Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e203631313338.roa
File:                     323430343a336438303a3a2f33322d3438203d3e203631313338.roa (raw, json)
Hash identifier:          vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=
Subject key identifier:   10:65:A2:D9:D1:ED:35:A0:88:C9:E5:21:B6:8A:AC:DE:E7:E8:B0:C4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       29E32E8535399FCCA06BE88D6F966DE1948C410C
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e203631313338.roa
Signing time:             Fri 04 Jul 2025 23:35:51 +0000
ROA not before:           Fri 04 Jul 2025 23:30:51 +0000
ROA not after:            Fri 03 Jul 2026 23:35:51 +0000
asID:                     61138
IP address blocks:        2404:3d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 17:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:2e:85:35:39:9f:cc:a0:6b:e8:8d:6f:96:6d:e1:94:8c:41:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul  4 23:30:51 2025 GMT
            Not After : Jul  3 23:35:51 2026 GMT
        Subject: CN=1065A2D9D1ED35A088C9E521B68AACDEE7E8B0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:f0:75:94:fc:ec:96:cc:eb:9e:69:fe:f1:
                    12:38:85:b8:45:32:a6:c6:7b:10:79:9b:dd:d9:c0:
                    bf:41:3f:1e:de:6b:5c:0d:71:2d:d2:60:55:5e:31:
                    87:02:2e:96:9d:d7:92:92:1c:c4:61:29:ba:70:e1:
                    cb:19:b7:21:af:d1:ca:95:f9:f6:67:e2:2b:da:66:
                    5d:e2:4d:cc:54:27:4c:85:b6:0e:05:42:81:5a:4a:
                    76:65:da:01:42:6b:dc:34:46:97:37:82:d7:cf:6a:
                    54:d8:86:11:5c:3c:58:5d:5c:50:9c:8b:47:26:dd:
                    bb:e9:16:b2:69:c2:c9:be:80:e4:f8:b4:6f:de:4a:
                    0e:e8:5c:bf:5d:32:80:a3:7c:ac:dd:79:4b:c5:82:
                    09:24:85:ac:1e:db:09:65:a1:f0:4c:60:cd:bb:82:
                    05:1f:c0:90:38:47:1f:33:d8:44:ca:a1:e7:92:d9:
                    03:aa:3c:89:8c:74:d9:51:4b:eb:52:ce:62:b4:26:
                    0d:28:70:3a:7c:b1:1e:5b:2e:fd:3c:a6:95:bf:a0:
                    fd:2b:91:19:e2:b0:65:1f:ac:54:f2:03:ae:80:37:
                    4e:4b:a2:3d:32:67:e3:bd:8c:33:65:19:23:6f:54:
                    0f:f1:a6:a3:57:db:57:2a:45:1c:92:15:85:31:be:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:65:A2:D9:D1:ED:35:A0:88:C9:E5:21:B6:8A:AC:DE:E7:E8:B0:C4
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d3438203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:e7:64:c3:0c:a2:5a:29:a1:0b:a9:1b:3e:17:cd:02:bb:
         a7:68:b7:5f:41:5f:cc:48:d0:90:4d:10:4b:f6:52:01:d9:47:
         bd:74:db:d8:ca:ed:0d:96:b2:de:12:a2:cf:e1:fd:35:b8:bf:
         57:db:79:e4:d5:74:c3:33:c8:b1:0b:0b:29:9e:4f:77:21:cd:
         c5:49:bd:6e:29:bc:81:19:36:c6:3a:d9:d8:84:f3:30:df:46:
         bc:39:4d:f1:4e:3a:3b:c7:09:91:ae:c2:b2:69:1d:d5:ad:fa:
         9b:d1:1f:7e:8a:42:93:52:15:f7:af:2b:23:c3:5d:57:4f:a4:
         a9:f0:e3:32:72:e9:02:a3:4c:52:71:07:94:4b:f5:3a:40:59:
         40:7e:a3:d1:17:9e:b9:96:c1:1f:03:a9:15:c2:6e:f0:c0:18:
         6d:af:4e:1f:33:0e:d2:35:7c:63:01:6a:03:fb:1e:3f:ea:a8:
         44:29:3b:32:63:8a:fa:3c:38:a7:4b:35:4d:8e:c1:6f:4e:43:
         88:10:9c:f6:10:59:25:8b:19:6f:9d:87:fb:12:e5:6c:9b:58:
         e0:ca:4e:6a:38:26:03:db:c1:c6:d3:a8:5c:f8:cb:1a:5d:fe:
         54:27:20:7f:8d:bc:7a:51:f6:8b:7d:ad:c3:6c:34:fd:fa:35:
         2a:68:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 02:09:04 2025 by rpki-client