Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa
File:                     3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier:          R5D95Yyucj24CHmvveExgz8xypOqRjSoZyN0MNvaevo=
Subject key identifier:   43:E0:94:58:F5:57:E5:4A:D4:47:6E:3D:19:84:24:08:06:6A:88:29
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       4A064A545817D55C2F0F8939C74755ED08AAA98B
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa
Signing time:             Fri 03 Oct 2025 21:14:29 +0000
ROA not before:           Fri 03 Oct 2025 21:09:29 +0000
ROA not after:            Fri 02 Oct 2026 21:14:29 +0000
asID:                     36236
IP address blocks:        103.254.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 03:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:06:4a:54:58:17:d5:5c:2f:0f:89:39:c7:47:55:ed:08:aa:a9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  3 21:09:29 2025 GMT
            Not After : Oct  2 21:14:29 2026 GMT
        Subject: CN=43E09458F557E54AD4476E3D19842408066A8829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:39:c7:f5:87:2e:b8:b0:b0:62:01:fa:03:
                    a7:7d:a1:d0:01:19:13:2e:c7:74:9e:58:64:79:75:
                    1c:6f:84:52:7e:65:e8:8e:99:89:c2:f7:54:0c:18:
                    1c:01:51:fb:d8:2b:93:38:2e:59:78:fb:11:c7:6e:
                    3e:9a:04:b6:e6:2d:c3:5b:06:bd:38:b2:32:a0:1d:
                    da:d2:32:2c:9f:d5:56:b5:f4:06:7c:71:6b:11:24:
                    17:65:dc:4b:60:70:cb:e4:00:cc:c3:9c:03:6e:2a:
                    8d:13:45:f5:b6:6e:c7:00:77:37:90:20:c6:a7:da:
                    b3:21:84:90:ec:d8:2b:70:1a:16:d5:cb:a0:9f:ca:
                    de:86:26:a0:09:06:9b:93:f6:56:2e:3b:22:c0:dd:
                    a0:7d:8b:3e:e2:78:25:ad:7b:ef:9e:0f:82:e7:f5:
                    93:df:83:24:87:29:28:e6:31:65:ab:2b:e4:b2:99:
                    a8:db:43:b6:6a:b2:00:51:18:8d:fc:79:cd:28:1c:
                    82:7d:74:69:63:5d:90:57:a2:9a:4d:19:85:98:c6:
                    4e:e0:2a:a5:e1:b7:a2:e4:c7:4f:8f:60:0c:b1:37:
                    0e:49:a4:3e:1f:cc:5e:30:38:75:c5:a6:99:c0:12:
                    13:e9:a9:92:b6:ae:df:6b:52:32:9d:c0:6f:2e:4b:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E0:94:58:F5:57:E5:4A:D4:47:6E:3D:19:84:24:08:06:6A:88:29
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136302e302f32332d3233203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:e9:2e:15:06:d8:99:cd:52:1a:98:bf:42:b7:f1:7d:51:b1:
         38:2f:58:a7:16:72:a5:18:4d:8f:3b:96:04:b1:8c:e2:1b:4b:
         03:13:37:e0:0e:35:91:97:1d:af:86:97:09:f2:55:6f:1f:8d:
         e8:69:a6:0c:00:e3:c0:42:c3:d8:1a:41:78:5e:ad:36:bd:34:
         e3:b6:ef:4c:2b:47:4d:fa:f7:84:aa:c2:84:96:81:1b:5a:ab:
         31:66:5a:56:b1:a5:38:f1:35:48:b5:e0:4a:97:0a:d9:b5:58:
         ec:54:fa:4a:20:f4:3a:f8:e6:e2:b5:83:7e:8e:b3:45:20:8c:
         8d:2f:07:1b:9a:8c:c1:25:05:d2:cf:7f:b3:de:80:a8:27:2e:
         5e:cf:21:e9:35:88:ee:5c:26:42:b7:f1:58:52:7d:1e:73:1f:
         80:d4:9f:b7:a1:da:b0:71:6f:4b:7b:d7:8a:36:ae:97:9c:33:
         12:02:a7:29:79:e7:d2:0c:ad:cf:f0:e4:bb:4c:f9:3c:60:a1:
         0d:f5:5a:9e:1c:4f:c8:62:45:a9:ed:72:30:20:43:02:cd:42:
         54:00:ad:13:f3:fa:62:e0:3e:49:52:0e:ec:b9:53:25:a4:76:
         7e:34:e9:fa:7b:52:2e:98:6c:ce:6f:8c:55:97:49:21:82:19:
         49:83:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:59 2025 by rpki-client