Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa
File:                     3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          cjPRK9qLuIrk2Qcz5MIry+JIAYYQot59N/+6dxX+1TU=
Subject key identifier:   82:B2:E2:5C:63:10:DD:F6:8B:08:EE:A6:92:24:99:F9:6D:68:80:89
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       5CB47E65B88116FDBC8CA5915E90C81754DCA06F
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 22:13:58 +0000
ROA not before:           Mon 04 Aug 2025 22:08:58 +0000
ROA not after:            Mon 03 Aug 2026 22:13:58 +0000
asID:                     36236
IP address blocks:        192.64.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 16:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b4:7e:65:b8:81:16:fd:bc:8c:a5:91:5e:90:c8:17:54:dc:a0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Aug  4 22:08:58 2025 GMT
            Not After : Aug  3 22:13:58 2026 GMT
        Subject: CN=82B2E25C6310DDF68B08EEA6922499F96D688089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:a0:f8:10:15:1d:dd:78:88:c6:f5:94:cc:
                    d3:a2:2a:ca:22:8b:94:c0:6a:bf:f2:e8:9f:b4:bc:
                    1b:68:d1:92:72:b3:fc:34:3a:71:b7:b9:34:1b:5a:
                    b4:3e:df:be:14:c7:08:dd:31:6c:f4:c5:fa:e9:17:
                    b3:fa:26:62:76:21:fd:50:ed:2c:a0:16:57:da:f2:
                    3c:3c:17:75:6f:4b:0a:6b:53:f6:99:2a:67:ac:4b:
                    32:b0:68:88:e3:56:21:5a:a8:8d:00:e8:b0:aa:d2:
                    5b:37:5e:68:46:05:34:cf:b7:2c:5b:97:ee:a7:d7:
                    ad:98:0f:b8:cb:65:09:21:cd:48:99:b9:88:b4:f6:
                    bf:ac:32:a3:40:6c:3a:42:cc:ff:58:41:18:d1:b3:
                    2f:f0:03:5d:29:9e:c1:c1:fc:cf:54:36:b3:12:3d:
                    06:e0:f6:63:78:4e:0f:5e:c4:60:dd:86:51:1e:40:
                    33:b9:c7:79:d5:f6:04:3c:c2:48:ec:9b:50:4c:c6:
                    5b:e6:75:63:98:fc:75:49:b1:00:af:5d:e4:b0:4f:
                    cb:85:63:70:8a:47:40:58:bf:2d:b7:33:5d:54:b8:
                    b6:09:71:ad:08:88:86:8f:96:02:5c:a8:c8:70:32:
                    88:90:87:e0:96:3f:c1:5c:59:cc:97:27:10:26:7a:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:E2:5C:63:10:DD:F6:8B:08:EE:A6:92:24:99:F9:6D:68:80:89
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:27:fa:b5:3d:7e:d3:ae:a4:fa:75:53:de:ea:3e:65:bb:c0:
         ec:67:c2:66:51:45:e9:06:3d:02:cd:41:d9:90:af:8c:c4:cf:
         85:33:e7:ef:9f:fc:31:ed:2c:f7:0a:6b:b7:87:e7:e9:0b:87:
         4c:1c:c9:f4:7d:b4:f5:bf:cd:33:dc:38:d1:b9:e1:a1:5e:bb:
         eb:20:0a:4a:a2:c0:32:a1:fa:33:36:fd:ce:77:55:86:29:09:
         fd:da:34:3b:4e:b1:5c:55:ad:aa:fc:ff:79:53:25:c5:1f:cf:
         86:8c:2e:aa:51:d3:7f:6b:bf:84:b7:4d:38:f8:f3:97:be:a0:
         e7:f7:54:75:32:ca:04:a6:d4:ab:d8:2f:52:6a:76:c8:01:0d:
         9f:f0:72:e3:c0:da:c2:ff:ef:2f:37:7d:56:16:b2:86:23:e6:
         14:95:44:1c:07:c2:36:27:05:53:56:e2:c1:ff:b1:43:c3:ae:
         a4:87:90:3b:51:28:d6:ab:29:ab:17:b9:ea:15:76:e5:e4:c1:
         40:3a:ac:d7:fa:01:77:c2:e8:ec:60:f5:ef:c6:f8:c2:2e:0e:
         13:0c:91:7d:62:44:9a:b2:0f:63:f1:68:f0:5f:79:71:f8:56:
         5f:65:22:30:84:01:d0:8b:6f:79:9a:50:3e:aa:cc:69:34:00:
         52:eb:77:8b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXLR+ZbiBFv28jKWRXpDIF1TcoG8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg1RUQ1Rjc5MjFB
Qzg2NTQxRDkyOTM2RjY5MUNCMUNEQkY2RDVDMkExMB4XDTI1MDgwNDIyMDg1OFoX
DTI2MDgwMzIyMTM1OFowMzExMC8GA1UEAxMoODJCMkUyNUM2MzEwRERGNjhCMDhF
RUE2OTIyNDk5Rjk2RDY4ODA4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANPpoPgQFR3deIjG9ZTM06IqyiKLlMBqv/Lon7S8G2jRknKz/DQ6cbe5NBta
tD7fvhTHCN0xbPTF+ukXs/omYnYh/VDtLKAWV9ryPDwXdW9LCmtT9pkqZ6xLMrBo
iONWIVqojQDosKrSWzdeaEYFNM+3LFuX7qfXrZgPuMtlCSHNSJm5iLT2v6wyo0Bs
OkLM/1hBGNGzL/ADXSmewcH8z1Q2sxI9BuD2Y3hOD17EYN2GUR5AM7nHedX2BDzC
SOybUEzGW+Z1Y5j8dUmxAK9d5LBPy4VjcIpHQFi/LbczXVS4tglxrQiIho+WAlyo
yHAyiJCH4JY/wVxZzJcnECZ62iMCAwEAAaOCAjwwggI4MB0GA1UdDgQWBBSCsuJc
YxDd9osI7qaSJJn5bWiAiTAfBgNVHSMEGDAWgBRe1feSGshlQdkpNvaRyxzb9tXC
oTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8yLzVFRDVGNzkyMUFDODY1NDFEOTI5MzZGNjkxQ0IxQ0RCRjZE
NUMyQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL1h0WDNraHJJWlVIWktUYjJrY3NjMl9iVndxRS5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8yLzMxMzkzMjJlMzYzNDJlMzIzMDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBAzDANBgkqhkiG9w0BAQsFAAOCAQEAfCf6
tT1+066k+nVT3uo+ZbvA7GfCZlFF6QY9As1B2ZCvjMTPhTPn75/8Me0s9wprt4fn
6QuHTBzJ9H209b/NM9w40bnhoV676yAKSqLAMqH6Mzb9zndVhikJ/do0O06xXFWt
qvz/eVMlxR/PhowuqlHTf2u/hLdNOPjzl76g5/dUdTLKBKbUq9gvUmp2yAENn/By
48Dawv/vLzd9VhayhiPmFJVEHAfCNicFU1biwf+xQ8OupIeQO1Eo1qspqxe56hV2
5eTBQDqs1/oBd8Lo7GD178b4wi4OEwyRfWJEmrIPY/Fo8F95cfhWX2UiMIQB0Itv
eZpQPqrMaTQAUut3iw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:03:00 2025 by rpki-client