Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa
File:                     3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          M+kaKR8R1hpLE6n7CVRBmAYxGjsp1XCYpKk2aIr5Q3Q=
Subject key identifier:   9C:D4:55:D3:C3:5C:98:A5:22:11:AE:C2:67:49:E3:4C:82:12:BC:57
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       7635323BF38A2C78950744E8056C902EEF505718
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 21:13:55 +0000
ROA not before:           Mon 04 Aug 2025 21:08:55 +0000
ROA not after:            Mon 03 Aug 2026 21:13:55 +0000
asID:                     36236
IP address blocks:        205.147.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 05:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:35:32:3b:f3:8a:2c:78:95:07:44:e8:05:6c:90:2e:ef:50:57:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Aug  4 21:08:55 2025 GMT
            Not After : Aug  3 21:13:55 2026 GMT
        Subject: CN=9CD455D3C35C98A52211AEC26749E34C8212BC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a5:5f:82:74:0d:5a:8e:3c:ea:25:37:09:e0:
                    9a:6d:1d:48:81:76:f3:9a:34:f1:f8:63:8a:3b:5f:
                    9f:eb:8d:25:22:69:f4:d5:03:7a:5c:b7:1f:bf:49:
                    10:51:c6:34:db:1e:73:31:f7:6d:9c:d8:67:c8:24:
                    7c:d3:5f:73:92:c0:67:c9:52:09:e5:c9:86:b5:39:
                    b5:d1:1c:e7:f0:6d:24:bd:3f:7f:c7:27:8a:db:61:
                    00:95:dd:bc:58:00:3f:d4:f0:bd:d5:3e:39:7d:c8:
                    3a:30:c1:cd:5f:07:e0:e0:a9:b2:e3:5e:d6:b0:95:
                    eb:5f:9e:d7:8a:01:bb:8c:ae:ce:c1:09:19:13:e8:
                    d4:b9:32:e9:54:9a:c4:9c:e7:11:20:5a:0c:40:de:
                    5c:97:a7:97:40:63:9c:ae:65:98:54:0a:3a:eb:b8:
                    12:f6:6d:08:52:f4:10:82:ca:c7:55:c1:b3:e6:fd:
                    53:2e:63:8e:95:cb:a2:17:90:93:de:1a:5a:6e:c3:
                    35:35:9b:12:ce:f6:be:85:43:3c:04:ea:99:d1:48:
                    3c:a7:7a:20:12:08:ad:05:0e:a5:8c:74:2c:b2:71:
                    b8:aa:4a:a4:6d:b1:ba:5d:c8:87:6d:6d:7c:33:40:
                    f4:db:fe:23:e7:de:91:91:72:bd:6d:0e:91:36:34:
                    d9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D4:55:D3:C3:5C:98:A5:22:11:AE:C2:67:49:E3:4C:82:12:BC:57
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:14:34:d1:e5:f2:55:d0:27:83:20:04:97:fc:b4:72:fd:
         26:36:12:b5:4f:b3:19:d0:af:a2:e5:d2:02:2d:55:fb:0b:ce:
         23:be:81:1e:51:da:f8:35:57:68:47:17:23:40:28:65:54:1d:
         ac:fa:b0:ea:6b:25:7f:85:51:72:b3:16:61:1d:05:f0:40:a3:
         62:18:2c:ad:35:71:d7:d5:21:38:30:af:e3:4b:35:5f:7f:a2:
         04:09:17:8d:b3:53:c9:85:60:9f:a6:62:9c:06:55:f9:77:e4:
         ae:52:37:09:97:8d:65:b9:bb:09:ca:cd:fd:e2:73:94:27:f2:
         0b:5b:63:18:cc:ea:07:04:69:15:05:ab:af:e2:1e:61:62:ea:
         17:82:ca:39:ff:6a:d7:a6:40:d8:c0:31:24:bc:21:0f:54:5a:
         a2:78:10:82:76:7a:67:d8:3d:9b:08:4e:4b:11:72:22:e9:73:
         bb:c9:ab:37:1e:65:f5:e6:0b:a5:04:1b:6c:52:87:ca:f3:b6:
         2e:49:11:64:5e:09:d3:c2:e1:a3:77:4e:12:cb:8a:7d:2e:87:
         27:27:2f:19:e1:b6:82:b4:0e:61:cf:3d:4d:1b:c2:31:47:c0:
         51:1a:90:17:db:6f:b8:37:74:aa:13:a3:1b:d7:07:58:74:5a:
         62:30:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:42:16 2025 by rpki-client