Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          yHoDToGnIApvwomY13N0xVE/n5N8FI4DmwPu8bPZEMQ=
Subject key identifier:   73:D9:C7:CC:78:C0:5D:4F:C9:AD:D0:22:BB:E9:C2:57:2A:AA:B7:D3
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2EEB2C0DDBAFEE42B76BF8ABB24C9772E62E290B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:10 +0000
ROA not before:           Fri 04 Jul 2025 12:00:10 +0000
ROA not after:            Fri 03 Jul 2026 12:05:10 +0000
asID:                     30031
IP address blocks:        216.145.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:eb:2c:0d:db:af:ee:42:b7:6b:f8:ab:b2:4c:97:72:e6:2e:29:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:10 2025 GMT
            Not After : Jul  3 12:05:10 2026 GMT
        Subject: CN=73D9C7CC78C05D4FC9ADD022BBE9C2572AAAB7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:37:a3:ec:ba:2f:9f:33:b9:0e:5f:1e:62:65:
                    a9:79:89:dd:73:ba:b6:46:57:ac:87:96:99:d1:51:
                    d0:c1:32:a9:14:22:78:00:4e:24:7f:73:7b:11:be:
                    45:fd:4e:c2:d1:46:23:1f:5a:8b:32:75:00:bd:c8:
                    5b:3c:d9:95:6e:a0:7a:de:35:ad:a0:d1:63:78:03:
                    2c:c4:2d:d9:3b:ce:2f:6e:80:ed:a7:e4:e5:86:a9:
                    99:1b:c8:ea:4b:66:66:a3:53:d5:0b:a2:43:a8:78:
                    7b:ec:eb:31:dc:76:98:13:69:98:3b:e0:c2:d1:aa:
                    59:eb:66:53:68:a8:03:1d:36:c4:0e:0b:5d:1b:25:
                    d0:38:15:79:bd:0d:0d:38:b5:bb:66:b5:dc:68:e1:
                    ce:40:61:4a:f2:76:94:0f:c9:a6:9c:38:49:e2:a3:
                    3d:97:7e:fd:90:39:58:2c:4d:30:c5:4b:28:cf:9c:
                    ca:08:79:a2:5d:8c:ae:17:cd:c1:3d:bd:5a:ee:ce:
                    83:3b:bf:c3:1b:09:44:9c:a1:90:df:2d:1a:d1:cb:
                    77:58:c9:0b:bf:12:66:f4:19:07:b3:4d:d5:f5:03:
                    ae:83:84:12:e7:94:d0:c5:fc:bd:b1:2d:c9:5a:38:
                    43:f7:d6:4a:7c:a8:58:00:3e:17:78:1b:ce:62:70:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D9:C7:CC:78:C0:5D:4F:C9:AD:D0:22:BB:E9:C2:57:2A:AA:B7:D3
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:24:67:37:6e:1e:54:a0:75:b8:91:cc:5f:55:a4:af:3e:
         75:9a:ff:78:3e:e7:65:b7:05:3b:f2:01:c2:e2:2b:b6:4c:2a:
         81:87:c2:7d:6d:d3:17:c2:d0:75:09:34:5d:78:85:fb:fb:ec:
         0d:18:85:a6:d5:6c:83:db:26:9b:5d:2e:fb:dc:ba:a7:8b:28:
         b9:39:98:34:c4:df:7a:6e:8b:9e:b7:34:aa:50:f5:87:34:5b:
         07:2e:f5:d3:b7:ff:ea:0a:1c:92:f4:71:09:92:9e:1a:22:4e:
         1d:55:70:57:d0:48:c1:2a:8d:83:aa:f2:64:1f:30:9a:07:90:
         a3:c2:71:de:bf:17:44:cc:51:85:49:55:f0:cb:39:9c:fe:f9:
         7b:f9:a7:9c:cf:5b:b7:77:57:c8:0b:91:30:e4:92:09:50:19:
         b9:87:75:d6:25:d9:c9:ab:9b:77:da:bc:41:35:0d:a7:d9:5e:
         79:76:84:80:7f:98:74:f9:69:30:12:a2:88:11:92:be:94:fd:
         f4:f8:98:f5:fc:d5:96:34:06:b6:04:16:94:b4:ef:20:be:ad:
         39:24:91:99:ca:aa:42:73:0d:ef:36:a6:81:39:24:fd:3f:e1:
         cf:c3:3b:71:f4:06:01:9f:e9:6e:ff:30:17:2b:72:c4:8e:58:
         74:69:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:15:28 2025 by rpki-client