Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa
File:                     34332e3234352e35302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          BYu+o7svvE5eju5iu0VMH98XFIVJlKCdx4A7qRPkySs=
Subject key identifier:   36:71:17:D2:4C:36:55:69:AC:0A:53:90:5C:E3:A7:A7:E6:78:92:FC
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       7AC02C69ECBE0DE10E7EE31C7B6A78E408288906
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 21:13:55 +0000
ROA not before:           Mon 04 Aug 2025 21:08:55 +0000
ROA not after:            Mon 03 Aug 2026 21:13:55 +0000
asID:                     36236
IP address blocks:        43.245.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 03:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c0:2c:69:ec:be:0d:e1:0e:7e:e3:1c:7b:6a:78:e4:08:28:89:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 21:08:55 2025 GMT
            Not After : Aug  3 21:13:55 2026 GMT
        Subject: CN=367117D24C365569AC0A53905CE3A7A7E67892FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:aa:1a:12:22:35:66:99:fd:6e:67:13:53:fd:
                    d4:f3:35:82:52:4a:61:e7:06:85:c5:a1:10:98:48:
                    a5:66:10:fe:51:ff:09:3d:8d:40:71:d5:63:50:bf:
                    25:ab:9c:b4:1f:ba:52:dc:52:ef:ac:e9:4a:98:cb:
                    e9:86:a9:63:3f:c2:14:f1:93:ee:03:ab:72:6c:cd:
                    84:1f:3a:74:91:38:87:76:6a:ec:e0:d0:38:25:21:
                    3a:fc:5b:3b:5e:df:6c:9c:56:2b:33:8c:4e:90:9f:
                    90:9d:6a:e9:6b:97:69:1a:84:5e:8a:9c:d4:d5:95:
                    70:20:2b:41:a3:e6:0e:69:a2:47:fb:da:9b:2b:dd:
                    03:aa:b8:37:b4:12:5e:c0:56:f5:82:ff:36:da:91:
                    58:9d:42:28:6c:ba:80:9c:22:ba:69:64:9d:92:69:
                    26:33:20:a6:de:6c:a4:e7:17:92:ab:a1:c3:89:fd:
                    1f:0f:e1:fc:e1:89:20:8f:ec:93:f6:74:ad:32:d4:
                    40:bd:3b:19:78:b3:35:29:1a:70:c7:3e:f7:46:de:
                    ff:1e:a3:c5:52:53:28:67:65:3a:15:da:28:1c:2f:
                    36:fd:60:68:cd:ae:35:24:c3:b9:45:fd:c0:f7:5c:
                    98:a4:0b:c8:75:2f:ee:1c:66:1b:d4:ed:e0:92:c7:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:71:17:D2:4C:36:55:69:AC:0A:53:90:5C:E3:A7:A7:E6:78:92:FC
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35302e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:f9:11:72:3f:00:48:5d:b2:c0:f5:26:f3:7b:f3:49:34:67:
         b5:26:07:57:62:21:b5:ca:f7:5b:9f:aa:da:2b:3d:3c:d7:1f:
         0a:95:ba:ec:58:5b:5d:b3:60:d4:ac:c4:60:76:64:8c:b8:7c:
         ac:df:30:56:c4:11:de:61:18:1b:fc:00:a2:d9:04:87:b9:34:
         6c:05:f2:8c:7f:93:46:ad:25:2a:5f:93:03:e2:0a:4c:39:5f:
         a0:e6:88:91:20:5c:dd:b8:8d:38:ee:e9:e9:39:3b:7c:b9:ac:
         10:e6:6a:7d:fe:27:3e:bb:80:c9:b2:c1:54:93:3b:13:d1:1f:
         df:18:26:0e:23:de:09:cb:dd:d5:fa:a3:14:05:f9:47:81:b1:
         28:b1:4d:e3:9f:b7:82:07:76:71:31:3e:cd:92:c4:86:c9:f3:
         01:0a:04:db:d9:a0:cf:bd:d6:b2:01:03:20:ac:46:85:23:8e:
         d3:8e:cd:59:1a:58:c4:6e:dc:15:1a:ae:df:a1:cd:49:1e:00:
         8e:a7:df:ec:87:c4:61:c8:f1:ee:10:23:67:33:88:32:96:29:
         ca:25:d2:42:d2:91:6d:3b:43:43:d3:f6:15:3f:62:01:b6:e0:
         79:92:de:0e:62:42:2b:50:21:c9:d4:d5:ec:72:b0:a7:b6:00:
         21:f6:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:18 2025 by rpki-client