Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
File:                     3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier:          8cy0UaVY60Z81DDBpMzdqMzJ47APJ86cTC64lEWbf+Y=
Subject key identifier:   B0:2D:61:AC:DA:13:E2:21:49:67:D9:6A:EE:CE:38:58:F7:1A:B8:67
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       12E52A09F6452F2390FC80CD1D2F8F8627DAA752
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
Signing time:             Fri 19 Jun 2026 07:53:13 +0000
ROA not before:           Fri 19 Jun 2026 07:48:13 +0000
ROA not after:            Fri 18 Jun 2027 07:53:13 +0000
asID:                     983
IP address blocks:        103.248.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 14:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e5:2a:09:f6:45:2f:23:90:fc:80:cd:1d:2f:8f:86:27:da:a7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Jun 19 07:48:13 2026 GMT
            Not After : Jun 18 07:53:13 2027 GMT
        Subject: CN=B02D61ACDA13E2214967D96AEECE3858F71AB867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:a8:c2:37:88:e5:58:96:34:fd:99:0b:b3:
                    56:61:1d:82:17:c9:75:a2:8d:22:22:a3:e0:21:ce:
                    0a:d7:fd:5c:cc:7a:89:91:7c:02:38:04:0d:14:7d:
                    0f:e1:9f:7f:ee:78:70:af:63:56:a9:00:b2:b0:fd:
                    0f:44:a0:10:48:fc:8c:13:9c:99:cf:06:b6:fc:89:
                    05:7b:8b:3a:b3:82:ca:49:e4:2a:d9:2d:34:e6:10:
                    e7:52:50:53:5c:81:a0:cb:91:e8:11:8a:d4:12:29:
                    f0:d8:f3:89:d1:1e:5d:1c:79:58:67:37:af:22:f1:
                    b3:9c:5b:b4:22:93:5e:1b:21:7e:61:a6:14:51:8c:
                    af:26:17:22:6a:0b:cc:75:c6:46:cc:3b:1f:ff:f2:
                    8c:50:15:26:ab:3c:ea:7a:37:25:69:3d:01:e7:d3:
                    9f:c3:d2:e9:eb:85:41:45:b6:a9:9a:dd:e6:1e:3f:
                    94:a1:10:0c:ff:8e:4f:40:1e:98:45:d3:15:d4:08:
                    d2:7f:73:95:e2:bf:1d:a4:0f:0a:21:9c:04:b5:3c:
                    77:77:57:ae:5d:e2:96:d9:51:e4:aa:75:36:8e:cb:
                    ef:e5:ec:25:b8:8c:01:44:8f:0d:3c:91:33:e9:f5:
                    0f:a7:00:fe:04:4a:f5:3e:8b:7d:dd:a1:fd:d1:1a:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2D:61:AC:DA:13:E2:21:49:67:D9:6A:EE:CE:38:58:F7:1A:B8:67
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:ba:eb:60:b5:5f:8b:da:fb:41:d2:20:37:ad:14:fe:6b:bb:
         ef:fd:73:4b:7c:f3:a3:fb:47:52:48:d1:75:91:57:bd:8d:06:
         b7:f2:86:b6:c6:d2:7c:04:b6:c9:6a:35:4e:a6:2d:0a:f2:63:
         5c:56:87:26:b4:94:9f:64:65:73:5d:70:fe:e9:b6:a4:65:2e:
         32:e2:93:e9:cf:8f:ea:c4:9b:0b:75:ed:58:de:ba:9d:f5:77:
         ee:b1:54:fa:25:2f:84:88:c4:b9:20:a2:cc:2d:ed:88:67:7a:
         d2:a5:f1:1a:bb:61:23:36:b0:6c:58:ed:39:ef:c4:51:cc:f3:
         22:c9:bf:a4:ec:93:ed:3a:64:87:7c:63:f2:47:ae:80:ae:91:
         3b:82:eb:01:4a:3e:ff:c9:e8:a7:7a:8e:6d:d4:10:d9:f1:52:
         12:9f:00:2a:af:a6:96:ab:76:39:91:36:df:22:b6:c3:da:74:
         fb:6d:d0:ab:bf:4c:03:6d:6f:d1:99:9c:5a:2c:3b:9d:af:c3:
         bc:ce:6d:3f:df:b2:a8:2d:87:d5:06:bf:7a:bf:db:1a:44:76:
         3f:d1:ec:a6:cd:43:5f:30:ff:89:82:f1:5c:f7:1c:d7:9b:80:
         43:41:59:03:5e:98:61:6a:47:c5:d2:77:f9:55:72:12:a4:24:
         6f:1e:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:08 2026 by rpki-client