Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
File:                     323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (raw, json)
Hash identifier:          bouA86HN5GYyHuqngfKSuavBIOUqc1LSh5hK3DhbpI8=
Subject key identifier:   71:87:2F:00:6D:55:54:95:F9:D9:DC:7B:E7:64:74:75:73:2C:EF:39
Certificate issuer:       /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
Certificate serial:       4F950C40D77E35786832BF7242526100BF44E294
Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
Signing time:             Fri 19 Jun 2026 07:53:13 +0000
ROA not before:           Fri 19 Jun 2026 07:48:13 +0000
ROA not after:            Fri 18 Jun 2027 07:53:13 +0000
asID:                     139299
IP address blocks:        2407:cdc0:efff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:95:0c:40:d7:7e:35:78:68:32:bf:72:42:52:61:00:bf:44:e2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
        Validity
            Not Before: Jun 19 07:48:13 2026 GMT
            Not After : Jun 18 07:53:13 2027 GMT
        Subject: CN=71872F006D555495F9D9DC7BE7647475732CEF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:e3:29:62:82:3c:bc:12:18:95:7e:8d:5d:
                    4e:ca:cd:a9:7b:f4:c5:f8:8b:b7:34:e9:97:98:62:
                    3b:b1:ba:a2:f6:b4:a4:89:0f:71:0f:d7:99:ab:b8:
                    55:1f:51:db:ea:2a:8e:42:b9:5c:b3:b2:37:fd:69:
                    e3:20:32:a7:6d:8a:9c:38:c1:69:d5:fc:6d:2e:34:
                    47:2b:23:03:26:c9:4a:bd:5e:48:5a:94:12:7a:01:
                    67:08:45:96:be:e9:8b:b5:7f:37:4b:ce:11:57:32:
                    9b:a2:3e:fa:03:4b:b1:6a:0d:03:fe:2a:87:4d:cd:
                    13:d1:4f:9f:6f:5c:af:b2:1f:b5:da:84:70:27:60:
                    0c:66:8a:a4:65:93:65:cb:6e:30:12:e7:e2:b3:b1:
                    1d:bd:e4:ea:c0:9b:3a:af:ea:b9:f5:22:13:67:28:
                    bd:53:ef:e9:bf:89:6c:c6:d5:53:30:79:44:0c:93:
                    df:0c:b2:1c:3f:9d:d0:e4:01:45:a4:8c:9e:7e:56:
                    68:a9:92:51:41:24:38:aa:3a:16:9d:11:79:85:49:
                    2a:bf:d8:7d:d4:4c:78:37:bf:33:ad:47:79:bf:fa:
                    0e:21:93:13:b2:8d:50:69:34:36:83:06:70:99:57:
                    d5:04:c3:61:a3:e6:67:f2:0e:c4:3d:52:36:df:59:
                    6b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:2F:00:6D:55:54:95:F9:D9:DC:7B:E7:64:74:75:73:2C:EF:39
            X509v3 Authority Key Identifier:
                keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:efff::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:19:63:e5:38:b9:89:bc:7d:b4:d0:b1:5b:b3:47:72:cd:d2:
