Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
File:                     34332e3234352e35312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          8j27OVRjYqL+xFlNiIDG1U/SxXnHXg71p/BFboWsF4k=
Subject key identifier:   5D:7B:87:FE:BD:70:18:55:C0:9D:E4:7F:51:96:6A:49:08:A7:2C:8C
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       7D45A69C49AAC10A0583D92DE69B4910F7EF8705
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 04 Aug 2025 21:13:56 +0000
ROA not before:           Mon 04 Aug 2025 21:08:56 +0000
ROA not after:            Mon 03 Aug 2026 21:13:56 +0000
asID:                     36236
IP address blocks:        43.245.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 03:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:45:a6:9c:49:aa:c1:0a:05:83:d9:2d:e6:9b:49:10:f7:ef:87:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Aug  4 21:08:56 2025 GMT
            Not After : Aug  3 21:13:56 2026 GMT
        Subject: CN=5D7B87FEBD701855C09DE47F51966A4908A72C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:f5:58:4c:48:a0:b2:be:7e:00:da:8c:c1:
                    90:e8:38:2d:db:e3:94:a9:1a:1c:c4:52:59:02:29:
                    48:2a:41:82:f1:5c:3c:d3:d0:30:6e:1a:62:a0:b5:
                    64:c4:a3:2d:c9:00:cd:1c:6e:e0:76:48:2f:54:c6:
                    66:ff:88:0d:7e:c6:e1:68:fd:6c:21:23:67:29:f0:
                    fd:8e:ae:a3:39:82:52:c8:86:f1:32:be:0f:d3:88:
                    20:5a:7d:0c:3f:64:6d:af:6e:6a:a9:86:66:01:ef:
                    68:ef:4b:38:b7:78:d6:d5:d4:b7:cb:f4:d3:c1:ba:
                    a9:49:8b:da:d3:d1:33:28:a9:39:65:b4:fc:b6:e4:
                    a6:7c:8c:92:95:69:5a:4b:2f:a8:3b:9e:0f:4a:58:
                    f5:9e:55:d0:57:be:b9:cc:5c:f9:1b:09:ba:7d:1d:
                    e3:b3:38:39:bf:47:60:f0:e7:d1:4e:7e:c2:f4:44:
                    d3:37:ef:c4:93:c5:a8:28:f9:99:a6:69:d0:ce:ca:
                    76:46:ba:85:bc:b1:90:2e:d4:11:84:33:c6:fc:ed:
                    b0:22:61:34:fc:d7:ca:be:f8:43:24:97:bd:00:6b:
                    dd:c1:2e:14:19:70:1d:17:76:fe:bd:ea:5a:50:82:
                    54:41:3f:10:62:d4:ed:c8:91:87:49:2c:1a:92:4a:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7B:87:FE:BD:70:18:55:C0:9D:E4:7F:51:96:6A:49:08:A7:2C:8C
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/34332e3234352e35312e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:7c:6d:51:c8:70:fa:03:c7:3e:7b:2e:1f:7a:d0:5d:00:
         84:96:82:35:08:ae:55:81:86:69:09:9a:e9:20:41:86:63:ca:
         36:68:33:f2:9f:7b:85:17:07:aa:f6:13:2e:a3:c6:01:f1:f0:
         f0:47:0c:fa:b8:14:06:23:12:a4:d7:55:e3:9a:1f:e0:b5:bc:
         3c:6c:53:fa:5d:ba:ba:0e:04:77:3f:5c:fe:0c:31:be:b3:13:
         7a:ec:ec:a6:3c:ac:b9:b9:24:d4:ed:c7:aa:76:dc:cc:bb:3f:
         7f:52:54:66:44:61:cd:93:85:e5:d3:2e:9d:9c:47:a9:7f:e2:
         73:76:91:ca:c0:63:33:e5:d6:09:c7:fd:f7:08:12:69:7e:32:
         7a:64:9d:9f:1a:6e:dd:e4:2e:ef:1e:1b:5b:89:15:55:a3:19:
         2f:d8:4a:5a:1c:fa:15:db:19:bc:77:c9:7a:8a:ae:b8:1b:d8:
         eb:5e:9d:01:9f:69:32:e7:8f:37:bc:37:e5:08:79:12:58:d3:
         dc:d5:bb:fe:19:1b:74:a7:b7:c6:78:f7:13:3d:0b:79:cc:a3:
         4b:1e:65:86:5b:e8:c2:d8:d8:77:94:81:65:98:41:30:34:33:
         a1:5c:2d:79:21:ad:b0:06:6d:dc:74:12:3e:4d:7e:a3:21:1a:
         0a:ff:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:42:24 2025 by rpki-client