Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa
File:                     323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa (raw, json)
Hash identifier:          Mvnuzl+XHpuBqKkSJ9h0oINmLGAGfmCEDfzbO7cW2IU=
Subject key identifier:   58:B1:14:D9:F4:D6:E5:38:65:59:2D:DD:6A:2E:38:A8:60:14:44:08
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5170A5B9DF528A8CB9971F1D2538CBFAD6C98D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:03 +0000
ROA not before:           Fri 04 Jul 2025 12:00:03 +0000
ROA not after:            Fri 03 Jul 2026 12:05:03 +0000
asID:                     397726
IP address blocks:        2620:134:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 12:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:70:a5:b9:df:52:8a:8c:b9:97:1f:1d:25:38:cb:fa:d6:c9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:03 2025 GMT
            Not After : Jul  3 12:05:03 2026 GMT
        Subject: CN=58B114D9F4D6E53865592DDD6A2E38A860144408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:24:2d:3b:75:cd:06:15:12:4a:7e:d5:c2:a2:
                    74:d3:09:49:c4:e5:f9:8d:33:44:cb:72:56:07:23:
                    05:de:f5:e4:49:10:5a:25:42:e6:01:46:0d:a0:39:
                    d3:1c:a5:dd:74:2c:4b:fe:95:4c:7b:fb:92:eb:4c:
                    87:5d:a3:d4:52:f8:04:06:ca:b0:4c:a5:1d:3b:f4:
                    ce:68:a9:b8:52:56:b5:c2:6b:a4:5f:ac:8f:5e:d4:
                    5f:8c:85:6f:8a:96:63:08:df:4f:77:35:83:1f:0f:
                    23:c3:87:d6:f5:cb:27:99:c9:a2:ab:89:54:cc:e4:
                    ac:6a:1d:69:e3:2a:10:f5:74:54:95:10:c1:fd:19:
                    89:a2:05:de:bb:e6:61:e5:db:2d:6e:13:5d:14:5a:
                    22:d1:2a:6b:7c:db:c9:af:e7:cc:94:d6:04:6c:2e:
                    62:26:35:51:91:5f:8d:7a:9c:eb:e2:61:6e:96:65:
                    1b:e8:0e:74:81:4a:91:44:69:41:73:5b:a6:ec:d1:
                    83:41:36:64:43:d5:19:5a:8a:06:ff:28:d7:ce:72:
                    33:59:32:19:2b:e2:86:92:3b:5a:ef:af:c5:dd:8c:
                    50:f6:da:6a:dd:d6:a1:0a:c3:fd:e8:35:13:19:bd:
                    84:40:eb:f9:d9:73:17:19:ac:c8:8d:30:1e:da:38:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B1:14:D9:F4:D6:E5:38:65:59:2D:DD:6A:2E:38:A8:60:14:44:08
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:ec:9b:8a:15:d8:59:50:6d:fc:18:a5:f3:6d:02:88:88:
         30:fc:c5:32:4a:5d:4b:e5:9f:0f:16:a1:8c:12:fd:85:66:4e:
         f4:b9:85:24:96:5a:6c:60:4f:6d:6a:48:54:ad:a0:34:0a:f1:
         85:5d:f0:4d:a9:ff:d3:b3:20:bd:ad:da:77:35:75:9b:3b:5c:
         a9:54:ef:7d:e0:da:69:e7:53:ac:99:2f:18:41:ba:17:30:ea:
