Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa
File:                     3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          oPB4AGUagjHd64aeUUZPA9nStt9ImHzVbKGex8AtSwM=
Subject key identifier:   4B:73:75:D2:E6:2D:ED:D5:F8:45:6E:6B:A9:CB:8B:01:B9:78:66:07
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7C3DED75EB8EB413AB1187E36004F168963963C0
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa
Signing time:             Fri 02 Aug 2024 11:24:27 +0000
ROA not before:           Fri 02 Aug 2024 11:19:27 +0000
ROA not after:            Fri 01 Aug 2025 11:24:27 +0000
asID:                     396982
IP address blocks:        170.10.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 14:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3d:ed:75:eb:8e:b4:13:ab:11:87:e3:60:04:f1:68:96:39:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:27 2024 GMT
            Not After : Aug  1 11:24:27 2025 GMT
        Subject: CN=4B7375D2E62DEDD5F8456E6BA9CB8B01B9786607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:6b:56:74:c7:07:24:f8:b4:ff:16:e1:d4:
                    16:d0:3c:a0:1c:54:8b:ab:33:dc:4d:33:f1:b2:cd:
                    d0:7d:75:e1:e8:ed:2c:22:eb:82:9c:9f:09:38:c0:
                    78:f9:8c:59:08:d2:8b:c5:1e:c0:b5:f2:22:66:28:
                    bc:fe:1f:d3:96:3f:99:1a:b3:06:8f:77:34:4f:3c:
                    8b:cf:2d:74:bd:74:59:87:69:ec:5c:17:51:5d:34:
                    e2:d4:7d:4f:d2:40:c6:ac:e2:8d:f2:94:53:74:c1:
                    89:a4:aa:2e:59:77:13:37:9c:38:1a:24:e0:f6:3a:
                    6f:ee:9a:ae:b6:dc:07:0c:dc:ca:8a:27:d9:f3:35:
                    8f:94:f7:5a:80:63:32:71:07:3f:9b:fa:2c:13:69:
                    7e:62:3d:b5:fa:f9:88:e9:80:2e:b5:6f:c5:09:52:
                    4c:10:eb:c1:7c:e2:9b:d9:5a:da:d8:d6:6d:c4:1b:
                    88:4b:0d:65:9a:22:16:aa:af:1d:5f:99:a3:c1:c5:
                    f2:9c:1c:24:e4:7f:ea:c3:f0:00:cf:18:cc:77:7f:
                    e2:98:2f:85:d4:d2:95:86:f9:a5:6e:76:c8:8c:7e:
                    63:54:54:97:7b:bb:0c:db:a9:c3:be:25:7b:f6:51:
                    2e:ed:ba:7c:a1:6a:f5:b9:92:96:08:2b:21:bd:f3:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:73:75:D2:E6:2D:ED:D5:F8:45:6E:6B:A9:CB:8B:01:B9:78:66:07
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:68:b3:83:d1:30:69:4f:ab:9e:ee:ee:a5:19:a7:3d:42:8b:
         6c:10:2d:8d:a6:3a:e6:8a:56:89:cd:76:2a:0a:d5:e6:6b:ac:
         5b:10:0b:de:c7:a8:a5:66:c2:46:6d:78:2c:aa:83:ab:43:b1:
         ad:14:34:84:9a:fa:06:7d:b9:d2:fb:bc:50:a8:43:e0:f9:20:
         35:cd:88:49:31:29:8b:48:6f:4f:7e:ca:c8:9b:b7:66:08:15:
         39:1b:b7:b6:f6:75:a3:f5:bf:14:1f:15:03:48:8a:af:a8:97:
         16:b5:9a:1a:ba:09:0c:cb:ca:9e:9e:aa:25:da:62:ce:27:58:
         2a:65:8d:42:f6:da:f4:bd:05:07:75:38:22:4d:25:c1:b0:55:
         30:72:65:5f:dc:de:ae:14:7d:60:d2:4d:35:c2:8c:d2:a1:b2:
         35:fb:2f:8e:1c:c2:60:0e:13:62:f5:99:d8:4a:e7:8f:11:fb:
         5e:3a:b9:da:18:16:b4:b9:85:0d:58:11:24:16:3f:5a:6d:fd:
         e9:9f:37:ad:8b:9d:f1:8c:7f:2c:76:bf:b3:9b:bc:f7:b0:b6:
         85:3f:e3:1b:18:8d:b5:7b:ad:f0:5f:c8:60:24:76:e6:bd:65:
         dc:8e:f1:a4:44:c5:a8:b8:d4:9c:30:1e:56:ce:28:bc:52:1d:
         cc:96:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:29:05 2025 by rpki-client