Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232362e302f32342d3234203d3e20313532353836.roa
File:                     3130332e3234342e3232362e302f32342d3234203d3e20313532353836.roa (raw, json)
Hash identifier:          7CBuBEMPLSN8PhUQoE+DLivNdkw0Ddilij1244Tmr2o=
Subject key identifier:   A4:4C:FE:76:E7:1C:96:9A:5A:C6:9E:3B:6F:57:BA:20:85:E2:3A:D8
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial:       3772221C726E986095AD34C4C11B963E554982E6
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232362e302f32342d3234203d3e20313532353836.roa
Signing time:             Mon 04 May 2026 09:06:10 +0000
ROA not before:           Mon 04 May 2026 09:01:10 +0000
ROA not after:            Mon 03 May 2027 09:06:10 +0000
asID:                     152586
IP address blocks:        103.244.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:72:22:1c:72:6e:98:60:95:ad:34:c4:c1:1b:96:3e:55:49:82:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
        Validity
            Not Before: May  4 09:01:10 2026 GMT
            Not After : May  3 09:06:10 2027 GMT
        Subject: CN=A44CFE76E71C969A5AC69E3B6F57BA2085E23AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:fd:a1:10:e8:16:d7:1f:0e:3d:4b:e9:68:
                    6e:fb:07:20:f5:d9:3a:35:9e:e0:b5:b7:11:e2:97:
                    16:af:d8:3d:a2:7f:56:a5:b9:67:98:b5:9a:5b:7e:
                    f2:e3:5c:d4:2c:c0:ba:5a:2a:77:f3:17:cb:f8:ce:
                    a4:55:21:3d:37:99:69:a3:e8:de:ed:75:0a:e0:11:
                    09:d1:e0:8a:ad:68:db:82:a5:6f:a0:ff:71:fe:8a:
                    d2:00:99:2c:ce:07:16:cb:d8:08:6e:ca:99:64:45:
                    2a:2f:06:9f:95:d7:f7:c6:e6:6d:1c:a5:3c:73:7d:
                    ba:a2:09:75:51:8e:f9:3b:17:87:e1:6a:28:df:60:
                    8a:aa:0e:0a:86:c6:ca:0f:37:5a:34:dc:08:22:4a:
                    75:90:6e:1c:fa:cd:ec:d1:25:c6:59:7f:32:66:93:
                    ee:bf:90:1f:f7:29:7b:f5:95:7e:df:17:62:17:4f:
                    3f:a8:5f:3a:72:ae:a8:57:58:f1:50:c5:97:91:e6:
                    cb:eb:c7:49:a6:bb:87:1f:82:bf:5c:e3:cb:6d:45:
                    33:c1:f7:f8:e5:59:3b:c5:fe:f4:31:f0:27:72:88:
                    a3:77:c8:1f:2d:f7:23:7a:22:31:3a:81:cd:c9:73:
                    3f:a1:43:d5:17:f5:66:fa:be:1f:f6:ad:a6:da:5b:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4C:FE:76:E7:1C:96:9A:5A:C6:9E:3B:6F:57:BA:20:85:E2:3A:D8
            X509v3 Authority Key Identifier:
                keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232362e302f32342d3234203d3e20313532353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:68:7c:52:30:27:14:ba:d0:f9:4e:0c:13:1f:5d:ff:b0:
