Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/323030313a6466353a663463303a3a2f34382d3438203d3e20393435.roa
File:                     323030313a6466353a663463303a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          xXC4Bu5ZdG+UclEeLouQMy5r/YbwMJ0MudQ2whbXlPk=
Subject key identifier:   50:9B:B7:08:4F:20:9A:A7:9F:11:73:57:51:D2:D1:58:FC:62:32:55
Certificate issuer:       /CN=A91B82CE0000/serialNumber=05C715C6F5B7EF88232CD4AD1FB2E78F4E9182DB
Certificate serial:       3E60ECFA99C374A576E5FC7DBE3896278201D941
Authority key identifier: 05:C7:15:C6:F5:B7:EF:88:23:2C:D4:AD:1F:B2:E7:8F:4E:91:82:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BccVxvW374gjLNStH7Lnj06Rgts.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/323030313a6466353a663463303a3a2f34382d3438203d3e20393435.roa
Signing time:             Sat 09 Aug 2025 10:38:38 +0000
ROA not before:           Sat 09 Aug 2025 10:33:38 +0000
ROA not after:            Sat 08 Aug 2026 10:38:38 +0000
asID:                     945
IP address blocks:        2001:df5:f4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/05C715C6F5B7EF88232CD4AD1FB2E78F4E9182DB.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/05C715C6F5B7EF88232CD4AD1FB2E78F4E9182DB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BccVxvW374gjLNStH7Lnj06Rgts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 10:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:60:ec:fa:99:c3:74:a5:76:e5:fc:7d:be:38:96:27:82:01:d9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B82CE0000, serialNumber=05C715C6F5B7EF88232CD4AD1FB2E78F4E9182DB
        Validity
            Not Before: Aug  9 10:33:38 2025 GMT
            Not After : Aug  8 10:38:38 2026 GMT
        Subject: CN=509BB7084F209AA79F11735751D2D158FC623255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:25:9c:e6:d9:e4:3d:23:fb:1d:a0:a6:7d:
                    c6:c4:49:7f:66:ad:36:b4:8b:c3:f0:e6:ff:f7:ce:
                    c1:b6:4a:16:85:ae:10:7c:49:d5:3d:13:35:85:eb:
                    ad:18:ad:10:85:d0:5e:83:6e:8b:57:91:89:19:75:
                    23:fc:d3:51:2e:25:65:9f:ed:cf:71:9e:53:33:ed:
                    a1:93:8d:fe:e6:d3:a1:3d:6a:de:8a:0a:ba:b3:d8:
                    27:40:be:45:7c:c8:6e:02:1d:f1:0c:c7:21:5a:94:
                    d6:10:d4:10:1a:50:46:bb:17:cb:ba:9b:30:88:1e:
                    60:65:04:77:8a:64:9e:be:60:e8:ac:d9:ec:35:75:
                    1d:1b:cb:cd:a4:04:90:4c:ab:5a:9f:9d:12:25:cf:
                    53:ef:64:a3:96:1a:cd:b4:61:35:59:39:9d:ff:c9:
                    a8:7f:0d:ae:6e:5d:64:73:64:e4:39:06:bb:e3:71:
                    0a:8d:9c:95:14:64:1b:76:ac:46:da:0f:e1:8c:7f:
                    dc:8a:4f:58:1c:07:7c:34:f4:90:b7:9c:0b:b0:aa:
                    2a:bb:6e:7f:be:5b:45:fd:b2:69:9d:1f:63:7b:7f:
                    18:b2:fd:10:20:d0:21:28:a3:a4:28:22:f7:62:b1:
                    7b:fb:ec:3c:f3:4e:4a:1e:73:10:a9:b0:e0:c1:8e:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9B:B7:08:4F:20:9A:A7:9F:11:73:57:51:D2:D1:58:FC:62:32:55
            X509v3 Authority Key Identifier:
