Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
File:                     323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (raw, json)
Hash identifier:          TA0zzDtznfaVunUDTZhEgOpcmXojb9Y1CH8zcOAwKlk=
Subject key identifier:   06:C2:68:DF:C7:53:7A:7C:FD:8A:24:DF:08:9D:60:3F:DF:24:5A:20
Certificate issuer:       /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
Certificate serial:       6B45A28E63298729B3A78144F2F1390B6570240C
Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     139299
IP address blocks:        2407:cdc0:efff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Jul 2025 16:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:45:a2:8e:63:29:87:29:b3:a7:81:44:f2:f1:39:0b:65:70:24:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=06C268DFC7537A7CFD8A24DF089D603FDF245A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:38:66:ad:1a:4a:5f:93:26:20:7f:0e:fc:
                    d6:fa:d0:90:62:95:3c:4f:92:4c:b6:c2:09:a5:97:
                    dc:ef:e0:fb:02:3c:8a:7e:cf:29:f0:78:a0:e0:60:
                    84:3c:ea:f3:c4:f1:8a:be:7f:15:e8:7e:83:20:a3:
                    1b:99:9e:9d:8c:63:6f:23:df:2d:fb:e2:6f:90:6b:
                    98:a4:59:bc:34:06:b0:4a:bc:86:b2:82:1c:55:24:
                    9d:4f:95:41:d4:b9:e4:52:57:1c:a9:09:bd:71:58:
                    b0:40:7e:8c:4d:8d:3c:56:e7:7a:78:ca:1e:1f:bd:
                    c0:47:71:8c:9f:6b:38:6c:66:d3:a2:80:dd:f6:93:
                    57:c9:b7:1b:a2:b7:6f:d3:b7:a4:44:cb:e3:af:f9:
                    f5:b8:52:5d:a0:bc:8c:46:f8:67:42:d3:28:06:bd:
                    9f:3d:57:e5:5c:de:cd:16:ef:b7:b7:69:66:49:9f:
                    f8:31:9d:19:45:6b:2e:f2:1c:e1:79:33:64:5c:3d:
                    90:64:d6:b0:e7:e3:f5:b6:81:6d:d2:d3:96:85:36:
                    af:c5:74:df:38:30:e3:1b:f0:e3:3e:e9:38:a5:bf:
                    69:23:81:99:b0:27:7f:1b:1c:70:e0:30:58:ea:39:
                    ad:a3:b6:71:92:16:e8:d7:3d:f4:4c:85:c4:3f:2d:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C2:68:DF:C7:53:7A:7C:FD:8A:24:DF:08:9D:60:3F:DF:24:5A:20
            X509v3 Authority Key Identifier:
                keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:efff::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:86:fb:32:62:50:e6:2d:a7:e0:6d:83:04:4e:40:7e:a7:fb:
         ee:27:03:b2:91:1a:12:b8:43:0e:a7:d0:91:c8:df:0f:78:cf:
         05:26:18:65:aa:3e:2d:e6:d8:cf:b3:5c:70:06:4c:50:07:d7:
         33:5f:ee:f5:8e:dd:05:5c:d2:1e:1b:b8:ea:05:83:58:21:45:
         46:90:0b:52:58:c3:b7:c9:1d:39:21:a0:b4:bd:eb:78:20:93:
         92:bd:bb:9a:38:19:b8:9d:a8:fc:57:d3:7e:2b:0d:d8:c1:31:
         70:1a:53:35:41:de:b9:5e:9d:23:c8:da:6d:54:33:14:f8:f2:
         16:ed:f7:98:52:f7:b1:07:ea:b6:2e:b7:50:8e:11:c1:9f:2c:
         89:df:fd:42:c4:4b:69:c9:85:eb:d2:55:3e:b1:8a:2a:48:45:
         5c:b7:a4:ba:67:f8:9e:b1:de:0a:d1:90:99:d6:33:63:c5:bb:
         7e:fb:26:49:cf:9b:4f:c0:f2:8d:d3:06:bf:2f:f3:dc:68:a6:
         f7:27:1a:14:94:a9:21:ce:c8:8c:4c:e4:50:2e:e6:fd:45:f1:
         87:d7:e8:64:42:17:5a:77:d2:5e:0f:7c:da:de:a8:9c:a7:18:
         48:af:fe:c0:f2:74:41:03:ee:ec:de:f5:36:52:e9:10:59:c5:
         be:21:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:17:49 2025 by rpki-client