         a7:30:ef:4b:28:46:58:d3:9c:fb:76:5c:05:0e:8d:bb:02:37:
         02:a8:d5:a8:09:34:35:04:85:55:5f:10:60:cd:71:6d:13:00:
         70:6b:80:6b:48:b2:d5:ad:96:4f:36:63:35:39:9e:19:7b:63:
         93:f0:60:d7:be:64:39:8a:ed:c2:c3:81:23:9c:4b:f3:ea:b1:
         89:5a:aa:dd:41:1e:15:1c:71:d1:38:b3:a4:c2:3a:4e:06:c9:
         0d:c9:9f:54:35:5a:20:60:ee:a4:c5:ba:7d:a4:fa:d0:4f:26:
         d8:22:fc:e1:36:ea:04:9c:f7:f4:75:f0:cc:69:14:0c:23:6a:
         1e:e2:42:73:3b:9e:66:44:61:f3:72:87:73:99:83:3f:e1:7e:
         f2:8f:26:4c:4d:60:78:be:0f:d2:b0:f0:fc:b9:25:5b:f3:3a:
         a5:0c:48:f4:05:26:94:88:24:46:5c:13:33:ef:56:7f:80:a0:
         61:e8:38:46:1a:28:aa:b6:45:62:e8:a2:46:aa:83:ae:69:5f:
         49:d9:f1:99:57:9c:ff:50:bd:8a:dc:9e:49:87:bb:5b:91:92:
         b6:f9:65:84:c0:55:b7:14:cf:d7:09:e5:66:8c:71:41:41:95:
         49:76:7a:27
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUN3IiHHJumGCVrTTEwRuWPlVJguYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg2RUQ4NENGRjQ5
NzZCOTIzRTMxNTA5NjQ3NkRENjYyM0U0OUM4Qjc5MB4XDTI2MDUwNDA5MDExMFoX
DTI3MDUwMzA5MDYxMFowMzExMC8GA1UEAxMoQTQ0Q0ZFNzZFNzFDOTY5QTVBQzY5
RTNCNkY1N0JBMjA4NUUyM0FEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMA9/aEQ6BbXHw49S+lobvsHIPXZOjWe4LW3EeKXFq/YPaJ/VqW5Z5i1mlt+
8uNc1CzAuloqd/MXy/jOpFUhPTeZaaPo3u11CuARCdHgiq1o24Klb6D/cf6K0gCZ
LM4HFsvYCG7KmWRFKi8Gn5XX98bmbRylPHN9uqIJdVGO+TsXh+FqKN9giqoOCobG
yg83WjTcCCJKdZBuHPrN7NElxll/MmaT7r+QH/cpe/WVft8XYhdPP6hfOnKuqFdY
8VDFl5Hmy+vHSaa7hx+Cv1zjy21FM8H3+OVZO8X+9DHwJ3KIo3fIHy33I3oiMTqB
zclzP6FD1Rf1Zvq+H/atptpbQwcCAwEAAaOCAkAwggI8MB0GA1UdDgQWBBSkTP52
5xyWmlrGnjtvV7ogheI62DAfBgNVHSMEGDAWgBRu2Ez/SXa5I+MVCWR23WYj5JyL
eTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC85LzZFRDg0Q0ZGNDk3NkI5MjNFMzE1MDk2NDc2REQ2NjIzRTQ5
QzhCNzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2J0aE1fMGwydVNQakZRbGtkdDFtSS1TY2kzay5jZXIwgaYGCCsG
AQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC85LzMxMzAzMzJlMzIzNDM0MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMTM1MzIzNTM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9OIwDQYJKoZIhvcNAQELBQADggEB
AFPHaHxSMCcUutD5TgwTH13/sKcw70soRljTnPt2XAUOjbsCNwKo1agJNDUEhVVf
EGDNcW0TAHBrgGtIstWtlk82YzU5nhl7Y5PwYNe+ZDmK7cLDgSOcS/PqsYlaqt1B
HhUccdE4s6TCOk4GyQ3Jn1Q1WiBg7qTFun2k+tBPJtgi/OE26gSc9/R18MxpFAwj
ah7iQnM7nmZEYfNyh3OZgz/hfvKPJkxNYHi+D9Kw8Py5JVvzOqUMSPQFJpSIJEZc
EzPvVn+AoGHoOEYaKKq2RWLookaqg65pX0nZ8ZlXnP9QvYrcnkmHu1uRkrb5ZYTA
VbcUz9cJ5WaMcUFBlUl2eic=
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:43 2026 by rpki-client