Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
File:                     323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa (raw, json)
Hash identifier:          L25nR0UvG/UldlBs2qd2H9CU3atxfpiEtcoKFt1JRRs=
Subject key identifier:   DB:D5:73:7E:A1:6D:58:83:92:85:91:B2:EC:4E:DA:77:19:AC:FD:43
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       0AE0C90E065A18CD6E742E9808D5832C70D6AC96
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
Signing time:             Sat 07 Dec 2024 12:13:27 +0000
ROA not before:           Sat 07 Dec 2024 12:08:27 +0000
ROA not after:            Sat 06 Dec 2025 12:13:27 +0000
asID:                     399164
IP address blocks:        2403:2500:8000:14::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 03:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e0:c9:0e:06:5a:18:cd:6e:74:2e:98:08:d5:83:2c:70:d6:ac:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000
        Validity
            Not Before: Dec  7 12:08:27 2024 GMT
            Not After : Dec  6 12:13:27 2025 GMT
        Subject: CN=DBD5737EA16D5883928591B2EC4EDA7719ACFD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:89:54:24:52:7f:44:91:e2:d6:f0:d7:1d:
                    11:12:74:1d:3c:4d:d8:9e:85:1e:4a:70:9f:a9:44:
                    80:99:e4:2c:a8:57:d6:71:45:f3:88:db:ce:1d:9e:
                    d7:57:63:f1:a7:27:f8:d6:48:50:54:d4:3e:4d:aa:
                    58:c3:83:b1:d4:58:1d:c1:b5:3a:f7:11:a3:7c:19:
                    f7:78:76:34:b9:60:c9:73:45:ed:7a:3c:c2:a4:3b:
                    fc:c1:9a:b5:db:71:48:ad:27:12:23:84:4d:fc:b1:
                    85:b2:96:66:1f:80:4c:44:70:b0:e5:8b:7f:b4:67:
                    99:ea:88:3e:64:61:42:09:e4:7b:49:4a:c7:d7:f0:
                    66:1c:9c:28:6b:e6:b6:eb:79:9a:71:d7:81:1a:66:
                    79:0f:d8:ae:6e:15:4f:f7:48:57:a5:7f:67:fe:8f:
                    14:36:48:7b:06:32:4e:f9:7c:28:55:62:20:f3:85:
                    6f:f2:6c:90:2a:45:23:b8:ed:a9:52:d9:32:68:57:
                    0c:dc:96:8b:0b:94:95:a0:bd:6a:32:65:8d:78:10:
                    f9:d6:00:66:d9:d3:ec:0e:f9:05:9e:54:e5:67:e0:
                    48:ff:b2:44:e9:92:ea:71:77:31:aa:2f:e5:1a:db:
                    cf:b9:47:98:b4:6c:0b:01:0d:cf:9e:d3:cc:c6:3a:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:73:7E:A1:6D:58:83:92:85:91:B2:EC:4E:DA:77:19:AC:FD:43
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:8000:14::/64

    Signature Algorithm: sha256WithRSAEncryption
         af:c1:22:51:a0:e3:0f:31:f1:4c:80:e5:7d:99:8f:9a:9e:cd:
         7a:26:43:20:5b:8e:24:ae:b9:93:ff:80:f5:f4:70:43:39:0f:
         c2:c5:c1:67:5d:1b:84:8d:46:35:9b:b9:ee:d6:ec:da:bd:ac:
         db:93:08:7b:d9:c8:33:99:0e:84:d6:78:98:d7:c0:79:ed:8f:
         66:5c:df:52:be:15:cf:f6:93:8f:61:c5:a5:40:d2:5c:1a:4d:
         07:7e:e2:c2:ac:89:a6:12:88:b4:e7:d4:7f:d7:bc:e4:7d:4e:
         fe:c8:23:54:c5:33:ab:e9:43:70:fe:4f:88:61:d5:5f:f9:09:
         46:43:29:07:cc:e8:e9:f3:1b:8c:6b:c7:0c:04:51:92:67:c8:
         1f:1c:d3:a8:3f:fc:6c:8c:72:19:23:19:0b:f1:00:06:34:a9:
         5d:36:3c:8c:12:0f:f3:74:0d:46:db:22:2a:85:fb:06:9a:43:
         72:65:d4:9e:be:a5:62:80:32:45:d8:92:d6:8a:5d:88:96:d3:
         45:96:4b:c2:1e:2f:0d:58:61:2e:f2:14:03:c5:b5:2d:11:37:
         6e:89:55:16:e4:1a:be:b1:39:ce:1a:20:a1:3e:21:8f:c1:8d:
         9c:68:2d:ab:5e:a1:62:21:9c:3b:b7:a7:63:50:60:b7:66:fe:
         e4:bb:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:39:59 2025 by rpki-client