Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135312e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3135312e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          IJsDlwfqmNWCbGXqfrwBtGQUISPJrDgM79k/ahqlup4=
Subject key identifier:   97:0A:8C:74:7D:BE:09:31:BF:6A:EC:6F:6B:0C:05:1B:6A:28:67:C0
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       20B2CC5DEED044D14B5658D661761BF6F51E6978
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135312e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 02 Aug 2024 11:24:29 +0000
ROA not before:           Fri 02 Aug 2024 11:19:29 +0000
ROA not after:            Fri 01 Aug 2025 11:24:29 +0000
asID:                     30031
IP address blocks:        170.10.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b2:cc:5d:ee:d0:44:d1:4b:56:58:d6:61:76:1b:f6:f5:1e:69:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:29 2024 GMT
            Not After : Aug  1 11:24:29 2025 GMT
        Subject: CN=970A8C747DBE0931BF6AEC6F6B0C051B6A2867C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:83:14:44:fd:27:2d:1c:ba:e2:6a:8d:e3:a6:
                    96:00:d3:92:72:77:d5:43:d5:5b:67:7b:b0:10:62:
                    7e:76:37:b7:e2:db:ea:8d:84:c7:84:13:bc:25:b9:
                    5c:f9:3a:99:2f:c9:0c:cc:bc:52:f8:9b:81:19:10:
                    17:eb:89:d4:4b:a7:42:02:ef:d1:ba:45:93:88:b4:
                    69:6e:26:08:3e:d5:09:37:90:c8:53:6e:a4:64:d8:
                    37:ee:97:11:61:29:69:06:19:d5:ae:1e:02:89:fc:
                    e5:78:8a:22:21:be:17:a6:07:7b:eb:cf:05:a9:7a:
                    91:8c:ae:ce:4f:99:d0:84:ed:41:48:25:a9:7e:7f:
                    75:68:29:9c:df:84:b7:8d:2a:d2:be:7c:e1:b2:4b:
                    fc:de:29:aa:f3:8e:57:65:6d:c9:fb:79:d9:27:cf:
                    ec:18:82:f4:30:97:ff:7f:bb:80:b5:6d:d7:ae:1d:
                    56:4d:73:10:df:6c:dd:09:ef:f9:4c:e8:31:87:6a:
                    6f:01:f8:51:e2:ed:e3:7e:64:4d:f0:b9:d9:b1:e0:
                    98:91:c1:48:6b:5d:81:e0:9e:10:a9:49:96:f5:44:
                    9a:47:4a:7c:3b:22:03:ce:33:7e:a8:0a:ff:fc:b5:
                    b3:f8:2c:52:5a:51:c0:4a:64:8a:6c:1f:09:65:a4:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0A:8C:74:7D:BE:09:31:BF:6A:EC:6F:6B:0C:05:1B:6A:28:67:C0
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135312e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:65:ec:1f:1f:05:fe:ea:86:e8:5b:cb:72:1b:f3:d2:3b:
         d8:53:93:3f:2c:f0:32:b4:1b:b1:ca:4d:85:ec:3a:68:29:54:
         d5:bd:5f:c0:87:2d:c2:e2:87:12:85:0c:b5:8c:53:38:c0:55:
         3d:3e:d2:90:a9:6d:10:08:48:d1:8d:f6:17:c7:68:98:6d:b0:
         35:68:d1:a2:23:b3:db:0b:9f:a0:2f:b4:a5:42:46:09:f3:aa:
         1a:44:0e:f3:75:95:44:69:fe:a2:4a:02:4a:5c:bd:0a:e4:5c:
         8a:f8:65:ef:88:82:ea:b4:9c:44:dd:5e:68:65:eb:40:1f:d5:
         3b:5f:b7:29:28:43:d3:b5:7e:ff:b2:a9:6b:07:ce:c6:e5:62:
         e6:1f:34:5c:74:24:00:11:10:57:07:d4:bf:8b:61:8f:bb:48:
         96:02:b4:89:66:4d:0a:63:f2:92:f7:6b:35:e6:a4:b5:82:f6:
         ce:8a:af:28:b3:b2:93:37:26:de:4e:a5:6b:f2:be:47:e9:4d:
         e3:75:34:a6:4a:e6:07:b6:3e:e7:9d:46:d6:62:c7:91:31:99:
         3a:24:70:19:11:32:13:78:25:db:38:fc:c6:b6:a6:02:0b:29:
         af:c1:dd:82:75:c0:58:45:9e:af:60:ca:bc:bc:d4:7f:74:95:
         6d:e3:43:5c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUILLMXe7QRNFLVljWYXYb9vUeaXgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI5WhcNMjUwODAxMTEyNDI5
WjAzMTEwLwYDVQQDEyg5NzBBOEM3NDdEQkUwOTMxQkY2QUVDNkY2QjBDMDUxQjZB
Mjg2N0MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oMURP0nLRy6
4mqN46aWANOScnfVQ9VbZ3uwEGJ+dje34tvqjYTHhBO8Jblc+TqZL8kMzLxS+JuB
GRAX64nUS6dCAu/RukWTiLRpbiYIPtUJN5DIU26kZNg37pcRYSlpBhnVrh4Cifzl
eIoiIb4Xpgd7688FqXqRjK7OT5nQhO1BSCWpfn91aCmc34S3jSrSvnzhskv83imq
845XZW3J+3nZJ8/sGIL0MJf/f7uAtW3Xrh1WTXMQ32zdCe/5TOgxh2pvAfhR4u3j
fmRN8LnZseCYkcFIa12B4J4QqUmW9USaR0p8OyIDzjN+qAr//LWz+CxSWlHASmSK
bB8JZaR8dQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFJcKjHR9vgkxv2rsb2sMBRtq
KGfAMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w
ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzEyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqXMA0GCSqGSIb3
DQEBCwUAA4IBAQAz2WXsHx8F/uqG6FvLchvz0jvYU5M/LPAytBuxyk2F7DpoKVTV
vV/Ahy3C4ocShQy1jFM4wFU9PtKQqW0QCEjRjfYXx2iYbbA1aNGiI7PbC5+gL7Sl
QkYJ86oaRA7zdZVEaf6iSgJKXL0K5FyK+GXviILqtJxE3V5oZetAH9U7X7cpKEPT
tX7/sqlrB87G5WLmHzRcdCQAERBXB9S/i2GPu0iWArSJZk0KY/KS92s15qS1gvbO
iq8os7KTNybeTqVr8r5H6U3jdTSmSuYHtj7nnUbWYseRMZk6JHAZETITeCXbOPzG
tqYCCymvwd2CdcBYRZ6vYMq8vNR/dJVt40Nc
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org