Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3135322e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          Pb9DJTzRRr8Bsp91YJLhlXKk7ag4tEgTjaCR8+Hy/ZA=
Subject key identifier:   9F:BF:E4:53:37:A4:6C:9E:38:75:F4:6F:E8:BC:82:4F:BB:E9:62:3F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       72D06D3DFA1E3B0F660ECD2C2F3830BA8049E5F1
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:05 +0000
ROA not before:           Fri 04 Jul 2025 12:00:05 +0000
ROA not after:            Fri 03 Jul 2026 12:05:05 +0000
asID:                     30031
IP address blocks:        170.10.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d0:6d:3d:fa:1e:3b:0f:66:0e:cd:2c:2f:38:30:ba:80:49:e5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:05 2025 GMT
            Not After : Jul  3 12:05:05 2026 GMT
        Subject: CN=9FBFE45337A46C9E3875F46FE8BC824FBBE9623F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:a4:2a:f8:27:05:42:04:e4:99:29:b3:af:
                    ba:36:27:da:e0:b2:97:1b:bb:0e:d7:22:24:5a:89:
                    8e:d6:cc:fb:73:af:a5:51:fc:71:5a:7d:06:bd:4c:
                    50:7d:13:c4:d8:1e:b9:45:82:77:12:f7:b9:eb:fb:
                    b0:38:88:36:fd:8a:a9:ce:10:46:24:1d:fd:2a:b1:
                    92:1d:0b:c4:0f:8c:a6:6f:bf:c8:fa:07:06:25:84:
                    fa:55:f9:0b:33:d5:6b:86:77:14:05:29:51:eb:ff:
                    4d:14:63:d7:a5:f9:19:ca:45:c1:bb:a4:8a:bc:6e:
                    fb:47:cb:63:36:29:09:9c:e5:50:75:cd:b1:fa:00:
                    7a:94:a0:92:7e:38:ed:23:fb:a9:49:63:05:ce:7f:
                    3c:b6:a7:4b:b4:6f:30:7c:f9:0a:80:c0:91:dd:8b:
                    18:57:32:18:92:8c:8b:3a:d4:52:af:e5:52:ec:a8:
                    10:ab:5b:2b:bb:9b:3b:3b:33:ff:fa:02:b0:c8:b1:
                    e5:ee:89:89:30:cd:a7:fb:e9:9b:41:e7:44:b1:67:
                    b6:49:0b:d8:38:2f:18:ad:7d:b2:07:f3:38:e0:cd:
                    92:42:cd:bb:42:57:a8:c4:e9:a0:52:08:f4:f6:7f:
                    c1:6b:19:26:85:75:e6:e2:8a:fd:a1:06:ca:70:52:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:E4:53:37:A4:6C:9E:38:75:F4:6F:E8:BC:82:4F:BB:E9:62:3F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135322e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d5:07:54:47:2a:42:0d:52:b1:97:a9:c6:26:a5:ec:d5:70:
         b7:df:8c:31:06:fd:72:d0:57:4c:d1:d5:f9:bc:5a:9c:45:95:
         d3:3a:06:80:bd:ea:f7:62:f1:33:78:45:73:f0:4b:ce:bb:c3:
         c7:c7:72:75:b7:8f:d9:5a:eb:33:fd:48:94:6d:d4:fd:1d:24:
         7f:37:17:40:50:c8:46:f5:80:8f:56:d7:68:7b:83:b5:c1:2e:
         84:7e:45:f3:fa:b0:92:0f:56:a8:00:00:d9:40:c8:99:92:48:
         71:ea:a9:7e:62:10:67:ee:18:99:47:86:cb:43:68:bc:48:d7:
         1c:cf:47:e4:a6:91:64:36:74:03:d2:e7:82:0f:8b:58:5c:0a:
         46:82:81:3c:40:8e:e4:ba:43:5b:b2:70:db:47:95:4a:03:4c:
         e4:53:79:26:0f:7e:cd:a6:c2:eb:6c:c8:a4:73:5b:58:50:1a:
         45:e3:7a:0c:a2:74:48:dc:66:98:ff:5f:a7:b0:5a:d1:8b:64:
         8b:14:67:32:81:32:b2:78:c1:6d:a4:24:78:b5:4d:91:f3:4a:
         fd:61:fe:3a:a4:e7:22:53:13:ea:f3:96:47:e1:8d:3f:b9:1e:
         12:75:b0:da:e8:03:87:26:de:28:f9:47:0c:9d:d2:53:ed:35:
         00:a7:90:12
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUctBtPfoeOw9mDs0sLzgwuoBJ5fEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA1WhcNMjYwNzAzMTIwNTA1
WjAzMTEwLwYDVQQDEyg5RkJGRTQ1MzM3QTQ2QzlFMzg3NUY0NkZFOEJDODI0RkJC
RTk2MjNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLKkKvgnBUIE
5Jkps6+6Nifa4LKXG7sO1yIkWomO1sz7c6+lUfxxWn0GvUxQfRPE2B65RYJ3Eve5
6/uwOIg2/YqpzhBGJB39KrGSHQvED4ymb7/I+gcGJYT6VfkLM9VrhncUBSlR6/9N
FGPXpfkZykXBu6SKvG77R8tjNikJnOVQdc2x+gB6lKCSfjjtI/upSWMFzn88tqdL
tG8wfPkKgMCR3YsYVzIYkoyLOtRSr+VS7KgQq1sru5s7OzP/+gKwyLHl7omJMM2n
++mbQedEsWe2SQvYOC8YrX2yB/M44M2SQs27QleoxOmgUgj09n/BaxkmhXXm4or9
oQbKcFIvKQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFJ+/5FM3pGyeOHX0b+i8gk+7
6WI/MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w
ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzIyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqYMA0GCSqGSIb3
DQEBCwUAA4IBAQAa1QdURypCDVKxl6nGJqXs1XC334wxBv1y0FdM0dX5vFqcRZXT
OgaAver3YvEzeEVz8EvOu8PHx3J1t4/ZWusz/UiUbdT9HSR/NxdAUMhG9YCPVtdo
e4O1wS6EfkXz+rCSD1aoAADZQMiZkkhx6ql+YhBn7hiZR4bLQ2i8SNccz0fkppFk
NnQD0ueCD4tYXApGgoE8QI7kukNbsnDbR5VKA0zkU3kmD37NpsLrbMikc1tYUBpF
43oMonRI3GaY/1+nsFrRi2SLFGcygTKyeMFtpCR4tU2R80r9Yf46pOciUxPq85ZH
4Y0/uR4SdbDa6AOHJt4o+UcMndJT7TUAp5AS
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:12:02 2025 by rpki-client