Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa
File:                     3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          +m62avw6IddwGVvggyzycek9UjNiGJiSd/a1/PjiYJM=
Subject key identifier:   95:18:15:FE:30:1A:A2:16:1C:65:F4:8D:65:DD:08:F2:7E:E4:EC:73
Certificate issuer:       /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial:       6D166A9543CDEFB93A0089BAC5861FB46C28ABE1
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa
Signing time:             Thu 29 May 2025 03:33:08 +0000
ROA not before:           Thu 29 May 2025 03:28:08 +0000
ROA not after:            Thu 28 May 2026 03:33:08 +0000
asID:                     138995
IP address blocks:        160.22.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 03:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:6a:95:43:cd:ef:b9:3a:00:89:ba:c5:86:1f:b4:6c:28:ab:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
        Validity
            Not Before: May 29 03:28:08 2025 GMT
            Not After : May 28 03:33:08 2026 GMT
        Subject: CN=951815FE301AA2161C65F48D65DD08F27EE4EC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:12:34:df:9c:8e:04:ac:3e:37:58:29:fd:
                    72:91:2e:9b:45:aa:96:19:a0:cf:27:b3:ba:5c:02:
                    5c:49:56:65:c0:a9:3e:f5:d5:26:2f:e0:4b:af:9c:
                    0e:a5:da:34:ce:67:ba:2b:7f:4c:7e:8b:15:3b:96:
                    cc:88:0b:bf:f1:cb:b5:83:24:12:8c:d8:f1:1d:7c:
                    78:21:d9:0e:68:6e:cd:80:53:eb:44:0c:e5:a5:87:
                    5f:da:eb:7c:f4:02:1e:ae:af:1d:30:7d:a2:f8:01:
                    fe:27:7b:bd:f2:63:a7:fd:1a:8a:bb:55:c2:d1:90:
                    bb:46:84:dc:ca:a6:6a:2a:3a:4c:1f:e3:46:1c:12:
                    95:0c:c4:94:7a:fe:55:09:29:2d:e8:49:22:83:9e:
                    37:f2:e4:40:6f:e2:d6:9c:11:2b:c9:47:0c:92:7a:
                    90:23:2f:af:6c:01:26:30:35:4c:34:21:2b:72:a3:
                    ac:58:90:b2:f8:32:b6:e3:c4:4a:47:f3:45:f5:33:
                    fd:d8:c0:53:2a:21:6e:84:d7:de:e9:91:8c:52:f4:
                    72:76:7e:7d:77:7d:41:df:ae:6e:5d:b5:c3:b4:7b:
                    be:df:f5:02:01:ef:80:98:a4:c8:d2:db:d5:89:d1:
                    fd:83:59:f0:83:16:7d:b3:0f:f9:a4:ff:08:6d:8b:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:15:FE:30:1A:A2:16:1C:65:F4:8D:65:DD:08:F2:7E:E4:EC:73
            X509v3 Authority Key Identifier:
                keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:cb:dd:d9:33:a1:0f:cd:1a:c0:22:a0:6a:bb:d0:5f:c6:
         47:ee:19:10:62:7a:2c:ef:e3:8c:00:d1:fb:6b:ce:38:5e:8f:
         cf:46:f3:2c:04:62:4f:1f:e1:4e:89:23:d0:0d:e7:7b:d8:97:
         19:6c:71:67:cb:c9:cd:93:52:40:03:0d:ad:d4:eb:0a:66:1f:
         92:a2:b1:bc:ad:e1:fe:f2:f7:e4:54:38:ae:ef:13:2b:dd:70:
         97:af:51:be:bb:06:ac:85:da:a9:a9:32:57:81:1e:61:ef:f4:
         77:c2:a1:af:73:df:ad:db:e5:99:a5:06:a4:3a:38:45:73:97:
         a1:b4:2b:1b:5e:34:eb:33:6b:c3:e2:5b:52:3d:23:62:e4:b8:
         7d:c1:72:91:2a:a1:d4:a4:ee:7c:ee:3b:08:4f:e5:63:eb:20:
         49:17:9a:fe:b0:26:aa:22:fe:3c:41:e7:13:a1:07:9e:a7:21:
         98:85:27:1d:45:43:1e:17:59:04:1a:3a:5b:83:c8:67:9b:94:
         57:46:90:82:d1:80:c0:41:4b:8f:f2:2e:4c:dd:cc:03:8b:80:
         76:af:63:d4:de:57:22:46:c4:c2:26:48:ab:21:07:23:8c:f3:
         7a:ad:f1:ad:ab:bc:8b:e3:37:41:e3:6d:00:0a:cb:18:5c:db:
         e6:76:78:51
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUbRZqlUPN77k6AIm6xYYftGwoq+EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEygyM0IxMDMwRjND
Q0FDOTk5RjJCNTc3NDVGQzlEREExQ0NERkEzNjMwMB4XDTI1MDUyOTAzMjgwOFoX
DTI2MDUyODAzMzMwOFowMzExMC8GA1UEAxMoOTUxODE1RkUzMDFBQTIxNjFDNjVG
NDhENjVERDA4RjI3RUU0RUM3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKtKEjTfnI4ErD43WCn9cpEum0WqlhmgzyezulwCXElWZcCpPvXVJi/gS6+c
DqXaNM5nuit/TH6LFTuWzIgLv/HLtYMkEozY8R18eCHZDmhuzYBT60QM5aWHX9rr
fPQCHq6vHTB9ovgB/id7vfJjp/0airtVwtGQu0aE3Mqmaio6TB/jRhwSlQzElHr+
VQkpLehJIoOeN/LkQG/i1pwRK8lHDJJ6kCMvr2wBJjA1TDQhK3KjrFiQsvgytuPE
SkfzRfUz/djAUyohboTX3umRjFL0cnZ+fXd9Qd+ubl21w7R7vt/1AgHvgJikyNLb
1YnR/YNZ8IMWfbMP+aT/CG2LETMCAwEAAaOCAj4wggI6MB0GA1UdDgQWBBSVGBX+
MBqiFhxl9I1l3QjyfuTsczAfBgNVHSMEGDAWgBQjsQMPPMrJmfK1d0X8ndoczfo2
MDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC81LzIzQjEwMzBGM0NDQUM5OTlGMkI1Nzc0NUZDOUREQTFDQ0RG
QTM2MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL0k3RUREenpLeVpueXRYZEZfSjNhSE0zNk5qQS5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC81LzMxMzYzMDJlMzIzMjJlMzEzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzMzM4MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBaoMA0GCSqGSIb3DQEBCwUAA4IBAQCK
rcvd2TOhD80awCKgarvQX8ZH7hkQYnos7+OMANH7a844Xo/PRvMsBGJPH+FOiSPQ
Ded72JcZbHFny8nNk1JAAw2t1OsKZh+SorG8reH+8vfkVDiu7xMr3XCXr1G+uwas
hdqpqTJXgR5h7/R3wqGvc9+t2+WZpQakOjhFc5ehtCsbXjTrM2vD4ltSPSNi5Lh9
wXKRKqHUpO587jsIT+Vj6yBJF5r+sCaqIv48QecToQeepyGYhScdRUMeF1kEGjpb
g8hnm5RXRpCC0YDAQUuP8i5M3cwDi4B2r2PU3lciRsTCJkirIQcjjPN6rfGtq7yL
4zdB420ACssYXNvmdnhR
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:58 2025 by rpki-client