Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa
File:                     323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa (raw, json)
Hash identifier:          eZuSQzqTU8VaOvzd0KHJBHquZCW7OqwP4n8vCwstUQw=
Subject key identifier:   6B:74:D2:E4:EE:9B:89:C1:CC:5E:9E:1A:1F:13:91:47:E1:9B:BD:C5
Certificate issuer:       /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
Certificate serial:       4B51F1ABEE611BBAF3751634C9DBD5A2CAC2DA5E
Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     152704
IP address blocks:        2407:cdc0:eff0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Jul 2025 16:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:51:f1:ab:ee:61:1b:ba:f3:75:16:34:c9:db:d5:a2:ca:c2:da:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=6B74D2E4EE9B89C1CC5E9E1A1F139147E19BBDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:bb:e0:8a:f0:43:70:d2:7c:f4:6d:f5:5e:
                    85:a1:f2:a5:67:f3:b8:fd:21:e8:3e:0f:a8:9b:d5:
                    6f:3d:0d:cd:9f:df:4d:34:60:58:30:3e:0a:4d:e6:
                    3e:b4:65:6d:e1:6a:b5:e2:72:2c:cb:ed:31:de:f6:
                    45:90:0d:41:53:63:91:e5:95:bf:29:74:82:9c:f4:
                    5f:96:8f:10:6f:1b:18:54:31:57:b9:25:d3:d5:d1:
                    30:eb:fb:ca:67:52:ff:5d:bd:af:7d:af:91:cf:ad:
                    66:b4:1a:f3:32:7a:3e:ea:c3:1f:07:30:17:ad:55:
                    08:39:9f:90:89:8b:d1:c7:89:9e:60:13:db:7c:70:
                    64:86:4e:90:b1:4e:df:c2:e1:90:a3:99:cc:98:6c:
                    38:d1:00:fd:0f:a8:0f:97:7a:6b:07:da:7d:9d:40:
                    99:3b:8f:4f:84:54:5c:4d:63:46:21:82:d0:6c:90:
                    fb:43:a5:ee:33:98:59:b0:40:96:e4:ff:10:13:43:
                    30:45:84:71:84:bf:d8:b7:45:cd:86:cb:53:23:62:
                    3f:74:be:c7:1c:5c:dd:3f:77:e1:a9:1f:5b:67:76:
                    5b:a7:2c:7a:9f:e7:5d:71:6b:76:49:28:6d:ac:b4:
                    57:12:da:44:71:63:ae:a7:61:0c:b8:d0:b3:76:ae:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:D2:E4:EE:9B:89:C1:CC:5E:9E:1A:1F:13:91:47:E1:9B:BD:C5
            X509v3 Authority Key Identifier:
                keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:eff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:17:a9:87:ea:69:e8:56:13:bf:fc:f5:f5:d3:55:0c:41:bd:
         fb:07:d9:a4:ad:6c:b7:6b:ba:f7:fd:fe:15:8a:f9:c6:c0:27:
         8f:0f:71:4c:72:5f:fb:23:0d:a1:60:59:25:49:46:a8:66:78:
         6a:d3:c8:ab:57:2c:71:a9:78:8f:6b:8b:81:e8:ff:c6:58:7e:
         2b:87:7d:fa:42:75:c8:c6:ab:a6:d2:45:ec:a6:f2:17:9f:c7:
         cc:de:52:a6:60:f6:05:a2:36:cd:49:fd:c5:ea:4f:ad:1d:09:
         f5:2e:ce:1a:2d:70:26:a7:23:dc:e0:f8:f2:32:00:59:3a:10:
         96:81:37:b8:4a:75:f0:4d:bd:dc:be:b1:10:8c:06:10:b4:23:
         26:64:b7:47:5c:45:31:a9:0b:22:e9:7e:f0:43:86:31:ef:0b:
         ca:5b:97:5b:4b:34:d5:68:64:bb:9d:37:36:f2:23:50:18:3b:
         81:e3:e3:78:f0:e6:05:8f:5e:f4:1f:ba:a1:d2:98:2f:98:80:
         49:9f:bb:bd:6c:f6:75:cc:90:0f:9d:f6:f7:7f:ba:5d:33:00:
         4e:18:e0:b1:fd:e5:75:08:9e:0a:e5:bc:55:bd:3c:2d:a2:25:
         0a:12:03:d3:cd:8a:70:e5:51:bd:a7:53:73:fe:f6:a3:7d:c5:
         90:0a:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:14:58 2025 by rpki-client