Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa
File:                     3137302e31302e3134362e302f32332d3233203d3e203333353338.roa (raw, json)
Hash identifier:          cu+E9JSWPljzjA8hkkv9vQVtF8qIXiiJLtebUqTKqn4=
Subject key identifier:   0E:14:1A:81:2B:DB:31:99:11:49:1C:16:B4:B7:6B:32:40:64:21:B2
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       65B73A2F62FCCA0F65BD92944B6AAD563F669D33
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa
Signing time:             Fri 04 Jul 2025 12:05:08 +0000
ROA not before:           Fri 04 Jul 2025 12:00:08 +0000
ROA not after:            Fri 03 Jul 2026 12:05:08 +0000
asID:                     33538
IP address blocks:        170.10.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b7:3a:2f:62:fc:ca:0f:65:bd:92:94:4b:6a:ad:56:3f:66:9d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:08 2025 GMT
            Not After : Jul  3 12:05:08 2026 GMT
        Subject: CN=0E141A812BDB319911491C16B4B76B32406421B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:24:54:91:3e:e4:57:71:09:49:0f:1b:a0:
                    69:99:37:3c:aa:4f:4a:48:b3:80:c1:45:e7:85:fa:
                    e7:23:9d:6b:4f:bc:d3:fd:39:90:bd:49:9f:dc:93:
                    e4:b1:41:92:f7:3f:86:1a:c0:2d:67:25:64:c7:eb:
                    47:07:19:5a:ad:4f:e5:84:4c:03:7a:c3:4d:e8:37:
                    da:8b:94:92:44:38:8b:4e:26:2a:7c:cf:2a:77:25:
                    06:2a:81:53:10:1c:e7:4e:7d:89:7d:de:04:f8:a5:
                    36:6f:63:fd:26:3c:97:ba:2e:59:1a:f7:79:fc:e1:
                    fb:c6:66:e7:91:0c:ae:ae:fa:93:42:39:32:65:53:
                    27:ca:69:b6:0f:d4:e1:78:c4:0a:a4:59:c0:ef:9c:
                    5b:ed:0a:ec:d9:7f:a9:21:ab:cb:6e:5d:b0:4c:70:
                    49:be:e2:dd:99:11:61:e7:37:a5:03:a8:d3:f0:82:
                    c1:96:2f:ad:74:0b:be:c0:21:2f:4d:68:5f:b9:4d:
                    33:ba:a0:f8:2d:a1:96:08:80:c3:e5:17:e4:44:6f:
                    24:f1:19:fe:1b:84:04:51:c0:ad:f5:c9:5c:bf:78:
                    63:6b:f7:42:e5:fd:ff:0d:cf:f2:88:91:c5:8d:1a:
                    ed:90:aa:4f:3a:5b:ff:39:57:46:ac:60:94:19:48:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:14:1A:81:2B:DB:31:99:11:49:1C:16:B4:B7:6B:32:40:64:21:B2
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:d4:43:06:2d:c4:b1:e1:80:bc:b7:80:b4:b3:52:c6:0d:
         e6:50:9b:3c:23:ce:fb:dd:92:65:06:44:6b:d4:d4:fb:51:22:
         65:42:df:77:5b:67:19:8a:ad:c7:6f:f1:1e:7f:42:cc:05:d4:
         50:e9:65:39:54:cd:18:ab:ff:f6:50:98:f0:70:30:d7:23:33:
         57:21:bd:58:6d:f8:75:05:85:12:ba:38:7a:eb:3c:7e:ee:18:
         dd:a8:58:f0:db:ab:cd:b5:44:af:1e:7c:6a:06:6c:b6:70:9d:
         15:64:37:a2:78:9a:8d:1a:ad:9f:54:5b:e9:34:db:df:17:a2:
         cf:dd:5c:5e:f8:cd:3c:dd:94:8f:d7:5a:62:fb:2a:41:11:1c:
         02:47:a8:fa:18:57:34:dc:af:b5:4c:90:af:df:ee:98:c2:73:
         2d:9e:d7:f6:94:c6:54:54:76:b9:f8:18:02:39:da:5f:97:47:
         44:5d:4f:ab:82:1e:e6:54:26:93:02:b8:5a:7b:19:4c:bd:56:
         dd:5b:4a:ec:3c:15:d7:eb:90:56:f6:e3:9b:6c:b0:ca:93:e0:
         11:5a:cf:17:e6:73:bb:8f:82:ed:bf:60:a0:1c:24:e4:76:23:
         17:84:11:fd:7c:16:55:62:aa:ae:ac:55:6a:fd:d4:64:63:10:
         c1:49:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:07:03 2025 by rpki-client