Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135302e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3135302e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          ycJF23fwRYhOqHRGXDg6k5NUoJmY6c1N2EDIJ814Udw=
Subject key identifier:   12:72:87:EB:68:0B:67:F0:A6:F0:24:F0:43:10:72:EF:0D:8B:0C:45
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5336FCCC4C7A0BA5814F8C834C13CA7D043870A2
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135302e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 02 Aug 2024 11:24:32 +0000
ROA not before:           Fri 02 Aug 2024 11:19:32 +0000
ROA not after:            Fri 01 Aug 2025 11:24:32 +0000
asID:                     30031
IP address blocks:        170.10.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:36:fc:cc:4c:7a:0b:a5:81:4f:8c:83:4c:13:ca:7d:04:38:70:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:32 2024 GMT
            Not After : Aug  1 11:24:32 2025 GMT
        Subject: CN=127287EB680B67F0A6F024F0431072EF0D8B0C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:ed:bd:29:9a:33:74:e6:35:79:8c:38:d2:
                    aa:13:f8:be:20:9b:61:fb:2a:7f:38:ee:7d:cd:52:
                    8c:f9:27:cf:2f:66:7c:48:c2:f0:b9:72:7f:8e:cc:
                    1d:65:38:65:26:b8:d5:41:f8:34:c8:99:61:f5:80:
                    97:df:52:1e:d7:dd:e8:e7:fa:61:8b:25:7d:98:22:
                    cd:97:b1:24:5f:93:60:7c:78:70:d9:44:70:38:21:
                    e8:a7:cf:1b:14:f8:a8:13:d1:2d:dc:98:5c:c0:a7:
                    ce:f5:80:c4:73:85:14:bc:3c:cd:ca:67:da:ab:85:
                    1f:7b:e7:20:a0:a6:28:c2:ea:cb:2e:ed:23:7d:54:
                    08:9e:ee:cb:d7:5b:54:34:3a:6e:ac:40:0a:d6:8a:
                    2e:db:41:47:e5:83:e8:de:7e:e7:ec:1a:88:e2:86:
                    59:c9:a8:5e:70:53:5a:23:b6:10:55:00:b6:52:49:
                    9f:27:27:9c:cc:ab:a4:47:d9:ed:87:66:d5:bb:8b:
                    12:82:ae:8b:8e:89:e2:7f:09:05:50:21:aa:cb:97:
                    dd:98:92:5c:c9:ad:51:0f:20:ea:e2:3a:3c:5f:00:
                    60:cd:c0:ec:52:a3:20:4a:be:2f:b9:c4:aa:f4:5d:
                    c4:a9:f2:db:ea:24:04:69:57:f7:12:f1:87:4c:9a:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:72:87:EB:68:0B:67:F0:A6:F0:24:F0:43:10:72:EF:0D:8B:0C:45
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135302e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:92:1b:66:72:38:37:15:a4:02:b9:ec:4f:80:6a:56:00:2b:
         ae:02:c7:22:0e:8f:ac:73:d4:3f:04:fa:55:ae:77:7d:37:db:
         c9:bd:f8:09:5e:d2:32:8e:b4:c9:56:28:97:ac:e4:0f:5b:92:
         3c:d4:58:5a:33:72:cd:80:33:5b:8b:9c:da:c0:6e:fb:ca:3b:
         c9:5a:3c:4d:1c:a4:57:f8:72:3e:30:46:50:e7:47:3b:c1:96:
         09:29:77:18:0f:fa:a2:be:fa:d3:15:dc:d8:af:2f:29:cb:ea:
         02:3c:cf:33:bc:9f:2d:cd:4a:b0:24:25:08:92:42:7f:cb:b1:
         e9:87:20:d1:07:4a:02:62:04:72:e2:d4:6a:25:e5:99:e6:3e:
         2d:f3:f3:fa:f8:48:b0:5d:cd:34:bd:2b:97:82:4a:13:da:18:
         7c:3b:44:bd:19:fc:74:40:f2:a1:35:d2:c3:e4:36:9b:76:a8:
         20:e5:f4:6f:7f:1b:88:85:8e:21:d4:90:40:97:3c:9f:fd:2b:
         00:33:1e:4e:5d:e9:10:d0:e2:c5:3c:6f:32:73:f5:f7:cf:f9:
         14:f9:35:0a:ed:14:65:80:18:cf:09:f1:1d:b4:42:27:04:30:
         f2:e1:43:b5:f8:08:9b:6e:c7:23:e5:69:2d:16:aa:c3:b9:d2:
         20:59:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org