         2c:33:c1:b8:b9:00:14:ac:44:6f:c4:87:9f:78:29:59:ab:8c:
         a1:ba:9d:68:ec:d9:c6:24:c2:c0:0a:bf:38:02:e0:34:8e:15:
         0a:f2:a2:fb:21:00:04:68:f9:df:e8:08:0e:fa:28:ac:3a:2f:
         7b:41:ed:73:ba:db:4c:58:01:99:2e:cd:07:fb:b3:e1:cb:4f:
         95:50:2f:1e:2c:ef:23:9c:4e:0c:c7:1c:4d:5a:f3:92:e1:6b:
         12:4f:d0:e9:e9:86:4c:8a:bf:20:79:85:a2:9c:f1:fe:07:e8:
         11:21:55:b1:bb:29:1e:dc:2d:09:ef:ad:5c:93:52:56:e5:c2:
         07:5c:4b:21:74:5e:bd:23:f1:24:27:bf:01:3b:64:9e:de:55:
         eb:57:17:fb:ad:23:b4:ab:3c:5e:38:9b:6f:61:b4:18:ec:35:
         5f:ea:5b:a2:99:e6:6e:0c:cb:c4:9d:1d:4f:16:a0:22:91:be:
         f5:14:69:e5:35:dd:5b:74:f3:a1:00:b2:15:6e:ab:a3:0d:5f:
         75:42:bc:0b:6f:68:45:6e:2b:39:09:bb:f4:e8:c7:d9:a8:04:
         ca:86:00:08:80:7d:e7:f0:dc:5b:f6:b2:3b:04:e1:57:88:02:
         1c:2a:22:8e
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUT5UMQNd+NXhoMr9yQlJhAL9E4pQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyhBREJFMUEwRjQ2
RjlDNzdCMEQyNDlGRDZBNDM4QjQ4QjdGQjIxQkNGMB4XDTI2MDYxOTA3NDgxM1oX
DTI3MDYxODA3NTMxM1owMzExMC8GA1UEAxMoNzE4NzJGMDA2RDU1NTQ5NUY5RDlE
QzdCRTc2NDc0NzU3MzJDRUYzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKqa4yligjy8EhiVfo1dTsrNqXv0xfiLtzTpl5hiO7G6ova0pIkPcQ/Xmau4
VR9R2+oqjkK5XLOyN/1p4yAyp22KnDjBadX8bS40RysjAybJSr1eSFqUEnoBZwhF
lr7pi7V/N0vOEVcym6I++gNLsWoNA/4qh03NE9FPn29cr7IftdqEcCdgDGaKpGWT
ZctuMBLn4rOxHb3k6sCbOq/qufUiE2covVPv6b+JbMbVUzB5RAyT3wyyHD+d0OQB
RaSMnn5WaKmSUUEkOKo6Fp0ReYVJKr/YfdRMeDe/M61Heb/6DiGTE7KNUGk0NoMG
cJlX1QTDYaPmZ/IOxD1SNt9Za7ECAwEAAaOCAkkwggJFMB0GA1UdDgQWBBRxhy8A
bVVUlfnZ3HvnZHR1cyzvOTAfBgNVHSMEGDAWgBStvhoPRvnHew0kn9akOLSLf7Ib
zzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5
ZjJmYjI3MGNhOC8xL0FEQkUxQTBGNDZGOUM3N0IwRDI0OUZENkE0MzhCNDhCN0ZC
MjFCQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL3JiNGFEMGI1eDNzTkpKX1dwRGkwaTMteUc4OC5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5ZjJmYjI3MGNh
OC8xLzMyMzQzMDM3M2E2MzY0NjMzMDNhNjU2NjY2NjYzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTMzMzkzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB83A7/8wDQYJKoZIhvcN
AQELBQADggEBAD8ZY+U4uYm8fbTQsVuzR3LN0iwzwbi5ABSsRG/Eh594KVmrjKG6
nWjs2cYkwsAKvzgC4DSOFQryovshAARo+d/oCA76KKw6L3tB7XO620xYAZkuzQf7
s+HLT5VQLx4s7yOcTgzHHE1a85LhaxJP0OnphkyKvyB5haKc8f4H6BEhVbG7KR7c
LQnvrVyTUlblwgdcSyF0Xr0j8SQnvwE7ZJ7eVetXF/utI7SrPF44m29htBjsNV/q
W6KZ5m4My8SdHU8WoCKRvvUUaeU13Vt086EAshVuq6MNX3VCvAtvaEVuKzkJu/To
x9moBMqGAAiAfefw3Fv2sjsE4VeIAhwqIo4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:52 2026 by rpki-client