Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3a2f34312d3431203d3e203336323336.roa
File:                     323430333a323530303a393030303a3a2f34312d3431203d3e203336323336.roa (raw, json)
Hash identifier:          /xP6/8eHhiS6ie4hLo2JZtdeoplPvOhY8zD/ME73+e4=
Subject key identifier:   9F:8B:91:6A:58:38:21:85:10:90:C3:94:FB:64:14:B2:A4:3F:64:FC
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       238632E8A86D6B127EE19560D0A613A1708C4380
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3a2f34312d3431203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 20:13:54 +0000
ROA not before:           Mon 04 Aug 2025 20:08:54 +0000
ROA not after:            Mon 03 Aug 2026 20:13:54 +0000
asID:                     36236
IP address blocks:        2403:2500:9000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 03:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:86:32:e8:a8:6d:6b:12:7e:e1:95:60:d0:a6:13:a1:70:8c:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 20:08:54 2025 GMT
            Not After : Aug  3 20:13:54 2026 GMT
        Subject: CN=9F8B916A583821851090C394FB6414B2A43F64FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:bc:ab:3d:8c:5b:92:35:85:17:72:1a:e7:
                    8a:1c:7f:62:81:2b:80:67:52:5b:b1:54:c2:13:fa:
                    29:93:95:3f:1c:a2:f6:fc:f9:95:7b:b3:be:d9:fb:
                    74:4e:be:4f:43:1a:f8:fb:9a:14:50:7f:db:8e:d9:
                    f7:a5:22:01:63:29:31:20:3f:cb:ff:db:4b:98:b0:
                    83:fe:5e:2b:ca:a5:90:b2:88:20:51:f7:e5:7c:49:
                    c5:ef:5d:9a:41:13:cb:a6:76:19:0c:2f:3a:43:6b:
                    d9:04:75:e7:52:bc:f8:c7:50:45:f1:9e:9b:d4:48:
                    4e:27:be:9e:45:8b:26:90:8e:66:e5:4b:6c:f1:e0:
                    9f:c9:d9:de:c0:2a:58:c6:f0:b2:78:27:bd:87:42:
                    4d:df:f8:f6:a2:16:3d:eb:c3:bc:54:6d:9f:fa:df:
                    aa:b2:77:63:17:55:e1:f1:50:1e:ea:f4:78:54:bd:
                    bb:ce:d6:d3:fb:70:dc:d2:ee:33:0a:35:d0:4d:f6:
                    b0:50:32:8a:bb:04:64:3f:37:d9:65:4d:23:fe:97:
                    4b:73:1c:aa:df:f1:49:53:4c:9c:a4:13:af:e1:9c:
                    55:c7:2e:54:ff:e4:6f:e3:45:31:04:c6:94:cb:18:
                    cd:64:24:49:35:7d:e9:46:32:8a:3d:15:c8:eb:79:
                    e1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8B:91:6A:58:38:21:85:10:90:C3:94:FB:64:14:B2:A4:3F:64:FC
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3a2f34312d3431203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2500:9000::/41

    Signature Algorithm: sha256WithRSAEncryption
         e0:64:12:01:d5:93:26:98:54:c4:d7:75:27:3a:1e:8f:98:dc:
         1e:e8:2a:37:74:49:a7:b7:45:7b:87:ad:bd:3d:bb:3f:b0:36:
         ee:a2:1f:1c:38:d2:83:be:6c:22:cb:35:3a:53:24:c4:83:e6:
         0e:58:89:93:bc:a1:0c:dd:23:bc:38:c3:31:a4:db:f2:ec:69:
         2a:0c:7c:78:82:2c:4d:69:e7:a6:8f:f2:26:db:dc:98:45:25:
         de:3d:22:ab:86:ea:e1:6c:20:3e:24:5f:95:a8:e9:38:29:db:
         b7:10:97:b8:0d:2f:33:e7:6a:d4:5f:e6:31:48:b8:ef:94:68:
         3c:e2:af:cd:1f:f0:4c:78:ef:35:52:7c:f9:d0:0b:55:9e:86:
         c0:9a:53:eb:af:42:93:a7:1d:a9:6c:54:9d:b3:0e:4e:83:9a:
         50:ef:40:3d:96:75:e4:a6:03:43:81:b7:42:60:a0:c1:91:f2:
         f7:99:fc:39:7d:7b:b6:32:8f:5a:63:41:24:ff:56:ae:ef:56:
         98:fe:20:80:87:d8:00:ba:ef:e0:85:b0:66:96:48:bc:3f:cd:
         04:32:f7:b7:d7:87:f1:14:3d:33:46:f7:9c:cc:31:45:48:b2:
         72:0f:42:c2:40:be:9e:9e:db:38:fc:e9:27:63:a9:dd:1e:37:
         e5:e2:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:28:09 2025 by rpki-client