Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3234203d3e20313439333031.roa
File:                     3136302e32322e3136382e302f32332d3234203d3e20313439333031.roa (raw, json)
Hash identifier:          cd7FHnU5Ppbm0Tk+Z3nvGwXxtW4Ezd3k7hkNUR9FtBk=
Subject key identifier:   36:61:F2:A8:00:80:8E:A7:00:83:B8:23:82:B0:D7:33:E1:C6:6B:66
Certificate issuer:       /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
Certificate serial:       01E3D5DDEF28900A02DA5E2B0E81A3296F1F7834
Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3234203d3e20313439333031.roa
Signing time:             Mon 19 May 2025 06:32:46 +0000
ROA not before:           Mon 19 May 2025 06:27:46 +0000
ROA not after:            Mon 18 May 2026 06:32:46 +0000
asID:                     149301
IP address blocks:        160.22.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 12:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e3:d5:dd:ef:28:90:0a:02:da:5e:2b:0e:81:a3:29:6f:1f:78:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630
        Validity
            Not Before: May 19 06:27:46 2025 GMT
            Not After : May 18 06:32:46 2026 GMT
        Subject: CN=3661F2A800808EA70083B82382B0D733E1C66B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:f2:b9:5a:2d:9f:7b:ab:60:2e:3b:a9:64:
                    d6:77:27:59:47:47:f9:20:1c:12:e6:9a:a2:0f:6e:
                    5e:f1:d9:23:f5:ee:71:51:6c:9e:f7:16:e2:3a:f2:
                    d6:25:74:0f:7c:b0:f3:4c:77:a5:6a:91:5b:be:79:
                    9f:f1:f6:e5:01:92:38:ea:92:29:78:4a:0a:77:11:
                    d0:c2:83:34:7b:d3:d9:1f:e0:5f:7c:7a:60:55:71:
                    6d:7a:30:7d:ff:6f:6d:e1:15:29:cb:35:76:f1:32:
                    9a:50:61:99:36:6d:da:91:9c:a7:4a:c1:13:31:32:
                    3f:04:14:5a:16:f8:22:2b:89:5b:61:04:e8:b4:77:
                    a7:ba:9a:6d:ff:89:66:27:cf:ee:e1:ea:26:89:f6:
                    b7:c3:94:ea:84:c6:27:32:bb:3e:eb:f5:29:40:9d:
                    4e:0f:9f:3f:84:82:f5:2b:eb:77:16:77:30:f7:0e:
                    d7:26:35:6d:f2:95:68:64:4a:01:27:22:75:3c:dc:
                    75:9c:f1:55:1b:51:03:50:9f:27:6e:5c:ca:1e:33:
                    4d:0e:5e:d3:5e:75:f1:9e:93:65:a1:3c:93:3b:dd:
                    4c:b0:e1:8e:2c:10:37:fd:44:ee:b4:db:c8:cc:ce:
                    b1:20:50:9e:80:5b:aa:3a:bd:02:bc:d1:3f:e5:44:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:61:F2:A8:00:80:8E:A7:00:83:B8:23:82:B0:D7:33:E1:C6:6B:66
            X509v3 Authority Key Identifier:
                keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/3136302e32322e3136382e302f32332d3234203d3e20313439333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:1c:7a:80:07:34:de:68:4c:ee:e5:df:00:cb:60:b4:12:
