Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa
File:                     323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (raw, json)
Hash identifier:          KD9zvlK+/6ZkExjWr88WbUAlBYvbDy3RsOKuw5U65zg=
Subject key identifier:   D9:EF:20:7A:6F:66:41:48:C9:3B:86:A7:37:C4:6D:B7:48:F2:0D:EA
Certificate issuer:       /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
Certificate serial:       55614AC6095C4A8B0205CC069DC1C5494E1314AB
Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     148982
IP address blocks:        2407:cdc0:c010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Jul 2025 16:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:61:4a:c6:09:5c:4a:8b:02:05:cc:06:9d:c1:c5:49:4e:13:14:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=D9EF207A6F664148C93B86A737C46DB748F20DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:d3:19:47:84:58:ef:2d:f4:ad:1f:3a:10:
                    d3:4d:b4:c4:4f:ee:e9:32:9c:ca:47:a4:34:ef:84:
                    17:7c:69:95:f0:92:22:7a:63:4e:28:06:ef:2e:86:
                    ec:22:8f:df:b7:1e:dc:bc:54:ba:be:1a:c7:6a:66:
                    56:7d:c0:6f:43:37:b7:0e:ca:b1:ad:5e:a8:a6:0b:
                    98:17:2c:53:49:c4:6e:6d:b3:0f:3f:a5:30:ac:eb:
                    2d:f1:55:72:51:fd:ee:e5:ff:4e:5a:00:ac:5f:73:
                    48:57:83:40:f3:59:56:0a:c4:b8:b0:42:0d:d3:6f:
                    60:07:f6:63:02:b9:bb:f9:91:a4:a9:e2:12:8d:89:
                    79:f2:e3:d2:49:73:ac:75:b6:ac:91:c3:93:e2:67:
                    9a:6e:3b:ee:45:13:2d:0f:2f:69:20:d0:be:55:aa:
                    70:38:5a:74:a0:f4:cc:11:70:9b:a5:c8:63:98:08:
                    e1:df:19:46:80:29:d2:0f:db:3c:79:1f:16:b1:52:
                    59:e1:ae:5d:0d:16:89:45:ab:29:3d:4f:43:5f:61:
                    bf:c4:fd:eb:ec:90:80:9a:ba:ea:0a:b1:1d:00:37:
                    bf:97:76:f9:ab:9f:28:ed:02:bb:b1:25:22:4f:fd:
                    45:ab:a6:10:b2:e3:68:3f:f3:5a:06:05:6c:fb:9f:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EF:20:7A:6F:66:41:48:C9:3B:86:A7:37:C4:6D:B7:48:F2:0D:EA
            X509v3 Authority Key Identifier:
                keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:68:0a:06:c6:ec:c5:49:78:88:b5:82:ce:49:2c:4f:b7:21:
         48:0e:cc:0a:b0:36:14:b6:cb:72:f8:42:75:e1:92:b4:a1:a8:
         1f:96:f6:5a:fb:5b:4c:da:e5:d6:0a:85:a5:96:e7:24:1b:2a:
         81:68:7e:10:f8:27:90:c6:d3:bf:22:3d:6c:56:c2:c1:eb:e6:
         3f:38:aa:5e:e8:69:f6:80:af:5f:f4:2c:c2:13:ff:5a:0f:70:
         aa:1b:ed:73:6a:f9:b5:46:b5:54:62:94:e9:4b:a2:05:44:dc:
         a0:a1:85:2b:37:0c:c0:e4:1d:30:f2:a8:71:01:64:6f:58:ff:
         9c:c0:ad:71:c7:2f:3f:92:9d:65:79:90:81:02:47:c6:8f:72:
         ab:36:e5:4e:17:4c:fc:fa:70:fd:8d:5c:c1:21:a0:3e:42:f7:
         08:d8:ae:82:35:4e:75:c6:44:18:7d:78:9d:f5:d7:47:7b:9d:
         1c:3b:32:1d:39:46:3a:ec:fa:d5:19:a5:e5:b8:69:00:3c:de:
         4a:d7:be:e1:55:7b:03:f2:c8:d7:b3:45:17:15:0a:42:78:eb:
         a6:87:43:b8:6d:da:b6:91:48:cf:33:a2:e4:0f:1d:4c:15:75:
         e5:9e:ee:b9:77:bc:28:97:c2:f5:1d:6f:46:bb:e3:7e:fc:b9:
         00:d6:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:34:56 2025 by rpki-client