Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          sGHk7qTKS5SfdF19JeIPWxIpswHExcA27PeQX95rAcE=
Subject key identifier:   A1:B6:17:96:9A:46:C3:74:5D:87:4F:6F:A8:26:B1:A8:D1:2F:03:18
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7EDDAEF43D6860E9E3046ED9B059CA7FCB6C6147
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:26 +0000
ROA not before:           Fri 02 Aug 2024 11:19:26 +0000
ROA not after:            Fri 01 Aug 2025 11:24:26 +0000
asID:                     397726
IP address blocks:        216.145.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dd:ae:f4:3d:68:60:e9:e3:04:6e:d9:b0:59:ca:7f:cb:6c:61:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:26 2024 GMT
            Not After : Aug  1 11:24:26 2025 GMT
        Subject: CN=A1B617969A46C3745D874F6FA826B1A8D12F0318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:b9:60:7f:61:d4:b1:ec:5a:7d:94:48:59:
                    47:c6:b5:81:a4:63:9c:f0:3e:5f:8a:d4:18:a0:1a:
                    4f:ef:30:a6:39:6b:3e:f7:93:8f:9f:75:ce:a2:37:
                    38:09:f0:71:c9:0c:45:dd:1c:56:17:00:47:4f:b7:
                    13:2d:c0:56:bf:fd:70:89:14:b5:1d:46:ff:cb:a1:
                    0d:f3:47:bf:81:1d:29:12:e7:ce:f1:c2:74:8e:55:
                    73:48:56:5d:29:74:de:e1:ac:6d:cc:82:de:8d:91:
                    3f:ce:43:c1:8c:02:54:49:43:a7:d3:b6:b6:b3:cd:
                    82:0c:05:e0:76:5c:e9:bb:06:e5:d1:df:c3:bd:da:
                    05:6d:01:22:fc:ce:14:c2:ea:fc:cc:1b:21:c1:a6:
                    6c:ff:1c:6d:a4:44:f3:bf:82:2b:9f:14:62:80:93:
                    5e:7b:fb:a9:85:92:86:08:34:1b:23:cb:76:0e:7c:
                    f8:0f:b7:92:40:72:70:1b:a2:be:9a:6c:72:e2:d2:
                    50:3d:a9:cb:05:75:43:18:88:c1:22:ed:81:cb:b7:
                    fc:7c:80:f1:e8:4b:69:6c:18:96:23:e7:73:ad:9e:
                    32:e3:4b:fb:f3:e1:4b:d8:e4:fc:00:8a:a4:70:0d:
                    d2:20:97:b2:5f:a5:c9:e3:fe:e2:18:42:34:1c:9e:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:17:96:9A:46:C3:74:5D:87:4F:6F:A8:26:B1:A8:D1:2F:03:18
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:be:46:cd:e3:67:85:2d:3c:dc:2f:be:67:16:2c:8c:19:85:
         74:ad:31:bd:38:22:38:6f:80:73:31:8d:a1:82:37:79:52:e0:
         ba:fb:13:a8:12:b3:c0:d9:c5:ba:1f:0a:f3:3d:ff:f6:8d:cd:
         73:09:91:ff:38:e1:d3:b1:8f:67:31:cf:ee:0c:38:4d:cc:92:
         db:79:92:05:5a:7d:d2:eb:ec:cd:27:e8:fc:f7:0c:c5:42:65:
         82:fb:f2:ad:a8:d2:56:f3:ef:bf:4a:5d:71:b5:19:85:8b:b6:
         e4:7f:5d:96:2a:c1:b5:27:c2:4a:0a:b4:df:c3:2d:3a:5d:d6:
         89:58:bb:8b:a2:30:e9:84:20:4b:63:f0:8f:76:04:22:2c:55:
         a7:8a:1f:55:68:43:2b:fc:73:d4:61:ef:0f:a7:35:95:f0:5c:
         10:f4:09:15:e7:6b:99:25:39:7f:c1:29:de:44:48:fe:39:0d:
         da:ef:dc:22:34:38:d0:8c:8a:0c:a0:6d:ca:11:f6:05:58:f7:
         cb:45:49:a0:67:4f:10:7d:78:11:0c:1a:14:f6:4f:13:cb:34:
         04:28:3e:dd:0e:03:60:84:d5:b2:d0:54:51:ac:aa:e0:6b:b6:
         5c:e5:fc:72:4c:f6:eb:c6:f3:58:f6:1b:59:5a:02:af:3e:85:
         95:9d:97:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org