Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa
File:                     3137302e31302e3134312e302f32342d3234203d3e203630343932.roa (raw, json)
Hash identifier:          knSIpS4S5KyMSzVBEnYXZHU3QyPIacgavqtdNiltPNs=
Subject key identifier:   C3:64:CF:6B:9B:04:D1:AB:9F:C0:66:31:19:86:18:FE:1F:96:76:82
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5C2BF32304B78E6C734F33C3D528843BA66B219D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa
Signing time:             Fri 02 Aug 2024 11:24:31 +0000
ROA not before:           Fri 02 Aug 2024 11:19:31 +0000
ROA not after:            Fri 01 Aug 2025 11:24:31 +0000
asID:                     60492
IP address blocks:        170.10.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2b:f3:23:04:b7:8e:6c:73:4f:33:c3:d5:28:84:3b:a6:6b:21:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:31 2024 GMT
            Not After : Aug  1 11:24:31 2025 GMT
        Subject: CN=C364CF6B9B04D1AB9FC06631198618FE1F967682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:b8:2f:65:68:21:e9:5e:48:18:a6:e4:2e:
                    ff:4c:af:69:3b:ae:60:9d:2e:a8:ec:3f:74:39:38:
                    0c:1c:15:7e:00:ed:9c:79:f8:d3:48:dd:8d:32:62:
                    f2:64:02:40:9c:46:46:42:0b:52:59:0b:fa:b6:3e:
                    c9:6c:8d:37:8c:69:67:43:d2:f3:5c:16:7e:81:f7:
                    8d:fb:f7:b2:35:d3:9a:c4:93:e4:6d:f4:af:c6:43:
                    71:36:04:9a:3b:f7:ef:df:59:61:da:d7:42:37:54:
                    f2:0b:63:8b:1c:3d:e5:d6:44:18:e6:99:14:4b:33:
                    ad:85:b6:99:20:82:c0:d4:22:e1:18:43:21:87:53:
                    d8:85:7f:f1:83:08:89:f2:25:ca:7f:32:56:b5:98:
                    f6:af:29:45:fb:44:ac:be:7d:c8:7a:35:7d:88:d7:
                    73:97:ac:49:68:6f:1c:57:b8:7b:5a:a4:0b:14:9c:
                    6a:5a:da:55:cf:f3:4f:de:de:0c:e4:de:0e:bf:6a:
                    c4:c7:78:ff:8b:eb:da:1c:90:cc:4c:e1:02:12:01:
                    c2:c7:97:2c:c7:5b:56:a0:98:b7:4a:c3:92:11:97:
                    a3:4b:a5:13:ad:89:7e:01:f0:5d:53:ff:b5:54:8a:
                    bd:1a:4f:45:af:7a:51:78:fa:44:a3:45:27:f8:67:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:64:CF:6B:9B:04:D1:AB:9F:C0:66:31:19:86:18:FE:1F:96:76:82
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134312e302f32342d3234203d3e203630343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:40:96:2d:d9:e7:15:0c:8f:13:ca:c6:70:93:64:77:81:6b:
         5f:7d:67:e9:4d:db:be:0a:59:20:2f:af:8a:93:c3:87:5b:68:
         c7:40:65:24:05:2d:68:06:28:c5:a5:3c:69:50:fc:23:26:c4:
         29:94:c6:c4:64:a7:40:f3:5f:97:75:97:80:a3:16:20:48:c5:
         05:f5:b5:6e:29:41:08:00:5e:e2:11:74:63:04:f8:1c:8b:91:
         84:c1:95:1e:2c:96:52:0e:eb:e8:e5:fe:c5:53:4b:99:01:86:
         e2:cd:96:87:2c:52:fd:56:87:f1:29:a4:40:de:84:3b:8d:be:
         0e:4d:cd:c0:8d:27:df:f9:91:f7:7c:0c:67:5c:85:8f:95:bb:
         d4:80:95:0b:fe:cc:2b:b7:15:4f:4f:a2:e2:18:c3:78:1c:7a:
         7a:78:a0:52:85:4b:7c:17:a7:3f:e3:bc:81:d0:6d:ad:09:29:
         5f:58:f2:77:84:dc:61:e5:5e:37:c8:04:cf:1f:13:97:5d:f5:
         de:0a:83:22:1e:46:1b:45:e2:c0:ae:08:e9:26:14:cd:8f:9f:
         3c:4a:a6:1c:f3:bb:42:75:73:bb:dc:8b:0f:00:04:02:57:8d:
         a2:3c:45:c6:42:63:c1:67:1c:bf:77:b3:84:1c:a2:1d:65:c5:
         27:4f:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:00 2024 by rpki-client on console-ams.rpki-client.org