Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
File:                     323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (raw, json)
Hash identifier:          5zyjZiHzfKFVIj8CROIKBwN4OHeQ+uy/14mqZgTNhgE=
Subject key identifier:   51:CA:CC:11:B6:62:AE:53:D0:3A:8A:DE:F0:80:2F:EB:91:BB:71:E0
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial:       183AF704284EEA6EFFF37EB71350B8193B7750E6
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa
Signing time:             Fri 04 Jul 2025 23:38:44 +0000
ROA not before:           Fri 04 Jul 2025 23:33:44 +0000
ROA not after:            Fri 03 Jul 2026 23:38:44 +0000
asID:                     151642
IP address blocks:        2001:df2:c1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3a:f7:04:28:4e:ea:6e:ff:f3:7e:b7:13:50:b8:19:3b:77:50:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
        Validity
            Not Before: Jul  4 23:33:44 2025 GMT
            Not After : Jul  3 23:38:44 2026 GMT
        Subject: CN=51CACC11B662AE53D03A8ADEF0802FEB91BB71E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:a4:aa:dd:f0:d8:12:9b:1d:0a:05:1e:0b:
                    4d:e2:fb:a0:54:79:ed:96:f1:87:93:01:f3:59:2a:
                    87:ca:33:4a:6d:5d:ea:10:ee:b9:34:2a:34:be:eb:
                    5f:b6:d4:23:89:b0:a4:23:68:10:ad:91:7f:96:01:
                    f5:fd:00:ed:fa:0f:d9:7b:60:6d:0a:ba:7d:99:6e:
                    ef:42:5e:00:2f:52:92:0d:41:c0:01:b5:21:9e:93:
                    78:bd:29:1a:97:94:0e:79:44:0b:eb:ea:c6:39:6d:
                    8f:e2:71:61:19:99:8c:0c:ba:32:9d:58:28:b5:6a:
                    c3:25:30:a1:91:ad:91:72:44:80:c4:c9:77:43:23:
                    84:39:f8:22:44:a2:2b:8e:07:31:8b:6b:10:07:39:
                    ab:d8:f9:58:af:69:ec:ba:1a:d8:dd:35:22:d9:5f:
                    85:98:f4:3a:34:d6:1f:d0:f1:7d:44:0c:46:4b:0a:
                    9e:2e:66:39:6b:bb:4c:e3:9f:b4:53:2e:11:40:54:
                    1d:a0:f6:82:14:bd:50:42:9d:5e:31:2a:f7:65:67:
                    aa:60:40:a4:05:bd:ec:82:43:ed:82:66:43:fb:38:
                    6f:41:b5:71:07:67:f1:a6:b7:a4:b4:76:70:a2:e3:
                    da:b8:15:bd:25:4c:ed:9d:52:f7:1a:12:19:b6:a3:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CA:CC:11:B6:62:AE:53:D0:3A:8A:DE:F0:80:2F:EB:91:BB:71:E0
            X509v3 Authority Key Identifier:
                keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:c1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:82:39:ba:5a:ad:20:4c:ff:1d:f0:b3:ff:ef:2c:01:e6:d9:
         13:01:12:73:aa:11:69:b2:a5:bc:f8:15:15:4a:0a:17:0a:de:
         57:03:65:15:74:be:ab:67:41:e2:a1:34:8d:2b:93:b0:7e:de:
         c7:4f:a4:9a:9b:ac:15:fc:ee:8c:09:fd:9a:64:b3:a0:10:d2:
         50:e7:61:6d:54:50:6b:ea:ce:1b:8c:87:14:f9:2c:a3:75:d2:
         6b:e7:bf:fe:09:2f:71:b2:92:a1:8f:a4:2f:e9:5a:af:c1:09:
         e8:09:95:84:63:e1:78:bf:eb:4b:86:5c:3d:17:87:b3:dd:97:
         32:d8:c2:17:2e:7b:d6:ae:c5:93:c7:04:98:c6:25:6a:98:bd:
         e6:43:73:c6:96:11:8e:cc:e2:86:63:77:4a:59:f4:63:cd:e8:
         96:0d:f6:13:9c:de:b0:7c:4f:75:de:8f:b8:0d:25:eb:92:63:
         db:9b:8e:da:91:96:6d:08:58:f6:e3:1d:6a:36:02:c6:be:f7:
         77:fa:e6:91:0a:c1:b2:64:80:8b:c8:0c:61:66:18:f4:83:b8:
         cc:ee:7d:18:1a:b0:a6:c0:d3:10:29:e2:06:96:e2:37:c0:f7:
         f8:34:ff:eb:de:49:b5:ed:af:58:e6:2b:2f:9f:a0:8e:99:da:
         91:ba:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 11:21:49 2025 by rpki-client