Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3135372e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          g2odV3arSUMCYzfJX6MhZP7CCaPzuraBVOpONTImk50=
Subject key identifier:   2E:2F:AF:7D:89:2B:AB:E5:A0:20:7B:44:D4:98:F3:0D:D2:EF:6B:47
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       556308456FCC0F5F8472B209FCDF98FA9A47A0DB
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa
Signing time:             Thu 14 Nov 2024 18:13:10 +0000
ROA not before:           Thu 14 Nov 2024 18:08:10 +0000
ROA not after:            Thu 13 Nov 2025 18:13:10 +0000
asID:                     30031
IP address blocks:        170.10.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:08:45:6f:cc:0f:5f:84:72:b2:09:fc:df:98:fa:9a:47:a0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Nov 14 18:08:10 2024 GMT
            Not After : Nov 13 18:13:10 2025 GMT
        Subject: CN=2E2FAF7D892BABE5A0207B44D498F30DD2EF6B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:45:fb:b9:c0:6c:7b:80:d6:be:8e:88:39:
                    9f:1e:25:6d:6b:ac:db:cb:be:6d:b4:65:a2:3f:75:
                    d0:17:3c:a8:ba:a6:43:77:f8:5c:98:1e:3c:b7:99:
                    18:a5:14:ed:9f:6c:a8:3c:fe:69:92:e6:f4:bf:83:
                    78:b3:21:72:aa:47:09:61:42:6c:bd:56:fd:64:6a:
                    67:38:92:ae:64:5d:74:5b:ad:04:0a:e1:37:3b:d0:
                    e3:fb:08:67:5b:a8:96:44:54:86:5b:6e:f6:6d:4a:
                    0d:f6:1f:82:cb:8d:2a:aa:57:11:de:6f:5f:67:8e:
                    d3:32:04:e1:dd:e3:3c:44:4d:85:c4:2f:b5:b9:31:
                    f2:7e:02:85:19:b4:7a:84:a6:6a:66:69:6c:1d:df:
                    45:c2:c2:79:c9:1d:2c:6a:84:0a:bb:6a:9a:0b:fe:
                    a6:c4:cc:f6:02:54:20:ea:14:1e:94:fb:a9:f3:f3:
                    cf:4a:7e:06:5c:c4:c3:40:a2:af:b8:6d:52:30:72:
                    a0:ae:0a:e1:0d:93:69:55:fd:84:5b:72:67:8c:cb:
                    27:f1:a7:fb:b5:de:f9:89:b3:10:e8:5e:ad:83:e3:
                    3a:75:4b:c8:70:d5:7b:62:a9:d6:55:f7:c0:64:68:
                    a5:da:9c:37:69:03:d8:9b:7f:5f:d4:21:34:d0:5a:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2F:AF:7D:89:2B:AB:E5:A0:20:7B:44:D4:98:F3:0D:D2:EF:6B:47
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:24:5d:3b:ec:27:61:fe:4e:61:0c:45:43:18:59:a5:19:
         e3:a7:b2:c4:63:21:d4:ab:8b:96:cd:2c:e9:c3:78:99:62:3d:
         c4:d7:90:53:4c:3a:15:ba:2c:ee:b8:33:24:91:69:db:bb:cf:
         e2:20:ae:44:4d:75:9f:88:5d:16:7e:70:99:73:09:36:78:c1:
         7a:bb:7b:09:ce:91:8b:ab:5a:b4:17:36:14:c9:6b:4f:f5:fb:
         b4:41:88:4a:a8:2f:33:57:b0:78:62:4d:a7:0c:1a:af:22:ca:
         31:d5:40:0d:64:be:18:4e:5d:c5:72:ed:e6:45:08:f0:29:fa:
         89:4f:a5:72:25:e1:49:e1:ed:6b:ba:0d:79:d1:89:a1:de:99:
         7e:25:6f:8f:6f:11:72:87:cd:e6:8f:b3:63:fe:01:cd:0f:84:
         d5:ed:5e:36:9e:aa:c7:99:ef:a8:ff:e5:6d:b5:50:ac:72:b9:
         40:a4:bb:c4:dd:4e:f6:74:61:2b:33:64:8c:54:50:3c:d7:8d:
         77:a5:8c:67:8b:f2:f6:68:16:49:8e:24:8d:5e:0e:3d:dd:99:
         5f:a1:6c:50:6b:1f:8a:9c:cc:eb:78:7d:0b:d7:c8:51:cd:ad:
         d2:09:c9:12:52:a3:3c:8e:74:ca:c0:27:a7:e4:31:16:71:30:
         e2:53:b8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org