Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa
File:                     3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          5l/oJlJQpvEPnahLa1sRgMHyYEWbCApblwqfV/Ca+sQ=
Subject key identifier:   01:32:77:A2:E8:32:8E:55:3C:3F:FC:26:B1:73:E0:09:58:D0:36:6F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       198F022077AEF663BAF07EB3554F483C145C9DF4
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:31 +0000
ROA not before:           Fri 01 Sep 2023 11:09:31 +0000
ROA not after:            Fri 30 Aug 2024 11:14:31 +0000
asID:                     397726
IP address blocks:        170.10.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8f:02:20:77:ae:f6:63:ba:f0:7e:b3:55:4f:48:3c:14:5c:9d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:31 2023 GMT
            Not After : Aug 30 11:14:31 2024 GMT
        Subject: CN=013277A2E8328E553C3FFC26B173E00958D0366F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:af:c2:01:dc:a3:87:c4:5d:b7:de:47:33:
                    9b:b3:89:9b:a8:bb:93:c6:af:d9:1f:ce:e8:c6:f9:
                    88:97:81:64:cb:a6:09:c5:fc:e3:29:13:df:ea:f7:
                    cf:75:24:06:27:ce:66:39:0d:48:7a:d8:eb:fd:8e:
                    19:8b:ef:56:1b:a3:5e:d4:4a:7e:16:ff:66:4a:c5:
                    88:5b:f4:e9:f7:62:e9:76:30:ae:9e:66:c6:6a:5e:
                    3e:29:e9:7f:7d:9d:02:21:90:3b:86:b3:15:2d:b1:
                    f6:94:e7:34:89:50:5a:3e:5c:c8:c5:9a:01:07:d4:
                    13:9b:6e:b6:e9:32:39:67:19:ae:cc:2e:60:23:b6:
                    b5:ec:23:cd:cc:5b:54:66:48:f1:f1:1b:58:bb:5b:
                    d8:44:ca:4c:8e:f5:10:70:1b:9e:69:47:cc:e9:bd:
                    e9:29:4d:25:28:63:c6:31:8f:bf:bf:de:c1:62:fa:
                    a8:92:c4:90:82:6a:89:a3:1f:5b:3b:ec:6b:90:92:
                    fb:b8:1a:e3:a8:06:af:4e:68:67:56:78:de:ad:7d:
                    40:8a:b1:8d:3e:07:fe:89:ee:13:2a:15:67:54:1d:
                    06:e1:6c:a4:41:4d:12:eb:77:8f:cc:5a:cd:8e:61:
                    9c:00:57:9f:8d:a4:24:4e:66:b7:5a:ca:37:d3:ca:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:32:77:A2:E8:32:8E:55:3C:3F:FC:26:B1:73:E0:09:58:D0:36:6F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135382e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:e8:0b:ce:93:83:d2:70:20:2f:21:ef:f5:89:d0:5a:ff:
         dd:d5:59:7b:fd:23:c9:c1:d7:ab:d3:44:e1:c2:22:19:5e:2f:
         47:a9:bf:c9:74:d8:47:5e:88:15:bc:5d:97:e4:f6:21:40:55:
         c5:7e:0e:9f:f5:37:e2:08:26:9d:58:d2:b5:18:7a:e1:85:cb:
         6a:f1:6c:8e:fa:ab:75:b9:a5:50:82:e9:c4:1e:1e:f8:0e:52:
         aa:8d:94:11:01:f9:d5:e8:be:45:3d:54:5f:1d:f6:77:5f:f4:
         4b:35:af:b6:3b:3d:7e:5d:13:61:d4:f0:6b:04:00:58:80:e3:
         82:4e:2b:47:68:7c:37:cd:8d:a2:69:0a:f3:ea:7e:b7:9c:a7:
         d6:34:62:26:8d:92:19:78:2d:c4:b7:2b:cd:c6:f1:61:82:3e:
         eb:ca:68:4c:f1:03:01:05:4e:98:86:1c:54:3f:fa:fd:c4:ca:
         de:d7:f4:31:30:05:fc:fd:30:36:c2:8c:1b:4e:67:2f:4b:d9:
         6b:b3:42:57:9f:28:e4:d7:11:05:9a:bd:60:2d:bf:36:66:b6:
         da:f6:b8:8a:00:c5:1a:b8:2f:ee:71:2e:88:0c:ab:bd:a5:4c:
         fc:45:c3:b1:f8:b1:9b:ba:13:42:97:a6:7d:c0:1e:d1:82:e7:
         2b:c2:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:27:11 2024 by rpki-client on console-ams.rpki-client.org