Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa
File:                     3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          C78YXwokT8gFK438W9wiAsbj2MrZh0H0T0Ivpi9LsWI=
Subject key identifier:   58:3A:DB:35:84:42:F3:76:93:A4:5E:74:AE:35:F8:DA:38:CE:56:4F
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       41CC0F82F66077534CF9FB9361DE5D2CA394E642
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa
Signing time:             Fri 03 Oct 2025 20:14:28 +0000
ROA not before:           Fri 03 Oct 2025 20:09:28 +0000
ROA not after:            Fri 02 Oct 2026 20:14:28 +0000
asID:                     36236
IP address blocks:        103.254.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 03:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cc:0f:82:f6:60:77:53:4c:f9:fb:93:61:de:5d:2c:a3:94:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct  3 20:09:28 2025 GMT
            Not After : Oct  2 20:14:28 2026 GMT
        Subject: CN=583ADB358442F37693A45E74AE35F8DA38CE564F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:29:da:28:2a:db:9c:26:d3:fb:97:0c:e9:11:
                    66:9f:b8:c5:49:f9:5d:3e:15:e7:23:a5:f7:d8:7f:
                    80:e1:f9:33:c3:2f:c4:fe:73:09:ed:4a:98:fe:a2:
                    f8:49:52:79:6c:b1:53:01:77:be:fe:a1:06:8a:7f:
                    e3:f7:fa:25:eb:e2:ec:73:32:85:c3:4f:a5:ae:bc:
                    69:b2:7b:08:52:65:0a:a5:7a:bd:68:2d:d5:45:c3:
                    b9:3b:45:90:46:06:78:4e:d2:6a:a7:d7:73:53:84:
                    45:82:7f:2a:33:a4:fe:62:a2:07:16:5e:23:36:d4:
                    de:39:b7:cd:4c:4a:31:04:aa:17:6e:80:d1:fa:dc:
                    82:5b:2a:8b:82:b7:9b:19:1f:cd:d1:44:c2:73:17:
                    83:ba:ea:2f:68:aa:07:77:1d:c0:5f:ef:b6:b1:43:
                    41:a2:d6:8a:f6:e1:ca:7c:4f:18:ff:1b:fb:26:8b:
                    86:da:cb:57:6f:9b:2b:e6:f1:54:9e:88:4d:c4:37:
                    b4:4b:d0:a7:f0:5f:4e:cd:45:56:9f:34:a6:1b:96:
                    02:29:9f:f3:78:e9:17:c9:25:aa:09:74:16:39:72:
                    de:6e:f6:e3:e6:f4:bb:d9:e6:72:e0:2e:fd:6d:81:
                    dd:fd:02:29:26:07:11:ab:68:18:a7:0c:0f:15:c1:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3A:DB:35:84:42:F3:76:93:A4:5E:74:AE:35:F8:DA:38:CE:56:4F
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/3130332e3235342e3136322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:14:30:9f:3a:e1:be:56:8c:92:af:ef:7b:f9:69:e8:44:90:
         59:b4:e3:28:c4:37:32:2c:dc:40:0b:b5:42:2a:30:c9:b1:f0:
         89:06:08:7c:21:27:ba:fe:da:36:d7:b6:92:3c:3e:41:89:7a:
         3e:f4:4f:7c:1d:31:b1:2c:a3:90:c9:5f:a1:56:1f:80:b4:b2:
         f6:18:04:40:4f:ae:ae:52:6f:f0:19:62:56:a4:57:37:a8:cb:
         d1:7e:ac:7d:a5:fd:87:c7:c0:04:74:f7:00:a4:67:e3:a7:9b:
         d4:32:43:3b:6b:8d:48:d7:37:65:59:76:dc:51:a4:77:d2:87:
         9d:10:b5:db:87:13:5b:98:eb:be:0f:a2:ba:ca:38:c7:8f:e2:
         1c:e9:aa:20:f5:e2:62:ab:fa:02:a9:00:81:c3:68:e2:0b:48:
         93:9f:4f:29:c8:e3:c7:dd:79:dc:39:8d:aa:96:a4:19:4c:ea:
         74:b2:31:37:f0:a8:93:34:23:cb:61:aa:ce:39:c5:4a:05:ee:
         57:07:2f:82:65:28:87:9e:21:5a:41:11:59:d6:52:69:c3:33:
         1f:8d:39:d0:38:31:5f:fe:03:66:17:11:96:18:30:9f:7d:d9:
         5b:60:36:01:5b:17:e0:0f:57:42:b8:03:86:3c:86:05:75:fb:
         f3:b0:13:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:30 2025 by rpki-client