Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa
File:                     3137302e31302e3134342e302f32332d3233203d3e203333353338.roa (raw, json)
Hash identifier:          Cqw2WRTBhcBw4DjF5HL0mKDC7h5iRYReK5COfYXXgTI=
Subject key identifier:   D1:BC:5A:F1:06:BE:A4:18:75:49:96:EB:4C:9D:13:3D:E5:E5:D7:D0
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       18EAAA5F25226B4E0B1771DA0713B68A1758FD23
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa
Signing time:             Fri 04 Jul 2025 12:05:08 +0000
ROA not before:           Fri 04 Jul 2025 12:00:08 +0000
ROA not after:            Fri 03 Jul 2026 12:05:08 +0000
asID:                     33538
IP address blocks:        170.10.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 12:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ea:aa:5f:25:22:6b:4e:0b:17:71:da:07:13:b6:8a:17:58:fd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:08 2025 GMT
            Not After : Jul  3 12:05:08 2026 GMT
        Subject: CN=D1BC5AF106BEA418754996EB4C9D133DE5E5D7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:a4:32:db:f6:be:af:9c:99:83:84:43:8c:
                    c3:5f:9a:45:32:42:7e:d2:52:77:93:73:fa:8b:2b:
                    86:64:eb:6a:9d:17:74:f5:d0:b0:a8:19:65:fa:2e:
                    44:a0:5d:09:63:62:48:5a:28:eb:a3:69:2c:32:7a:
                    ba:30:f3:04:b6:5d:32:8d:45:88:13:6d:d9:83:d5:
                    65:e6:e7:08:94:55:f7:e4:b0:d7:46:de:fe:d5:42:
                    36:2d:79:98:06:40:39:6a:41:d9:2c:be:1f:f3:c9:
                    a8:ac:72:f6:10:56:06:f0:20:13:01:3e:58:07:56:
                    22:2c:af:ab:c1:bf:1c:bf:39:27:81:84:db:4a:ee:
                    9a:d7:cc:fe:e6:98:a3:39:1b:56:e8:6d:76:f8:6a:
                    fe:df:9d:17:c1:9a:60:ed:c8:bf:75:26:16:dc:13:
                    92:04:c4:61:4f:d6:05:45:c7:74:31:c9:43:33:b3:
                    57:6a:a5:b5:ce:5e:79:89:33:ef:4a:51:81:65:b1:
                    9d:ed:67:6d:87:b2:79:ad:4d:e6:5c:bf:a2:2c:25:
                    41:1e:f4:a8:97:b0:93:07:b4:07:34:ea:5a:18:a5:
                    f2:3a:02:db:0c:db:1c:93:17:31:f2:2e:0a:cc:9c:
                    97:26:58:eb:f6:8f:6e:c4:34:8d:bc:f9:f5:ce:e4:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BC:5A:F1:06:BE:A4:18:75:49:96:EB:4C:9D:13:3D:E5:E5:D7:D0
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134342e302f32332d3233203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:0a:35:d5:19:56:56:c6:3f:6f:70:29:28:dc:4b:61:83:3f:
         d6:ff:eb:b0:75:3d:59:62:98:2f:9e:8b:4f:93:3a:df:a3:d1:
         b7:76:76:1c:e2:ce:87:e9:e8:1b:8b:8f:89:53:72:36:87:7e:
         7b:3e:7c:e3:7a:29:f0:b2:40:7f:44:e8:8f:d8:5e:e0:cb:9c:
         ec:80:af:eb:8a:24:db:27:c1:9e:4e:a5:55:7a:97:61:40:7f:
         9d:64:f8:73:7c:43:71:12:d4:43:92:c6:8e:35:28:9f:fa:b7:
         e0:8c:f0:3f:24:5c:bc:8f:7e:4f:ac:57:9a:45:ae:37:64:fc:
         68:d5:23:70:66:df:8d:76:8a:80:80:a6:6b:92:a5:bb:aa:8a:
         d8:60:55:94:6f:b3:2a:f7:74:f4:70:4c:eb:45:0f:59:b9:21:
         65:40:fb:94:4b:98:00:40:c5:45:83:47:5a:66:b5:c7:a8:e9:
         64:25:b2:6d:30:26:d4:7e:6d:7c:b1:59:78:31:df:67:ad:ac:
         3b:c0:50:e9:5c:2a:26:37:4d:bf:78:eb:ea:b4:c5:c0:67:9d:
         58:78:5d:05:db:b5:ce:e9:ee:1d:1f:c0:e8:90:aa:ea:11:70:
         a8:de:55:16:95:63:ab:e0:6c:54:11:91:f4:a7:7b:19:e0:c9:
         c7:af:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:35:39 2025 by rpki-client