Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa
File:                     3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          iSVzEtaduQywCQdcSyMNmFI0Id4YYz6qHsCZbxVt1kQ=
Subject key identifier:   D3:69:83:0B:9B:08:9A:71:A9:0B:EF:D3:6C:14:10:12:47:06:28:AF
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       1A2180DF713FC2A0B2E21AC0AF157CFAF55BBA3C
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 22:13:58 +0000
ROA not before:           Mon 04 Aug 2025 22:08:58 +0000
ROA not after:            Mon 03 Aug 2026 22:13:58 +0000
asID:                     36236
IP address blocks:        192.64.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 11:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:21:80:df:71:3f:c2:a0:b2:e2:1a:c0:af:15:7c:fa:f5:5b:ba:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Aug  4 22:08:58 2025 GMT
            Not After : Aug  3 22:13:58 2026 GMT
        Subject: CN=D369830B9B089A71A90BEFD36C141012470628AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:9d:2c:01:8b:89:f6:c3:d4:29:18:e7:11:
                    d3:97:74:00:13:98:54:e1:34:ee:d5:f5:02:0a:c1:
                    13:45:76:e6:b7:7b:fc:c7:1c:2d:15:68:57:6a:76:
                    80:54:f5:1e:60:1d:1e:03:56:1c:cf:50:e3:b8:46:
                    02:3a:00:3c:53:5c:23:00:59:c7:52:0e:85:d5:d7:
                    98:fc:6e:c4:10:c3:91:ae:26:53:a6:fa:e4:c3:b6:
                    c8:48:e6:74:24:1d:39:85:26:8d:56:51:38:b6:35:
                    4f:48:78:af:d8:6d:ac:ab:cf:0a:26:8a:18:50:d2:
                    d5:e7:ab:e3:f7:1f:fc:cd:c2:81:47:e9:9b:ca:70:
                    c5:94:c9:14:74:5a:e1:44:b8:a6:3d:ff:78:68:3b:
                    d4:08:4e:fa:43:69:e3:fd:8e:eb:a9:03:56:9c:56:
                    63:98:42:06:83:03:56:b0:f4:0c:70:1d:fe:cb:10:
                    b5:5c:38:2a:2f:88:ef:f1:67:63:cf:11:32:8b:4c:
                    ac:4e:f0:10:74:b0:6b:0d:48:2d:5f:e3:2f:7f:c6:
                    e4:fd:b0:91:a3:0c:76:29:1f:6e:24:8f:7e:18:b2:
                    fa:f5:9c:57:e3:16:6e:6d:15:2f:f1:a7:d8:be:93:
                    0d:d6:0d:f5:55:b5:67:72:44:39:98:b6:0c:b2:e2:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:69:83:0B:9B:08:9A:71:A9:0B:EF:D3:6C:14:10:12:47:06:28:AF
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:fe:f4:20:7e:60:32:42:6e:2c:97:70:61:b2:b2:5d:e4:
         1c:b2:46:66:40:1e:61:68:79:13:fa:f2:fd:5e:19:bf:f1:01:
         61:9e:8f:4c:5e:f4:ed:6c:e9:9f:c8:ad:fb:db:c1:e7:42:5a:
         b5:e6:26:26:b1:49:d2:ea:87:27:30:66:f5:d2:d3:2c:4d:b2:
         e8:de:4a:1d:fc:cc:01:64:5f:a3:57:18:a8:a1:83:0c:68:fd:
         c8:fe:3f:f1:c4:7c:58:9d:03:63:55:2a:00:07:02:18:3d:44:
         31:6e:28:1f:9d:5a:14:c1:ca:f9:0f:a3:87:1c:9d:24:e0:d0:
         f4:5b:a3:f4:15:89:50:f4:0f:99:bc:61:45:8e:aa:1c:88:d3:
         c5:8d:74:7b:55:e6:d7:16:9f:00:ae:7a:b3:5c:d4:0a:92:ed:
         d6:44:1b:b3:18:7d:de:02:78:03:51:32:b0:5e:a0:09:a3:d8:
         c2:64:3e:38:52:13:71:d5:80:95:8e:13:bc:ab:f1:26:49:af:
         0e:24:b1:7a:77:10:a8:6b:a6:85:12:df:5a:1b:b9:d7:3d:8b:
         27:85:ad:ca:ae:94:d1:e6:b3:30:7e:e9:21:32:eb:bc:1e:66:
         f7:84:1b:c5:86:61:34:a6:22:e3:72:91:fe:37:7d:ef:f1:a0:
         f2:3a:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:19 2025 by rpki-client