Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
File:                     323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa (raw, json)
Hash identifier:          g3gwwjdhd35FM+/DyM9mH9WWuw7h9YX45jzXFwNNKAs=
Subject key identifier:   1F:22:D1:C7:30:88:CE:F3:6B:F1:DB:A4:4D:46:2E:88:7C:9A:5E:D2
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       392B15499D37436BD00B524605DF4A899C6C9278
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa
Signing time:             Sat 10 Oct 2026 12:29:17 +0000
ROA not before:           Sat 10 Oct 2026 12:24:17 +0000
ROA not after:            Sat 09 Oct 2027 12:29:17 +0000
asID:                     399164
IP address blocks:        2403:2500:8000:14::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2b:15:49:9d:37:43:6b:d0:0b:52:46:05:df:4a:89:9c:6c:92:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct 10 12:24:17 2026 GMT
            Not After : Oct  9 12:29:17 2027 GMT
        Subject: CN=1F22D1C73088CEF36BF1DBA44D462E887C9A5ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:52:55:e1:a4:fe:fd:82:94:51:9e:ed:31:
                    b1:50:97:e9:9e:7f:c9:b6:f4:f5:77:ad:bd:48:de:
                    f3:46:ec:ed:88:93:3c:db:95:86:e9:57:f6:a6:55:
                    a6:c9:73:c3:f7:89:72:53:ec:e9:26:c4:ad:da:4b:
                    60:53:81:48:0e:81:e5:5a:8b:0f:1c:fa:e0:27:d5:
                    63:8d:75:49:45:cd:08:32:b2:a0:65:70:23:83:97:
                    2e:f9:5a:4e:53:ec:92:2a:45:50:73:15:c9:d1:cf:
                    9c:cf:05:a6:63:7f:61:1f:dc:b4:83:5d:99:fc:48:
                    2d:a3:00:28:74:63:39:0c:35:86:55:f6:81:21:1a:
                    2f:d4:3f:65:75:ee:f8:2e:09:18:ab:0a:5f:91:54:
                    51:00:a2:82:76:1f:2d:bf:1c:65:15:1a:93:cb:86:
                    b7:0a:3c:62:a3:f2:c2:0c:23:8b:4a:cf:80:1c:35:
                    9b:0a:94:fa:8b:e5:3c:6a:6a:e1:bd:ef:54:ef:02:
                    0a:66:d7:ad:cb:fd:9f:8b:bc:80:1d:bf:7e:ad:f1:
                    30:f8:7c:62:39:1d:17:a1:92:31:9c:85:c4:61:c9:
                    cb:33:e8:d4:27:6f:49:70:b2:7d:03:3f:e0:85:0d:
                    a2:ad:cc:48:f2:9b:0e:9c:89:a1:37:47:d8:4b:d4:
                    3c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:D1:C7:30:88:CE:F3:6B:F1:DB:A4:4D:46:2E:88:7C:9A:5E:D2
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31343a3a2f36342d3634203d3e20333939313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:8000:14::/64

    Signature Algorithm: sha256WithRSAEncryption
         35:42:4f:88:5b:76:52:fc:d6:5f:bb:0a:e3:2b:fb:0b:06:af:
         14:11:db:bf:ad:72:dd:2c:a7:db:17:67:51:e7:56:42:c5:26:
         90:95:71:05:3d:62:e6:6f:ef:28:aa:a5:c8:3b:fb:bd:29:b2:
         65:72:f9:70:75:92:7d:ff:1a:75:65:e3:f7:cd:96:3d:65:03:
         46:45:28:cf:fe:c0:a7:4e:01:88:56:33:7b:b0:74:5e:fe:2f:
         dc:a3:6b:24:6c:9e:49:d9:ef:9d:f1:88:83:19:4d:0b:16:93:
         ca:14:a7:10:74:75:3e:c4:c1:6a:36:61:0e:9a:af:b8:76:50:
         fe:ba:49:2b:ce:7f:05:29:30:d4:51:6a:92:0b:2e:2c:13:7d:
         d7:a4:13:00:59:74:58:af:af:ec:d3:72:b2:a9:17:c0:72:09:
         91:c3:f1:13:bf:9d:60:7b:38:ea:90:fc:9f:3e:c9:24:15:93:
         7e:80:f3:bd:44:0f:cb:3c:c0:98:16:fe:4c:5e:45:61:3d:55:
         0b:b8:6e:d3:5e:70:80:6a:6e:0e:d3:1f:e0:df:f6:77:e9:cd:
         b4:a2:8c:d0:c3:1f:41:07:c1:1d:38:20:b2:e7:17:76:0d:58:
         f6:a7:ed:3a:ca:e1:f1:2f:61:a7:2b:10:12:4d:13:eb:06:dd:
         db:3e:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:36:57 2026 by rpki-client