Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31343a3a2f36342d3634203d3e20333939313635.roa
File:                     323430333a323530303a3430303a31343a3a2f36342d3634203d3e20333939313635.roa (raw, json)
Hash identifier:          JpkpWT/W5s1KAIpAQuyU5/Vaig9aRaVXvsFqSmEJR6s=
Subject key identifier:   09:01:33:66:74:82:90:A0:B5:0B:D9:F3:02:BA:34:5B:F4:2D:CA:33
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       04D344ECC4E04516062006BB9CA1CEAF7641B6F9
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31343a3a2f36342d3634203d3e20333939313635.roa
Signing time:             Sat 10 Oct 2026 12:29:17 +0000
ROA not before:           Sat 10 Oct 2026 12:24:17 +0000
ROA not after:            Sat 09 Oct 2027 12:29:17 +0000
asID:                     399165
IP address blocks:        2403:2500:400:14::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 02:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d3:44:ec:c4:e0:45:16:06:20:06:bb:9c:a1:ce:af:76:41:b6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct 10 12:24:17 2026 GMT
            Not After : Oct  9 12:29:17 2027 GMT
        Subject: CN=09013366748290A0B50BD9F302BA345BF42DCA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:10:bf:b8:bb:d5:18:6d:62:48:e6:76:37:
                    4d:fe:ff:ca:7a:ac:02:f1:13:24:a0:2c:46:f9:96:
                    b2:6e:83:85:e2:89:2b:66:c5:30:3a:f8:5d:51:47:
                    0f:af:c6:55:9a:53:5d:ad:de:ee:7c:24:c0:41:40:
                    7d:4e:37:23:0f:15:25:f6:a3:26:ae:9e:fd:62:dc:
                    fb:f2:d6:b1:2f:15:f3:8b:68:a2:e4:36:28:81:c6:
                    f3:51:6a:d0:fb:93:9d:b6:be:dd:01:30:21:21:10:
                    c2:3b:9d:14:68:2a:36:84:02:d5:a2:60:34:11:79:
                    ba:96:fc:7a:35:c3:7e:b6:33:57:03:23:6b:40:9c:
                    68:59:9e:f0:4a:41:cf:f3:cb:bf:62:03:a2:88:de:
                    35:2a:7a:71:fd:7f:ea:d6:71:df:89:62:92:f9:9d:
                    85:d7:0a:ed:4b:e4:68:f9:22:f6:1e:e7:ba:d5:8c:
                    3c:32:6f:ad:53:7f:5c:08:a4:85:e1:da:53:f7:e9:
                    98:ac:52:c7:42:d3:fc:94:e4:1f:fc:b6:45:6e:15:
                    28:7e:bf:d6:da:ad:8e:0d:81:e2:86:12:5f:86:d7:
                    ab:3f:e5:24:97:fb:50:00:b8:be:7d:d0:08:3b:72:
                    7f:74:cd:ce:3b:8d:39:6f:78:a0:5a:c6:f1:3a:e0:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:33:66:74:82:90:A0:B5:0B:D9:F3:02:BA:34:5B:F4:2D:CA:33
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31343a3a2f36342d3634203d3e20333939313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:400:14::/64

    Signature Algorithm: sha256WithRSAEncryption
         67:53:c8:b9:7d:e4:bc:af:57:5d:18:6b:fd:30:27:a3:ad:ec:
         be:40:86:f8:a3:5e:c3:23:a4:ef:d1:19:72:51:72:92:c8:2a:
         4c:7e:6d:e5:d6:d0:cc:f9:d1:2d:39:38:42:9d:c6:45:6a:a2:
         d4:09:89:eb:69:1c:d0:cf:3c:d8:99:69:0e:5f:d3:51:1a:47:
         0c:f7:02:ad:44:4d:67:15:5a:ca:cc:17:37:5e:5e:84:16:16:
         9c:6f:69:ce:9a:46:04:d9:f8:c7:7d:73:63:08:d6:a7:91:1f:
         75:7b:72:87:ca:4b:e0:71:4a:34:29:a3:68:c8:8a:b0:8f:54:
         b2:75:16:86:29:ae:7b:6d:80:8e:86:00:95:7f:d2:b9:e2:ac:
         ae:b5:97:3f:1c:cf:8f:44:65:7b:83:04:83:2d:fb:46:64:c8:
         02:01:e2:cc:05:82:ec:76:e2:87:2f:0b:2d:24:79:ef:8d:5b:
         e2:48:04:56:7a:26:fb:35:b7:e3:35:6c:ab:db:8a:0d:25:75:
         6b:67:74:73:43:77:e1:4b:49:cc:76:b4:b2:85:2f:d3:6b:92:
         1d:25:63:45:17:0d:05:be:a2:81:90:3c:1a:cd:5b:de:0a:ec:
         fd:35:f4:a4:35:07:b9:44:ad:1f:22:ac:69:12:d9:be:ea:32:
         52:c8:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:16:26 2026 by rpki-client