Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa
File:                     3137302e31302e3134362e302f32332d3233203d3e203333353338.roa (raw, json)
Hash identifier:          Ic4OYaCGs6PA/aSvMybuXa+llwAjMTGRG6ZM3yq+7MA=
Subject key identifier:   B5:54:CD:5C:34:F4:04:40:00:FF:DF:60:E5:BF:79:21:FD:CA:8E:12
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6D51E1CADDC23E6DAEAD12822893AAA748492784
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa
Signing time:             Fri 01 Sep 2023 11:14:29 +0000
ROA not before:           Fri 01 Sep 2023 11:09:29 +0000
ROA not after:            Fri 30 Aug 2024 11:14:29 +0000
asID:                     33538
IP address blocks:        170.10.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:51:e1:ca:dd:c2:3e:6d:ae:ad:12:82:28:93:aa:a7:48:49:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:29 2023 GMT
            Not After : Aug 30 11:14:29 2024 GMT
        Subject: CN=B554CD5C34F4044000FFDF60E5BF7921FDCA8E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:04:9e:2f:c1:61:d1:53:e3:a5:67:93:a5:
                    f0:70:a7:71:ea:7a:97:ac:df:fe:17:ba:2f:5e:5e:
                    fb:1b:9e:4c:5b:59:9d:75:52:9a:87:a3:7e:af:f4:
                    fd:0d:88:bc:9c:d9:2b:0a:d8:44:bc:59:2c:d6:8b:
                    f0:63:6c:14:75:db:b7:81:02:83:45:4d:b9:e0:d7:
                    c9:51:6a:cc:57:d8:94:c4:aa:30:be:e6:83:46:4e:
                    ab:dd:77:e9:ea:db:62:9a:19:a2:a3:38:25:7d:d6:
                    39:f7:12:05:5b:26:df:1f:26:2c:b1:35:1d:05:e1:
                    d6:93:5d:20:b3:32:eb:78:e4:f5:16:e9:2a:4f:53:
                    37:d8:81:fc:1a:b6:d2:db:12:bc:46:3c:92:91:4f:
                    68:f3:4a:f4:fa:16:12:b6:68:a7:ed:50:1c:db:aa:
                    c7:01:77:3e:21:a2:99:b7:0e:5c:87:8f:8c:8e:24:
                    33:63:cf:89:3f:bd:7b:12:03:75:17:ed:b0:bf:8f:
                    e1:fb:6a:38:4a:68:6b:1f:4f:7b:d1:7a:17:0f:59:
                    d1:96:b1:f0:9c:c2:33:7f:8c:44:df:f1:ba:98:1d:
                    35:72:a0:53:38:d8:b1:ba:bc:85:cb:00:43:2b:c0:
                    b6:8d:cf:30:ea:6b:54:e4:f3:a5:de:d1:19:ff:90:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:CD:5C:34:F4:04:40:00:FF:DF:60:E5:BF:79:21:FD:CA:8E:12
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:31:96:c4:da:73:d6:19:ae:6d:48:63:b3:cb:51:48:03:
         e2:1c:1e:99:8f:ad:c8:15:37:8c:8e:be:1b:7d:6f:23:27:7e:
         ef:da:52:6a:54:10:38:64:3a:9c:e5:14:ca:66:e2:05:6b:c9:
         24:57:07:21:cf:14:89:7f:f0:8c:45:17:ad:7e:7b:eb:c0:86:
         30:04:81:46:91:23:5a:ae:d9:63:f0:e8:a3:6c:6e:b6:4b:6d:
         e6:a6:5b:9f:3e:78:7f:2c:ce:ed:5a:49:58:4b:dd:48:73:6d:
         3c:55:24:aa:07:79:1f:94:71:55:df:ad:90:b5:cc:14:70:87:
         4e:47:67:ee:2c:3b:96:7e:94:54:0f:b5:5e:43:8f:c0:a9:69:
         4e:82:0d:27:8a:1b:23:cb:da:fe:ad:0f:14:7c:88:e1:93:d8:
         24:08:42:de:3c:e6:c8:94:2d:ab:3f:db:3e:13:5d:3d:13:bc:
         09:6b:59:ce:fd:6c:59:1a:fe:ec:96:84:aa:4b:2a:5a:da:5c:
         38:b3:5f:99:b4:7b:32:1c:bb:ce:3a:0c:a7:df:75:af:cc:bc:
         4b:19:27:04:4b:78:65:94:69:e4:73:dc:dd:bc:d1:aa:ec:f7:
         a8:52:4c:ad:bc:de:cb:de:7b:f4:7e:6d:47:70:53:45:8b:46:
         98:22:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:41:33 2024 by rpki-client on console-ams.rpki-client.org