Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203236353438.roa
File:                     3130332e3230382e38342e302f32342d3234203d3e203236353438.roa (raw, json)
Hash identifier:          9cne7Ot8sMtdPU7mGFJf/BOopEfMe2c4sglDq55byDw=
Subject key identifier:   87:4A:B4:67:C6:F5:6A:7E:98:10:68:0B:74:C7:A7:33:7C:29:E7:CF
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       5A0CE92711B1767E17EA1495E243D642EC70581A
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203236353438.roa
Signing time:             Sat 03 May 2025 14:41:33 +0000
ROA not before:           Sat 03 May 2025 14:36:33 +0000
ROA not after:            Sat 02 May 2026 14:41:33 +0000
asID:                     26548
IP address blocks:        103.208.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 00:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0c:e9:27:11:b1:76:7e:17:ea:14:95:e2:43:d6:42:ec:70:58:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: May  3 14:36:33 2025 GMT
            Not After : May  2 14:41:33 2026 GMT
        Subject: CN=874AB467C6F56A7E9810680B74C7A7337C29E7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:fd:21:ae:3e:3f:1f:80:ed:bd:01:a0:f2:
                    b9:49:c8:08:3a:64:91:05:44:70:c2:1c:a5:db:39:
                    6d:e4:7f:23:49:05:49:64:16:52:4f:9c:04:e3:78:
                    56:bc:0e:2f:c4:bd:cc:b7:7f:1d:9e:da:d5:3b:3e:
                    6a:0e:da:1c:a4:c1:1b:ce:a6:51:dc:2b:34:78:0b:
                    a8:d6:a3:87:f9:e0:38:7e:ba:2f:f8:8e:59:b2:8a:
                    f4:2c:22:72:af:17:b9:7d:5e:0f:aa:1e:1b:c3:7a:
                    27:01:f0:21:46:e9:f0:39:aa:19:ab:3f:b4:bc:44:
                    7a:6c:88:5b:fc:22:e3:79:da:fe:e4:3a:b9:18:bb:
                    b6:ee:b8:79:86:58:89:c2:a7:60:1e:55:dd:f6:fd:
                    4c:41:75:97:a6:f6:14:2d:96:c8:d3:fd:03:36:a6:
                    fb:97:67:13:59:00:30:c6:0e:68:26:1c:bc:5a:d4:
                    83:4e:b2:63:35:13:c8:8f:20:51:68:bd:4d:e7:de:
                    d9:c0:5e:60:42:59:45:14:10:42:ad:61:2e:83:ca:
                    c8:44:24:b0:10:b4:69:cc:4c:bc:0a:6e:51:5b:f9:
                    0c:35:e5:d9:9d:99:df:7a:9e:c4:77:ec:8e:ce:38:
                    a0:21:98:43:08:a8:a1:fd:d2:a2:f7:1b:70:6f:ce:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:B4:67:C6:F5:6A:7E:98:10:68:0B:74:C7:A7:33:7C:29:E7:CF
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e203236353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:b4:f4:e3:08:08:e0:c6:7e:fe:7c:14:b4:d6:98:e0:c4:
         4b:52:56:2c:ec:e7:10:f3:9b:e4:c6:1b:9d:05:23:5e:60:7e:
         10:db:b3:d9:c8:6f:b7:20:80:ae:e4:72:3b:93:6a:8b:af:72:
         29:88:bb:0b:e7:91:65:be:52:a9:93:8f:b8:16:54:b6:43:b4:
         70:0e:17:30:fa:3e:6f:54:11:62:c9:98:72:1a:23:92:ad:fb:
         b3:06:44:6e:66:58:4e:2d:c1:e2:06:3e:3f:8d:d7:4f:b8:82:
         e3:01:b1:92:13:e5:42:2f:0a:9a:51:08:ba:cb:5c:c2:29:1a:
         ec:fe:f4:30:82:f3:5e:db:bd:a5:7a:30:80:59:0e:87:95:21:
         c4:15:8a:dc:a6:25:aa:29:4c:8d:ed:65:33:0e:b4:05:6f:e5:
         ac:21:ca:52:d9:f7:db:a7:a7:13:27:5d:57:9d:e1:cb:d8:87:
         bb:91:07:6e:e7:0b:03:ea:5a:84:3b:c8:ee:79:6c:45:dd:08:
         cb:b3:4d:c8:06:f4:f3:3b:ea:fd:1a:84:7d:bc:e4:9f:86:66:
         89:88:ac:cc:79:c6:77:14:40:c9:8d:86:ea:66:73:12:ba:e4:
         3c:fa:80:97:dc:4f:a2:7e:2a:e5:26:f5:cc:95:c2:81:49:64:
         b6:c4:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:42:00 2025 by rpki-client