Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          phBs2+VYAcZKaS/dtw6es9RB6csQvGUifLboDaXpmcI=
Subject key identifier:   39:5D:8D:19:A7:C4:BE:AB:A4:F0:F0:E8:2B:FB:DF:C8:2C:A4:3A:9F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       15A92617B9A3AB22DCA78765F3D0B2F20390D236
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:29 +0000
ROA not before:           Fri 02 Aug 2024 11:19:29 +0000
ROA not after:            Fri 01 Aug 2025 11:24:29 +0000
asID:                     397726
IP address blocks:        216.145.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a9:26:17:b9:a3:ab:22:dc:a7:87:65:f3:d0:b2:f2:03:90:d2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:29 2024 GMT
            Not After : Aug  1 11:24:29 2025 GMT
        Subject: CN=395D8D19A7C4BEABA4F0F0E82BFBDFC82CA43A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:5e:7f:97:8e:70:fe:db:cd:09:96:fb:05:
                    39:11:46:af:43:17:5d:43:33:96:bc:84:d4:b2:3b:
                    84:bf:1d:b4:b7:de:7d:fa:65:2a:8f:32:a2:5b:1c:
                    1f:22:bd:ff:cb:d9:7a:f9:0c:49:e9:6f:dd:95:d5:
                    fb:5e:eb:7a:d1:8f:73:8e:db:c5:d4:67:ed:75:a5:
                    74:13:ab:37:f9:7b:59:8b:6f:0a:0e:41:75:1a:47:
                    56:1d:5c:8c:6f:11:6a:29:56:b5:86:a3:b3:2f:69:
                    06:1c:9a:72:c1:c5:7e:16:73:b2:88:ef:2f:61:a4:
                    c6:cd:09:67:ae:03:8c:15:95:1b:4f:30:86:1d:39:
                    53:f2:29:5b:ce:5e:d4:72:45:92:fd:c8:8d:0e:cf:
                    8d:49:b8:86:8c:41:a0:90:df:89:fa:58:85:a1:06:
                    1e:28:26:4f:20:06:20:45:b0:5c:2d:08:e2:75:fb:
                    f4:78:38:ce:75:61:c4:36:fc:f9:37:9d:c4:ef:b5:
                    05:73:eb:ff:cc:eb:bc:51:d7:db:d6:fc:da:19:08:
                    80:41:36:89:24:28:47:fc:70:b5:ea:b9:78:f0:27:
                    8f:1f:c1:bd:9b:e4:58:09:68:25:66:38:46:ab:0d:
                    08:89:08:b7:b5:77:dd:16:a8:7c:11:ad:4f:8d:dc:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:8D:19:A7:C4:BE:AB:A4:F0:F0:E8:2B:FB:DF:C8:2C:A4:3A:9F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:36:9a:c3:9b:85:f0:68:d1:32:2d:27:81:64:a3:b0:28:61:
         95:6c:16:fa:a9:b4:a4:bc:cc:6a:1c:65:eb:5e:08:a9:6f:63:
         9c:5f:d9:06:e5:7c:19:d1:49:b6:f1:15:04:2a:dd:91:b2:66:
         a4:04:94:a8:cf:0e:98:ce:60:e1:f0:a3:ca:dc:e1:4f:05:b1:
         2e:6e:ec:1b:bc:bf:88:43:8d:40:66:83:d8:c5:28:89:49:be:
         a9:1f:e0:8d:c9:ef:49:e4:a8:8f:84:2e:01:89:b7:ef:54:63:
         5d:b9:35:9d:cb:6a:54:a0:3b:ca:75:2e:8f:ea:ac:0a:6f:31:
         77:60:96:4c:b3:4f:b6:30:47:1e:fa:e7:70:70:3a:c6:a6:49:
         b4:4a:fe:c1:03:4e:74:27:f7:c0:07:4e:98:7f:35:3e:00:19:
         8b:5e:70:67:45:44:88:16:b5:e1:f3:90:33:36:1d:2e:d5:d1:
         39:3c:3f:e8:e6:cc:d6:c7:80:f2:b5:bd:4f:3b:08:a4:8a:4d:
         44:2e:ef:d3:d6:ea:b7:30:8f:c5:26:b5:ac:61:06:b3:c5:53:
         e8:d3:58:df:33:ae:4e:2e:be:4a:54:02:07:94:39:d9:f0:29:
         57:6a:9a:b9:84:71:8e:02:e7:37:e2:79:26:93:ef:d8:f7:b5:
         d8:7f:89:b3
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUFakmF7mjqyLcp4dl89Cy8gOQ0jYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI5WhcNMjUwODAxMTEyNDI5
WjAzMTEwLwYDVQQDEygzOTVEOEQxOUE3QzRCRUFCQTRGMEYwRTgyQkZCREZDODJD
QTQzQTlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI1ef5eOcP7b
zQmW+wU5EUavQxddQzOWvITUsjuEvx20t959+mUqjzKiWxwfIr3/y9l6+QxJ6W/d
ldX7Xut60Y9zjtvF1GftdaV0E6s3+XtZi28KDkF1GkdWHVyMbxFqKVa1hqOzL2kG
HJpywcV+FnOyiO8vYaTGzQlnrgOMFZUbTzCGHTlT8ilbzl7UckWS/ciNDs+NSbiG
jEGgkN+J+liFoQYeKCZPIAYgRbBcLQjidfv0eDjOdWHENvz5N53E77UFc+v/zOu8
Udfb1vzaGQiAQTaJJChH/HC16rl48CePH8G9m+RYCWglZjhGqw0IiQi3tXfdFqh8
Ea1PjdzjEQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFDldjRmnxL6rpPDw6Cv738gs
pDqfMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMDM4MmUzMDJm
MzIzMzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JHQMA0G
CSqGSIb3DQEBCwUAA4IBAQAmNprDm4XwaNEyLSeBZKOwKGGVbBb6qbSkvMxqHGXr
Xgipb2OcX9kG5XwZ0Um28RUEKt2RsmakBJSozw6YzmDh8KPK3OFPBbEubuwbvL+I
Q41AZoPYxSiJSb6pH+CNye9J5KiPhC4BibfvVGNduTWdy2pUoDvKdS6P6qwKbzF3
YJZMs0+2MEce+udwcDrGpkm0Sv7BA050J/fAB06YfzU+ABmLXnBnRUSIFrXh85Az
Nh0u1dE5PD/o5szWx4Dytb1POwikik1ELu/T1uq3MI/FJrWsYQazxVPo01jfM65O
Lr5KVAIHlDnZ8ClXapq5hHGOAuc34nkmk+/Y97XYf4mz
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org