Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          Rl58j3IP4X03RdI35cMuYgK+dnDGr25PfC8v3ctZxbg=
Subject key identifier:   62:96:67:E8:1B:73:F1:38:B9:E3:82:94:AA:EA:36:BE:B7:88:E2:34
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       58660A9FB47BCAB69206F92034DA7CAC4081D29B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:04 +0000
ROA not before:           Fri 04 Jul 2025 12:00:04 +0000
ROA not after:            Fri 03 Jul 2026 12:05:04 +0000
asID:                     30031
IP address blocks:        2620:134:6002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:66:0a:9f:b4:7b:ca:b6:92:06:f9:20:34:da:7c:ac:40:81:d2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:04 2025 GMT
            Not After : Jul  3 12:05:04 2026 GMT
        Subject: CN=629667E81B73F138B9E38294AAEA36BEB788E234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:e1:58:49:77:ed:d8:ff:35:94:82:3d:85:
                    50:5b:4b:45:bd:e5:4b:7f:5a:2f:b1:3b:20:d6:df:
                    af:1d:13:9d:66:64:b0:fd:6c:01:13:21:37:fe:e9:
                    46:a1:84:58:74:8c:0b:22:92:be:6e:74:4e:27:7b:
                    ef:9e:e0:ec:be:50:b9:78:61:15:da:12:08:8a:47:
                    93:ff:30:2e:e4:f2:27:80:64:56:35:c3:8a:88:e0:
                    b3:35:bd:07:8a:e7:0f:9f:e0:b4:ec:20:79:94:62:
                    86:21:25:68:71:e3:ba:4c:49:c2:4e:82:18:d7:b0:
                    51:c8:f4:f9:b8:fe:27:ff:10:1a:4d:e2:87:45:df:
                    4f:ff:fa:03:75:d3:6a:06:98:4f:e3:44:de:e8:87:
                    58:29:2a:6c:f4:83:ea:ae:68:c0:24:1e:2e:c9:06:
                    2f:62:1f:97:66:17:55:de:20:ae:ec:ff:b0:a9:14:
                    0c:23:4c:d5:01:b6:48:29:5b:b0:33:18:57:9f:e1:
                    35:8e:98:e5:75:46:46:b0:9b:63:75:96:e2:fb:df:
                    a5:31:78:57:19:66:ea:a7:50:20:02:a4:ea:24:6b:
                    ee:a7:60:c9:c4:e3:85:15:38:1d:de:a6:ff:77:c9:
                    47:00:b7:4a:f0:35:f3:0e:ff:0a:6c:df:00:1f:59:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:96:67:E8:1B:73:F1:38:B9:E3:82:94:AA:EA:36:BE:B7:88:E2:34
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:47:44:ef:ec:db:e5:de:a0:db:c8:35:08:e4:58:c4:5d:f7:
         08:ea:7a:70:d0:00:4e:41:95:db:f0:ba:1f:49:1e:9f:bf:79:
         21:d0:72:10:89:55:4a:b5:cc:ea:65:c2:0b:60:a8:aa:92:d9:
         47:c2:94:1d:aa:17:c4:4a:aa:09:cc:f3:57:89:7e:65:73:6a:
         98:4b:cc:bb:a3:16:f1:1c:3d:59:de:41:bd:03:41:74:8d:8f:
         54:8e:09:88:90:2d:9c:50:f8:74:61:5a:c2:62:af:d1:08:1d:
         bd:2c:66:5b:37:c8:93:1b:e2:ae:f3:4d:6d:fc:ab:b4:98:75:
         12:2b:99:ac:3a:8a:9d:24:b6:e4:e5:05:7f:8f:dd:09:7d:25:
         f2:86:b3:ff:8b:2a:fd:a8:2f:37:d9:fe:24:ee:9f:86:56:aa:
         51:bc:ff:fa:a8:80:af:e4:c1:4a:b2:ed:65:be:65:be:f9:47:
         7e:51:b5:da:48:d3:f3:b0:c1:80:3f:65:fb:d6:81:02:65:fb:
         d4:51:37:fb:a3:92:d7:f1:e5:05:1b:1a:05:36:9f:12:a0:53:
         2c:9b:70:ed:42:f7:95:0c:79:17:d0:3d:00:12:35:8d:60:c9:
         de:48:00:3b:8d:14:9d:95:ac:86:88:69:e3:09:1d:46:33:89:
         e9:ad:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:01:34 2025 by rpki-client