Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          qUe9fjE6F4ULGrSwOKlLdUbUbYlKHP7siN4NmJZzSZE=
Subject key identifier:   7D:AE:86:D5:26:75:83:4E:86:AD:70:ED:29:13:E0:8D:70:54:CF:34
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5723C10132A96F4255ECD381F5DD9D9E9B0ECBD6
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:28 +0000
ROA not before:           Fri 02 Aug 2024 11:19:28 +0000
ROA not after:            Fri 01 Aug 2025 11:24:28 +0000
asID:                     397726
IP address blocks:        216.145.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:23:c1:01:32:a9:6f:42:55:ec:d3:81:f5:dd:9d:9e:9b:0e:cb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:28 2024 GMT
            Not After : Aug  1 11:24:28 2025 GMT
        Subject: CN=7DAE86D52675834E86AD70ED2913E08D7054CF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:0b:cb:66:ef:94:c0:df:9d:82:2a:90:65:
                    f6:bb:29:2e:13:a8:4a:cd:51:4d:e8:b4:34:ba:16:
                    5a:39:6c:41:48:e1:68:90:24:74:20:f9:3e:8d:ab:
                    8f:26:22:e4:b5:52:33:20:ed:d0:66:fe:d9:eb:38:
                    b6:d8:df:27:00:a0:0d:35:54:8f:b3:63:52:2f:4e:
                    0e:72:23:36:f9:ce:66:f1:84:74:82:31:fb:9f:c8:
                    c7:5d:4c:b1:a2:3a:d1:39:af:0f:93:27:8c:30:f9:
                    ae:36:2e:b0:1e:37:2a:2e:35:d0:a1:b1:0f:73:b5:
                    6c:7e:e6:77:cb:2f:ce:e4:07:12:66:ca:42:cf:be:
                    81:15:d8:df:be:94:12:6c:21:38:b7:21:89:9b:b5:
                    d7:ce:fa:ca:41:f0:ee:0a:2f:f7:69:f9:e0:01:5b:
                    27:e1:8a:3a:69:4d:95:91:b7:94:d2:15:95:46:e4:
                    bd:a0:53:76:eb:8f:5d:16:00:05:b1:72:4c:92:25:
                    f0:ed:a5:be:72:e5:5e:3a:43:a6:d3:fb:0a:41:50:
                    e2:63:d7:a2:c2:69:0b:f0:83:2a:f1:2f:25:95:ca:
                    54:83:71:05:28:b9:07:60:7f:3b:69:3f:9b:77:0c:
                    07:f5:f2:b4:78:8e:48:22:f9:0b:1c:66:6b:19:05:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AE:86:D5:26:75:83:4E:86:AD:70:ED:29:13:E0:8D:70:54:CF:34
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:f0:fb:28:2a:10:41:83:75:67:e7:68:08:42:d7:f4:ec:
         2d:a0:1d:d1:6e:f4:80:17:a4:92:29:7b:05:c0:e0:cb:92:e9:
         e2:9a:82:59:4f:b8:8f:ea:94:bd:10:18:9b:6d:87:f1:05:a6:
         cb:f1:ed:65:8d:fb:e9:4c:6b:0b:12:0e:79:e6:2c:05:04:a3:
         17:41:34:fb:35:72:12:d8:67:24:b4:5b:d3:8d:c5:0d:ae:86:
         e5:5d:48:5e:85:d4:07:04:84:50:03:a7:f8:46:6c:7e:f1:c2:
         b4:25:87:5e:29:4a:40:24:0a:35:b0:fa:c8:d1:3e:d2:60:c3:
         6e:0d:e2:c1:c6:22:8f:26:7d:78:55:75:12:a9:68:d5:f3:82:
         8d:00:f5:92:5e:b4:db:81:b8:75:92:d6:84:77:7a:53:9d:fa:
         7f:a1:46:20:9a:ac:f9:74:53:80:a0:16:4f:e4:55:82:3e:a2:
         2b:68:b6:54:14:40:43:03:d7:4d:01:61:b3:65:c4:db:9d:a3:
         43:7a:db:b4:f5:ca:4f:09:03:54:6e:9a:23:67:e6:fd:6e:42:
         04:fd:bf:e9:8e:3d:72:0f:d7:37:d4:0e:57:1f:19:e0:ac:76:
         0c:55:ea:a4:c9:db:4d:46:01:8c:61:22:70:bf:60:07:46:81:
         c5:86:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:54:59 2024 by rpki-client on console-ams.rpki-client.org