Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e203338313336.roa
File:                     323430313a323132303a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          +fVmnnc1IdeBfCQk+wm7zwGJz5E6xRV72VmJGynl2jQ=
Subject key identifier:   F7:A1:F9:CB:D0:63:80:8F:D0:74:99:C9:40:0D:FA:F5:D9:77:8E:23
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       630F6A0FE564D9A758FAACB407AC8A5BD97C1087
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e203338313336.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     38136
IP address blocks:        2401:2120::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Jul 2025 20:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0f:6a:0f:e5:64:d9:a7:58:fa:ac:b4:07:ac:8a:5b:d9:7c:10:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=F7A1F9CBD063808FD07499C9400DFAF5D9778E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:cd:3d:20:d4:d5:ca:3d:2d:ca:ea:41:e0:
                    e2:e9:0f:e3:31:d3:ca:78:53:51:5b:3c:bc:32:50:
                    e4:50:f8:ba:be:de:5e:1f:73:8f:c0:38:3b:c3:da:
                    c8:1c:b6:53:e5:09:3e:c2:a3:a9:7d:09:40:ea:67:
                    fa:54:e2:d4:91:ce:2f:5b:93:be:0c:7b:0e:2f:5c:
                    11:d7:49:0c:a6:67:64:54:46:1c:27:38:10:ef:1d:
                    58:3f:14:60:dd:26:3c:df:b0:fb:67:2d:17:f2:70:
                    66:65:0e:ca:4a:46:81:c5:71:ff:85:af:71:50:f4:
                    36:e0:df:68:d3:30:67:a2:84:3d:8e:d8:12:05:d3:
                    1e:b4:4c:ae:79:31:c1:05:99:25:ad:d6:4b:78:ee:
                    dc:ba:06:01:b6:8c:28:72:59:75:7e:fc:5a:c6:99:
                    cb:b8:a2:84:60:51:d3:8d:95:1e:79:05:5d:63:ac:
                    68:d6:f5:ee:0f:94:dc:d2:77:c2:50:70:4d:5d:5a:
                    96:56:6a:20:55:a1:51:73:3f:cf:6e:85:e4:82:00:
                    8b:b3:36:f7:53:f4:75:6f:db:5f:6a:5b:10:5f:70:
                    88:d7:bc:4a:9a:99:fc:53:a8:d2:f6:5b:17:a6:66:
                    57:a1:4e:be:74:a2:16:a3:a3:49:b0:e6:98:57:ae:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A1:F9:CB:D0:63:80:8F:D0:74:99:C9:40:0D:FA:F5:D9:77:8E:23
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:d1:37:e4:1b:82:9e:66:fd:6a:11:5c:68:45:4c:ce:30:86:
         d2:c7:cb:ec:83:89:f1:78:86:85:46:c5:65:01:c4:11:49:01:
         4d:4b:50:47:cc:ee:49:9b:a3:a7:0a:fe:22:a8:8e:81:f3:a6:
         a0:27:d9:20:9d:45:3c:76:97:5a:44:cb:e1:65:3a:69:82:89:
         19:b0:2c:37:a5:d1:10:3d:a4:42:a2:41:4d:b6:e9:86:fc:9c:
         00:d9:b8:35:cb:34:22:7a:bc:3a:78:6e:62:2c:1d:c4:d2:ec:
         0e:94:e3:c8:fe:d0:21:a9:69:02:3a:6f:6a:f3:88:cc:c7:c7:
         cf:3c:b9:48:48:ae:54:93:46:ad:a5:cf:27:7a:d6:2b:cb:ca:
         41:2b:55:ee:b5:76:ca:a8:e3:95:51:4f:d6:01:29:90:da:d1:
         12:7d:80:9e:7d:42:8e:d1:62:75:0c:26:5e:6d:be:ea:69:d5:
         e2:16:4d:41:a3:cb:a3:a7:c3:34:f2:ee:b5:0a:7f:15:d2:a4:
         f0:56:39:f6:ea:ef:e3:6f:9d:cb:3c:fb:fc:13:d7:27:93:66:
         b5:a6:7a:c2:b1:f2:a5:e7:9b:ef:2c:41:85:78:05:b7:75:38:
         ac:25:28:87:ca:6b:f2:91:36:2f:9d:30:fb:e4:41:3b:f9:49:
         84:52:52:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:24:10 2025 by rpki-client