c:de:3b:35:27:ee:e9:12:
                    f3:d0:fe:4d:7d:73:f4:d5:7c:0a:82:01:92:91:86:
                    57:e9:82:48:4d:e2:0b:38:ea:56:4a:76:18:eb:2f:
                    16:1f:7a:3e:5f:7e:14:e7:a5:ac:76:dc:28:96:c6:
                    3d:76:a8:7b:c8:6f:94:90:3d:16:ec:fa:c3:61:c4:
                    e1:f3:e4:74:fe:0a:fc:4b:e8:76:d5:10:3e:48:18:
                    e1:29:2f:58:78:d4:bd:50:ff:59:c0:7f:7f:a8:74:
                    f9:98:91:20:19:16:7d:01:11:1c:41:b2:41:76:c6:
                    fe:6b:98:2f:8e:0f:81:95:38:92:f4:f7:22:81:50:
                    dc:d0:f2:1c:e8:18:ce:fe:df:dc:49:a8:47:87:1a:
                    b2:db:1d:34:3f:3b:c7:5f:fe:b7:7b:a2:34:57:1f:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C9:0A:C7:CB:28:EE:CF:AF:28:0F:37:4E:45:5E:16:F0:CA:B5:39
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:7a:d9:3a:4f:6b:16:72:ec:b6:c4:76:b4:00:eb:31:15:75:
         17:26:af:57:25:ec:18:63:63:66:97:03:40:32:92:13:46:9f:
         33:f4:cf:c0:ae:d8:3e:49:3b:82:78:73:48:71:5d:50:20:de:
         c7:fb:0c:57:de:8e:37:a7:1f:c0:37:81:a8:cc:be:a8:01:53:
         22:7c:18:16:8f:ed:84:a2:0f:38:78:b1:35:45:70:da:94:d7:
         fe:0b:e6:c3:54:38:e0:18:e7:4c:7d:7d:fe:2a:01:9f:f8:30:
         31:82:f2:6e:b2:c7:24:bf:47:c1:1d:2d:6f:b6:9c:39:b8:b5:
         81:01:09:3f:53:2b:24:73:8b:da:aa:6f:7a:65:ba:48:50:76:
         14:1e:ba:b4:45:d9:e2:91:0b:0c:a2:a1:52:66:2f:69:ae:0c:
         cc:81:a0:24:35:84:bc:74:5e:2b:55:fc:6b:b6:82:55:38:c9:
         46:81:7c:6a:5b:b9:32:ba:72:e5:85:81:ee:e4:94:14:ce:65:
         e9:1a:72:3f:09:f4:f1:c6:18:25:fb:1e:35:b0:97:e2:a4:fc:
         4a:4b:3a:c4:22:11:36:58:c2:65:af:11:c5:45:c3:fb:24:1c:
         2c:26:78:b8:21:ef:4b:f1:f2:11:05:03:49:a7:2c:5e:97:75:
         f8:a1:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:10:49 2026 by rpki-client