                keyid:05:C7:15:C6:F5:B7:EF:88:23:2C:D4:AD:1F:B2:E7:8F:4E:91:82:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/05C715C6F5B7EF88232CD4AD1FB2E78F4E9182DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BccVxvW374gjLNStH7Lnj06Rgts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/14/323030313a6466353a663463303a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:e0:b7:6b:d8:74:e2:80:81:50:35:53:c8:7e:91:c2:8e:1d:
         ff:9a:66:f5:d7:45:56:08:73:bf:ee:36:c3:1e:fa:a4:c2:67:
         09:9b:b4:10:7f:0c:b1:d7:d0:1b:b8:63:17:9e:e2:ad:00:4d:
         70:5d:12:4c:f5:10:03:69:cc:bc:f1:c1:3a:e2:58:c3:73:f3:
         4b:13:10:25:01:c8:18:62:4e:ce:71:87:2e:21:8d:54:5f:b3:
         fc:89:23:5a:e9:c9:2d:c5:6c:b9:aa:4b:60:0c:76:0a:0c:b3:
         a3:51:4d:dd:ed:fb:84:80:ce:54:25:aa:d1:30:4a:1e:3c:4a:
         f4:fe:d2:c5:1b:8e:d6:f9:11:05:bb:a3:59:0d:a8:6a:d8:a0:
         4b:22:9f:25:aa:47:05:22:15:57:5e:11:c0:1c:54:91:38:e5:
         b1:fc:28:11:0c:6c:25:0e:5d:ff:af:bf:e5:47:e6:1d:44:a3:
         83:39:4d:e0:82:24:ec:d3:46:f5:6c:8d:e4:f6:cb:ad:68:60:
         52:2d:b9:9f:93:8e:30:24:e8:78:bb:d4:b1:3b:d8:e4:e5:e4:
         8b:a3:8f:0c:05:1c:b6:2d:18:90:e9:de:cc:30:52:ed:87:90:
         8b:1e:fa:43:a5:d5:1b:f0:fc:c2:db:9c:56:5d:a1:82:16:9f:
         51:1d:cc:04
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUPmDs+pnDdKV25fx9vjiWJ4IB2UEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQjgyQ0UwMDAwMTEwLwYDVQQFEygwNUM3MTVDNkY1
QjdFRjg4MjMyQ0Q0QUQxRkIyRTc4RjRFOTE4MkRCMB4XDTI1MDgwOTEwMzMzOFoX
DTI2MDgwODEwMzgzOFowMzExMC8GA1UEAxMoNTA5QkI3MDg0RjIwOUFBNzlGMTE3
MzU3NTFEMkQxNThGQzYyMzI1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKqEJZzm2eQ9I/sdoKZ9xsRJf2atNrSLw/Dm//fOwbZKFoWuEHxJ1T0TNYXr
rRitEIXQXoNui1eRiRl1I/zTUS4lZZ/tz3GeUzPtoZON/ubToT1q3ooKurPYJ0C+
RXzIbgId8QzHIVqU1hDUEBpQRrsXy7qbMIgeYGUEd4pknr5g6KzZ7DV1HRvLzaQE
kEyrWp+dEiXPU+9ko5YazbRhNVk5nf/JqH8Nrm5dZHNk5DkGu+NxCo2clRRkG3as
RtoP4Yx/3IpPWBwHfDT0kLecC7CqKrtuf75bRf2yaZ0fY3t/GLL9ECDQISijpCgi
92Kxe/vsPPNOSh5zEKmw4MGOsicCAwEAAaOCAkMwggI/MB0GA1UdDgQWBBRQm7cI
TyCap58Rc1dR0tFY/GIyVTAfBgNVHSMEGDAWgBQFxxXG9bfviCMs1K0fsuePTpGC
2zAOBgNVHQ8BAf8EBAMCB4AwgYYGA1UdHwR/MH0we6B5oHeGdXJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS82YWI5NmU3YTYxMzA0OThhYTk4MTNk
N2VlNWJiZWQzMS8xNC8wNUM3MTVDNkY1QjdFRjg4MjMyQ0Q0QUQxRkIyRTc4RjRF
OTE4MkRCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8v
cnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhG
N0M3MkZEMUZGMi9CY2NWeHZXMzc0Z2pMTlN0SDdMbmowNlJndHMuY2VyMIGlBggr
BgEFBQcBCwSBmDCBlTCBkgYIKwYBBQUHMAuGgYVyc3luYzovL3Jwa2ktcnBzLmFy
aW4ubmV0L3JlcG9zaXRvcnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVk
MzEvMTQvMzIzMDMwMzEzYTY0NjYzNTNhNjYzNDYzMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ319MAwDQYJKoZIhvcNAQELBQAD
ggEBAJLgt2vYdOKAgVA1U8h+kcKOHf+aZvXXRVYIc7/uNsMe+qTCZwmbtBB/DLHX
0Bu4Yxee4q0ATXBdEkz1EANpzLzxwTriWMNz80sTECUByBhiTs5xhy4hjVRfs/yJ
I1rpyS3FbLmqS2AMdgoMs6NRTd3t+4SAzlQlqtEwSh48SvT+0sUbjtb5EQW7o1kN
qGrYoEsinyWqRwUiFVdeEcAcVJE45bH8KBEMbCUOXf+vv+VH5h1Eo4M5TeCCJOzT
RvVsjeT2y61oYFItuZ+TjjAk6Hi71LE72OTl5IujjwwFHLYtGJDp3swwUu2HkIse
+kOl1Rvw/MLbnFZdoYIWn1EdzAQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:44:12 2025 by rpki-client