Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          QD62aTyvDMqKQkJmlUNfqX45jFZ31mX5ETrhCm++uQE=
Subject key identifier:   57:27:31:C3:D9:E5:3B:B7:84:F8:C3:FF:FE:E5:F3:45:19:92:9D:E2
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5BA09D2C123A239D61C8AE7896E98377150E4437
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:04 +0000
ROA not before:           Fri 04 Jul 2025 12:00:04 +0000
ROA not after:            Fri 03 Jul 2026 12:05:04 +0000
asID:                     397726
IP address blocks:        216.145.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a0:9d:2c:12:3a:23:9d:61:c8:ae:78:96:e9:83:77:15:0e:44:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:04 2025 GMT
            Not After : Jul  3 12:05:04 2026 GMT
        Subject: CN=572731C3D9E53BB784F8C3FFFEE5F34519929DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:78:74:ad:0a:8a:9e:f8:e1:df:86:a2:d6:
                    6c:8a:0b:92:88:db:1a:56:5e:6d:fa:b2:2e:84:a5:
                    0d:f5:53:f9:86:10:d6:62:1f:0d:2e:dd:73:51:60:
                    05:57:f5:1a:c7:73:38:95:ea:e8:89:81:0e:d2:2e:
                    e5:b1:74:bc:a8:bb:93:f4:71:d2:b2:ea:88:55:f5:
                    5e:01:ad:3a:43:ce:88:38:18:14:9d:fd:42:2e:02:
                    3c:41:b8:56:74:4f:b2:c4:df:fb:ff:97:ed:ee:06:
                    ad:9f:58:1b:60:d1:53:a5:9c:e0:4c:87:f8:61:0a:
                    23:6a:e5:19:90:92:43:f0:97:e2:d0:fd:3b:78:d0:
                    8b:3b:b6:6a:40:02:2e:de:8e:36:0f:a5:e3:bc:86:
                    7e:60:47:d7:ea:fd:2f:0b:3d:3a:6f:ec:58:93:8b:
                    d8:19:94:6f:92:8d:23:e3:42:a6:45:34:c1:18:97:
                    e3:14:64:15:79:19:29:3d:1b:9c:8a:10:cc:10:c0:
                    c3:5a:59:61:95:94:c0:ac:26:0e:bf:6c:1e:a5:35:
                    6d:b7:b3:75:c5:c6:15:76:07:78:e3:de:a5:63:2e:
                    21:0b:41:2b:69:bf:85:85:8a:e3:68:b9:64:69:37:
                    7e:4a:7f:9a:55:d5:ea:07:af:d5:50:ea:58:a9:00:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:31:C3:D9:E5:3B:B7:84:F8:C3:FF:FE:E5:F3:45:19:92:9D:E2
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:bb:85:f0:e0:a3:2e:40:67:ce:0b:77:87:0d:67:be:3f:
         5c:a9:49:3e:37:a8:12:1b:ad:6a:ca:36:6d:95:77:b9:65:dc:
         45:79:64:e2:fe:09:d4:77:76:64:6a:9a:ba:69:fd:b9:6d:77:
         de:d3:2a:7e:81:3c:64:8c:72:51:d9:2b:d6:de:8b:1b:29:12:
         b9:71:86:1e:bf:ee:f4:1e:9c:b2:f7:ad:59:ef:22:51:bb:58:
         f9:a5:fe:f8:84:42:be:a1:f2:22:bb:be:90:22:3c:16:88:40:
         70:3a:e2:78:58:04:85:9f:9c:3f:15:04:97:a2:69:66:61:5e:
         9b:6a:d1:cd:d8:d0:c1:1d:7c:9b:fc:8f:df:67:fe:c4:7b:8e:
         df:f5:3d:c8:32:3b:a0:d2:70:f1:8a:af:30:43:e5:e1:3b:79:
         79:1d:1f:7d:13:c7:ed:6d:15:84:a3:e3:32:9b:10:66:df:f1:
         f4:32:b6:5f:a3:c5:7d:c5:a6:87:e0:14:d8:0c:54:69:8f:15:
         39:29:d1:8d:ca:ed:07:b4:ca:64:c6:ee:a6:c3:3f:7a:bf:92:
         4f:01:b5:32:d9:64:04:c3:45:d2:05:04:91:16:c7:27:f6:20:
         f9:9b:f9:5b:7d:d5:a0:db:83:6b:28:0b:48:e5:cf:29:70:2e:
         93:9b:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:17:38 2025 by rpki-client