Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa
File:                     3137302e31302e3134312e302f32342d3234203d3e203630343932.roa (raw, json)
Hash identifier:          EYxvuiGn9fzZYNO7akWS4ZVjAEqHe4cBQiOFvOh4fvA=
Subject key identifier:   F1:32:73:96:9F:E0:93:D0:18:E5:17:1F:0C:4D:85:39:A4:E0:DA:C3
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2B04A89DB4B81FA86DCCFA034014FAF75A80F360
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa
Signing time:             Fri 04 Jul 2025 12:05:08 +0000
ROA not before:           Fri 04 Jul 2025 12:00:08 +0000
ROA not after:            Fri 03 Jul 2026 12:05:08 +0000
asID:                     60492
IP address blocks:        170.10.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:04:a8:9d:b4:b8:1f:a8:6d:cc:fa:03:40:14:fa:f7:5a:80:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:08 2025 GMT
            Not After : Jul  3 12:05:08 2026 GMT
        Subject: CN=F13273969FE093D018E5171F0C4D8539A4E0DAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:da:d6:f7:6a:f3:bc:9e:c4:72:38:d1:d7:
                    0e:3b:38:c0:be:10:e8:a1:1e:d2:3a:e1:91:ef:78:
                    3e:c1:0d:df:90:61:08:70:c6:ee:28:74:c2:7f:e3:
                    f3:e1:68:f9:08:1b:ee:da:14:e9:5c:f7:a4:2d:3c:
                    76:fb:d7:12:9d:20:b5:ff:fe:f4:b1:46:24:6c:e4:
                    48:3f:28:7d:07:e9:4b:bf:b2:e2:28:24:08:9c:34:
                    3c:7e:bb:2b:ca:c8:78:c7:17:f6:be:17:2a:b2:5b:
                    3e:a2:7d:2d:ef:df:75:c7:45:5c:49:42:ff:ca:4e:
                    dd:3b:87:44:7c:f7:ae:ea:63:70:2d:29:fe:c9:6d:
                    17:92:c5:5e:87:86:48:92:9e:39:a4:98:09:06:6a:
                    3c:da:eb:87:fd:62:0a:62:09:0c:f2:8b:63:c6:14:
                    db:1e:92:f2:3b:4e:84:3d:ca:9c:c1:a8:21:c2:95:
                    6d:3b:44:a0:68:82:6d:ce:d2:a0:29:99:67:82:51:
                    5f:8f:9b:6f:16:fc:27:f6:b5:8d:50:99:74:c7:a8:
                    03:48:13:55:fe:8c:d4:b0:a9:02:7f:4c:17:ab:c0:
                    ce:52:e0:c1:87:68:5c:7b:a8:70:07:10:87:0e:d4:
                    db:e7:43:5f:93:e2:27:71:bf:66:17:d9:e0:26:8f:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:32:73:96:9F:E0:93:D0:18:E5:17:1F:0C:4D:85:39:A4:E0:DA:C3
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:10:e7:87:8c:7f:de:b3:5b:00:c6:9c:d6:fe:53:c1:91:af:
         27:68:89:93:d6:48:15:2f:72:f9:0b:ce:c2:81:b0:16:08:72:
         66:bb:02:62:a3:71:e6:24:58:25:b1:3c:08:aa:7c:90:76:01:
         83:c5:73:e2:d4:98:bb:21:49:95:b6:ed:9a:8a:89:52:7a:2b:
         04:28:ba:55:c6:7d:8d:57:25:eb:5b:cd:d3:20:96:4c:07:5e:
         0b:2a:0d:43:2d:49:35:d9:bb:3d:25:40:9f:9a:2d:28:ee:be:
         26:71:5d:67:07:2a:26:79:4f:50:64:eb:3b:27:73:dc:29:e9:
         35:2b:85:87:72:3a:ae:c0:43:ce:92:77:b3:df:bf:57:bf:7d:
         c5:6d:67:24:c5:94:ac:b2:af:e7:66:17:f3:f0:33:55:20:92:
         dd:52:24:e4:63:b4:ad:5d:c9:66:1d:6f:e0:a0:2c:6e:d4:e0:
         28:58:5f:f1:c2:18:d9:82:2c:e4:23:a3:c5:0c:a6:a4:23:58:
         27:6b:2d:16:39:eb:03:0e:c6:f6:91:53:db:80:68:e1:8f:0e:
         df:ee:a0:12:37:72:ac:95:2d:a9:09:6f:82:ca:81:e3:9e:66:
         e6:30:55:8e:88:b1:4d:db:64:22:70:a6:be:01:f2:2f:29:ab:
         b1:66:d7:cf
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUKwSonbS4H6htzPoDQBT691qA82AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA4WhcNMjYwNzAzMTIwNTA4
WjAzMTEwLwYDVQQDEyhGMTMyNzM5NjlGRTA5M0QwMThFNTE3MUYwQzREODUzOUE0
RTBEQUMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tHa1vdq87ye
xHI40dcOOzjAvhDooR7SOuGR73g+wQ3fkGEIcMbuKHTCf+Pz4Wj5CBvu2hTpXPek
LTx2+9cSnSC1//70sUYkbORIPyh9B+lLv7LiKCQInDQ8frsrysh4xxf2vhcqsls+
on0t7991x0VcSUL/yk7dO4dEfPeu6mNwLSn+yW0XksVeh4ZIkp45pJgJBmo82uuH
/WIKYgkM8otjxhTbHpLyO06EPcqcwaghwpVtO0SgaIJtztKgKZlnglFfj5tvFvwn
9rWNUJl0x6gDSBNV/ozUsKkCf0wXq8DOUuDBh2hce6hwBxCHDtTb50Nfk+Incb9m
F9ngJo/E4wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFPEyc5af4JPQGOUXHwxNhTmk
4NrDMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w
ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzEyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzNjMwMzQzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqNMA0GCSqGSIb3
DQEBCwUAA4IBAQCOEOeHjH/es1sAxpzW/lPBka8naImT1kgVL3L5C87CgbAWCHJm
uwJio3HmJFglsTwIqnyQdgGDxXPi1Ji7IUmVtu2aiolSeisEKLpVxn2NVyXrW83T
IJZMB14LKg1DLUk12bs9JUCfmi0o7r4mcV1nByomeU9QZOs7J3PcKek1K4WHcjqu
wEPOknez379Xv33FbWckxZSssq/nZhfz8DNVIJLdUiTkY7StXclmHW/goCxu1OAo
WF/xwhjZgizkI6PFDKakI1gnay0WOesDDsb2kVPbgGjhjw7f7qASN3KslS2pCW+C
yoHjnmbmMFWOiLFN22QicKa+AfIvKauxZtfP
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:11:28 2025 by rpki-client