         ea:2c:d4:fe:e4:55:43:51:d1:b9:58:76:0e:c8:e1:ef:15:cb:
         79:5a:dc:e7:d0:6c:bb:22:40:e2:30:a3:05:38:69:de:09:07:
         24:6c:a2:c3:24:86:c8:69:c3:4b:dc:04:1c:4e:8c:93:9b:9e:
         66:14:65:1f:52:4b:ef:40:24:98:32:d1:3e:d1:a0:04:4b:09:
         9f:1f:80:ba:ea:2d:73:7b:e4:b3:60:67:82:01:93:18:d7:42:
         e0:0f:fa:e2:31:bf:e7:67:09:eb:ad:64:63:a2:05:52:5b:0d:
         23:37:4b:3d:4d:ba:6b:eb:aa:78:c9:aa:e0:dc:a4:77:75:bd:
         4e:b4:03:27:a3:83:1e:a4:56:13:74:21:10:d6:f0:85:65:02:
         a1:b3:49:0f:b0:bf:ff:8a:f9:24:29:cf:31:fe:c7:30:ed:97:
         27:43:15:08
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgITUXClud9Sioy5lx8dJTjL+tbJjTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI3YzRkYmNhYmI5YTA2ZGU4MTY1YjQwYmM0NjgyYTg2OWU0
YzY5YWFmMTMyYTliMTM3ZjAeFw0yNTA3MDQxMjAwMDNaFw0yNjA3MDMxMjA1MDNa
MDMxMTAvBgNVBAMTKDU4QjExNEQ5RjRENkU1Mzg2NTU5MkRERDZBMkUzOEE4NjAx
NDQ0MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1JC07dc0GFRJK
ftXConTTCUnE5fmNM0TLclYHIwXe9eRJEFolQuYBRg2gOdMcpd10LEv+lUx7+5Lr
TIddo9RS+AQGyrBMpR079M5oqbhSVrXCa6RfrI9e1F+MhW+KlmMI3093NYMfDyPD
h9b1yyeZyaKriVTM5KxqHWnjKhD1dFSVEMH9GYmiBd675mHl2y1uE10UWiLRKmt8
28mv58yU1gRsLmImNVGRX416nOviYW6WZRvoDnSBSpFEaUFzW6bs0YNBNmRD1Rla
igb/KNfOcjNZMhkr4oaSO1rvr8XdjFD22mrd1qEKw/3oNRMZvYRA6/nZcxcZrMiN
MB7aOBMnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUWLEU2fTW5ThlWS3dai44qGAU
RAgwHwYDVR0jBBgwFoAU9n4CvsTeYeLrWVO13DNeVv/NznAwDgYDVR0PAQH/BAQD
AgeAMHIGA1UdHwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0
L3JlcG9zaXRvcnkvQTkxOTJBOTgwMDAwLzQvRjY3RTAyQkVDNERFNjFFMkVCNTk1
M0I1REMzMzVFNTZGRkNEQ0U3MC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx
ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzA4OTgyMTBkLTcwMDIt
NDNiNi1iMDViLWMyNzU1MGEyOWIzOS83YzRkYmNhYmI5YTA2ZGU4MTY1YjQwYmM0
NjgyYTg2OWU0YzY5YWFmMTMyYTliMTM3Zi5jZXIwgZYGCCsGAQUFBwELBIGJMIGG
MIGDBggrBgEFBQcwC4Z3cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjM2MzIzMDNhMzEzMzM0M2EzNjMwMzAzNDNh
M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzkzNzM3MzIzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYg
ATRgBDANBgkqhkiG9w0BAQsFAAOCAQEAfOTsm4oV2FlQbfwYpfNtAoiIMPzFMkpd
S+WfDxahjBL9hWZO9LmFJJZabGBPbWpIVK2gNArxhV3wTan/07Mgva3adzV1mztc
qVTvfeDaaedTrJkvGEG6FzDq6izU/uRVQ1HRuVh2Dsjh7xXLeVrc59BsuyJA4jCj
BThp3gkHJGyiwySGyGnDS9wEHE6Mk5ueZhRlH1JL70AkmDLRPtGgBEsJnx+Auuot
c3vks2BnggGTGNdC4A/64jG/52cJ661kY6IFUlsNIzdLPU26a+uqeMmq4Nykd3W9
TrQDJ6ODHqRWE3QhENbwhWUCobNJD7C//4r5JCnPMf7HMO2XJ0MVCA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:37:56 2025 by rpki-client