         85:41:b5:c4:17:0b:fd:57:e5:b0:88:e3:57:ce:18:ac:2b:04:
         a7:d7:57:85:cc:b0:23:a1:75:2a:2f:54:4e:47:d2:c1:95:23:
         83:61:91:34:49:81:1a:27:14:ff:4a:33:00:c6:35:f5:fb:d6:
         db:d4:e8:c1:02:f7:f3:48:5a:8c:60:12:38:b5:60:68:19:f1:
         29:f8:61:19:18:04:c3:ec:87:46:53:f9:68:d4:15:3b:d2:f9:
         e8:68:7b:d8:4d:ed:c6:ef:12:f8:2c:47:5b:1b:ba:89:7e:1c:
         a1:99:12:a4:6e:c4:8c:a9:02:f4:12:f4:e5:d5:7e:0f:25:5e:
         eb:3f:af:b0:71:a1:ec:10:88:89:55:75:ba:d7:10:fb:1f:15:
         99:27:fc:f2:76:d1:91:5c:1e:64:cf:7c:97:ba:02:ae:3d:63:
         59:ec:af:4b:09:9f:3f:63:13:e8:bc:28:95:d0:a2:8f:59:24:
         ed:75:fa:fb:36:c8:76:42:d3:54:2d:a3:3d:21:a7:5b:46:da:
         09:0b:8d:1e:44:7d:6b:f7:3e:57:90:8a:7f:fc:3e:99:b4:5f:
         9e:db:ef:17:61:a6:17:7f:88:f8:25:52:41:dc:b8:b2:aa:bb:
         ef:b5:61:7a
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUAePV3e8okAoC2l4rDoGjKW8feDQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEygyM0IxMDMwRjND
Q0FDOTk5RjJCNTc3NDVGQzlEREExQ0NERkEzNjMwMB4XDTI1MDUxOTA2Mjc0NloX
DTI2MDUxODA2MzI0NlowMzExMC8GA1UEAxMoMzY2MUYyQTgwMDgwOEVBNzAwODNC
ODIzODJCMEQ3MzNFMUM2NkI2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAISa8rlaLZ97q2AuO6lk1ncnWUdH+SAcEuaaog9uXvHZI/XucVFsnvcW4jry
1iV0D3yw80x3pWqRW755n/H25QGSOOqSKXhKCncR0MKDNHvT2R/gX3x6YFVxbXow
ff9vbeEVKcs1dvEymlBhmTZt2pGcp0rBEzEyPwQUWhb4IiuJW2EE6LR3p7qabf+J
ZifP7uHqJon2t8OU6oTGJzK7Puv1KUCdTg+fP4SC9SvrdxZ3MPcO1yY1bfKVaGRK
AScidTzcdZzxVRtRA1CfJ25cyh4zTQ5e01518Z6TZaE8kzvdTLDhjiwQN/1E7rTb
yMzOsSBQnoBbqjq9ArzRP+VEpGcCAwEAAaOCAj4wggI6MB0GA1UdDgQWBBQ2YfKo
AICOpwCDuCOCsNcz4cZrZjAfBgNVHSMEGDAWgBQjsQMPPMrJmfK1d0X8ndoczfo2
MDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC81LzIzQjEwMzBGM0NDQUM5OTlGMkI1Nzc0NUZDOUREQTFDQ0RG
QTM2MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL0k3RUREenpLeVpueXRYZEZfSjNhSE0zNk5qQS5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC81LzMxMzYzMDJlMzIzMjJlMzEzNjM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIw
MzEzNDM5MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBaoMA0GCSqGSIb3DQEBCwUAA4IBAQB0
4Rx6gAc03mhM7uXfAMtgtBKFQbXEFwv9V+WwiONXzhisKwSn11eFzLAjoXUqL1RO
R9LBlSODYZE0SYEaJxT/SjMAxjX1+9bb1OjBAvfzSFqMYBI4tWBoGfEp+GEZGATD
7IdGU/lo1BU70vnoaHvYTe3G7xL4LEdbG7qJfhyhmRKkbsSMqQL0EvTl1X4PJV7r
P6+wcaHsEIiJVXW61xD7HxWZJ/zydtGRXB5kz3yXugKuPWNZ7K9LCZ8/YxPovCiV
0KKPWSTtdfr7Nsh2QtNULaM9IadbRtoJC40eRH1r9z5XkIp//D6ZtF+e2+8XYaYX
f4j4JVJB3LiyqrvvtWF6
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:23:31 2025 by rpki-client