Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e20313531383137.roa
File:                     323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (raw, json)
Hash identifier:          Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=
Subject key identifier:   49:00:E1:D8:37:3F:15:F1:AB:66:8E:09:35:C9:15:F4:6C:1C:9F:1A
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       77D68681E8901B6F1203EC524D990B473F04EED7
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e20313531383137.roa
Signing time:             Fri 04 Jul 2025 23:35:51 +0000
ROA not before:           Fri 04 Jul 2025 23:30:51 +0000
ROA not after:            Fri 03 Jul 2026 23:35:51 +0000
asID:                     151817
IP address blocks:        2404:3d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 10:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d6:86:81:e8:90:1b:6f:12:03:ec:52:4d:99:0b:47:3f:04:ee:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul  4 23:30:51 2025 GMT
            Not After : Jul  3 23:35:51 2026 GMT
        Subject: CN=4900E1D8373F15F1AB668E0935C915F46C1C9F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:31:20:d4:7e:79:b4:77:8c:c3:29:5f:c1:
                    74:3e:78:8c:05:40:f4:9a:5e:9d:5a:2b:32:4a:8e:
                    16:48:cf:b7:3f:3b:d1:fd:16:1b:6f:71:8a:0a:71:
                    74:fe:b9:97:61:b7:e7:78:c1:86:e0:9e:96:15:5d:
                    ef:a5:c3:09:98:7b:5a:36:5a:e8:92:3f:31:73:78:
                    e5:cf:1e:f6:20:32:18:8c:2d:07:c8:d9:ec:f5:52:
                    8c:af:44:eb:93:17:d6:72:cb:01:12:1b:3f:a0:b0:
                    40:5c:6a:5d:5d:b7:9c:56:a8:e5:7b:c9:c8:49:7d:
                    7c:d3:8c:e6:e3:49:16:e1:90:33:45:e3:eb:52:7f:
                    0c:63:31:3d:d7:dd:46:8c:70:41:c0:0b:33:0b:ca:
                    99:95:44:19:00:6c:f0:18:2a:f1:b8:9c:4c:4d:32:
                    05:a6:59:08:b1:fc:29:5c:86:48:f7:8e:3a:1d:22:
                    5a:52:ea:17:68:f8:a3:3d:33:f9:4e:18:3a:22:72:
                    1b:c8:cf:9f:7c:dd:65:0a:fb:a6:44:7e:7a:b1:d4:
                    26:d7:be:14:f7:3a:0f:bb:61:0e:f6:a5:a1:9b:ea:
                    6d:45:b7:f2:7a:45:a3:0a:1c:e8:52:cb:8f:3c:26:
                    e9:09:1d:ad:91:f5:72:73:5b:ee:66:72:c2:3d:d3:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:00:E1:D8:37:3F:15:F1:AB:66:8E:09:35:C9:15:F4:6C:1C:9F:1A
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e20313531383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:57:db:5c:64:c1:d1:12:31:9d:49:a9:a1:f1:26:2e:94:
         3b:16:8f:6f:b3:3e:b5:1d:b3:95:f6:77:2f:13:d0:e5:40:b0:
         b7:7d:eb:fc:16:dc:d8:da:e0:81:a3:26:6d:a8:e6:dd:ae:47:
         58:c6:e1:c7:d7:ac:68:3e:fc:a7:56:e8:fa:0b:a5:27:03:18:
         12:94:00:65:20:a5:6f:fe:f3:c4:da:e1:c0:ce:d3:61:01:9a:
         76:93:17:cf:cb:c8:83:fa:b1:40:93:ac:bc:fb:ce:46:b9:06:
         b1:3c:3f:eb:1c:49:db:4d:fa:dd:33:ec:7c:ba:11:f1:30:c4:
         71:1a:5a:27:69:5b:f9:88:f6:64:33:71:db:a9:ec:76:96:0b:
         e8:6b:a5:50:84:fa:9a:af:c1:16:c1:71:96:0a:80:7a:30:f9:
         32:2d:1f:cc:06:2a:3e:60:b7:d9:33:0c:aa:5a:d0:51:bb:ff:
         3e:05:82:81:48:97:1f:9d:73:a9:29:a4:fc:0f:98:9f:6c:93:
         2c:28:3d:21:f1:9e:f3:a4:f7:39:9e:7a:e2:95:c5:f4:e2:6a:
         a0:39:5f:e4:4a:f0:f4:69:ca:70:52:f3:f8:59:ed:07:75:3f:
         e7:90:8c:9f:c4:2b:47:c9:39:e6:96:93:df:32:ae:2e:46:4a:
         ec:f4:be:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 22:59:42 2025 by rpki-client