Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e20393833.roa
File:                     323430313a323132303a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier:          9Y5ozUdXLpM7mPSDccTM1hUqUj6itpgpUxa0jF/SbrE=
Subject key identifier:   B5:62:D1:23:A6:48:6E:DD:33:FD:5E:3E:C8:BD:6C:4D:D6:88:7A:3C
Certificate issuer:       /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial:       762E5CA0AAA884B683E0F220AC548CB92199E19F
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e20393833.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     983
IP address blocks:        2401:2120::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Jul 2025 12:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2e:5c:a0:aa:a8:84:b6:83:e0:f2:20:ac:54:8c:b9:21:99:e1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=B562D123A6486EDD33FD5E3EC8BD6C4DD6887A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:9f:13:b2:f9:c9:05:ce:93:e1:a6:59:75:
                    eb:3a:ba:87:1f:bf:08:81:f8:79:d2:eb:c0:bd:a1:
                    64:d0:5e:8f:6d:60:83:23:08:80:06:d2:b1:6f:84:
                    06:57:d1:73:2e:ab:f5:b3:8c:2d:c2:36:f9:7c:b7:
                    8f:3d:a2:17:2c:f6:eb:9b:d6:8e:bb:0d:e7:6a:1c:
                    ab:3f:17:98:70:ef:50:50:40:18:36:f3:51:6b:6e:
                    0b:a0:f2:91:f3:f1:a5:85:2e:f2:a6:a9:71:3a:ec:
                    18:b6:2f:71:df:28:07:57:cf:b3:22:bf:5e:a1:0a:
                    25:09:84:9d:41:63:d6:62:67:b4:4c:cf:20:f6:c3:
                    72:ae:f4:f3:85:c7:b4:7a:b8:75:2d:68:0a:38:fc:
                    f1:16:97:e3:dc:ca:28:3e:7e:ff:d0:04:f2:68:e3:
                    25:a0:42:d8:cf:aa:03:75:3b:bd:b5:98:f3:06:d8:
                    f9:9c:4b:1d:50:f7:69:c8:99:59:7a:11:9a:4a:67:
                    2c:58:23:03:50:7d:4d:b9:3b:5b:ab:7c:b4:81:57:
                    25:fa:54:d3:d1:16:6c:b2:73:68:57:eb:cd:0b:7d:
                    9c:96:31:bb:d5:25:0a:f2:63:70:73:c3:62:d9:62:
                    8c:ea:21:51:71:6a:16:0b:25:95:df:9c:cd:f2:ac:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:D1:23:A6:48:6E:DD:33:FD:5E:3E:C8:BD:6C:4D:D6:88:7A:3C
            X509v3 Authority Key Identifier:
                keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/323430313a323132303a3a2f33322d3438203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:e1:ba:1e:51:8d:09:ec:42:e5:b8:97:89:56:26:aa:a7:5e:
         15:70:b1:ce:6a:b0:13:6a:69:15:13:ab:ec:17:b1:af:1d:b9:
         d2:19:51:2c:bb:67:4f:dd:dc:13:47:b7:b2:27:f5:79:dc:69:
         3c:f9:66:62:0c:c4:29:c9:9a:d8:ac:b4:c3:e1:5f:19:da:5a:
         b2:41:8f:1e:eb:ee:02:6e:69:96:f8:1f:27:10:5b:72:20:ac:
         f9:83:8b:a4:2e:63:8b:39:ba:63:e3:06:9f:79:f9:df:5c:83:
         27:82:f9:da:ae:59:38:4a:32:1e:a5:32:a1:d7:64:7f:d9:15:
         ab:f0:11:3a:2e:af:55:d5:bd:94:62:f4:88:d2:10:53:72:43:
         0c:94:0d:05:88:13:a3:88:1b:31:2b:cf:cc:d7:03:76:29:62:
         7c:0b:42:82:0c:01:11:48:c3:e3:76:dd:8f:3d:69:fe:c9:21:
         b4:4b:29:c2:b2:7c:be:a0:85:ce:b4:ed:a4:e0:4b:9d:e6:bc:
         5e:ac:ec:43:8b:ae:b2:08:54:62:d1:be:78:d9:b4:d0:2d:9d:
         b2:f3:0a:f3:3c:3c:22:9e:75:0c:f1:ac:0d:d5:23:a0:77:12:
         ee:27:1e:c2:27:6b:09:f8:22:a6:cb:1e:03:43:df:cc:f4:b1:
         68:1d:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:15:56 2025 by rpki-client