Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          dSAHSKov08GtE6+C32gzcMIvG+KCm3bnH4ODSFgWtn8=
Subject key identifier:   E0:2F:07:DE:AE:2A:36:3F:D2:B0:68:E9:0F:4F:E0:7F:BE:9D:F0:94
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       3997AB65C96D8C01ABFE9F14ED0E5F694D4B4D84
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:26 +0000
ROA not before:           Fri 01 Sep 2023 11:09:26 +0000
ROA not after:            Fri 30 Aug 2024 11:14:26 +0000
asID:                     397726
IP address blocks:        216.145.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:97:ab:65:c9:6d:8c:01:ab:fe:9f:14:ed:0e:5f:69:4d:4b:4d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:26 2023 GMT
            Not After : Aug 30 11:14:26 2024 GMT
        Subject: CN=E02F07DEAE2A363FD2B068E90F4FE07FBE9DF094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:21:f5:34:a3:7d:54:e3:63:e8:85:b4:b3:
                    63:f0:59:62:2d:f0:5b:c0:3a:85:34:ea:20:bf:7b:
                    89:41:fd:f5:6b:7c:92:71:8c:f5:77:f3:63:4f:70:
                    c4:a2:6c:a7:fb:fb:96:d9:b0:ed:5e:9f:a8:14:e1:
                    a4:0b:70:e4:c7:a2:f7:0f:d0:89:0e:27:3e:95:2c:
                    f1:45:3d:20:c4:b3:42:d2:f3:26:3b:e5:94:d5:3e:
                    8f:b1:c8:71:8a:c8:79:2e:cf:cd:93:04:7a:67:29:
                    1e:10:7f:75:45:cb:b3:f0:99:8f:3b:cd:bb:58:d6:
                    51:71:8d:f1:bb:76:d0:65:58:6e:05:72:07:6d:f0:
                    35:eb:fe:bb:90:bf:d1:d0:e9:fd:75:e9:73:0c:af:
                    b1:f4:da:30:24:fd:e1:f6:80:6f:e0:4f:c5:e9:d4:
                    7a:85:81:c8:9d:cf:b6:58:57:2c:75:b6:fd:8a:05:
                    32:d8:93:fb:b9:c2:14:95:26:9e:79:d9:ff:48:a8:
                    fa:89:9e:af:c2:c9:df:38:02:14:95:16:1c:71:17:
                    18:36:26:11:1a:06:62:1c:0a:e7:eb:eb:90:3c:5e:
                    81:29:6f:8d:dd:f6:b1:40:07:d3:7a:f8:ae:4d:87:
                    17:e0:30:ac:ce:41:f2:1d:d3:db:8f:ba:9c:2a:42:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:07:DE:AE:2A:36:3F:D2:B0:68:E9:0F:4F:E0:7F:BE:9D:F0:94
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:60:cc:1c:74:49:f5:67:b6:ee:1d:9c:29:c4:31:72:ca:ba:
         2d:7c:bf:5e:95:9b:b7:54:68:d8:db:98:af:40:42:2b:58:f1:
         ce:79:2f:f3:29:77:11:a9:81:90:c6:b5:01:3a:94:02:c2:dd:
         12:30:01:fa:aa:5a:da:dd:da:14:e1:0d:2e:32:fc:0a:c5:a8:
         64:22:c3:28:d7:32:71:3e:89:85:ce:df:17:db:c1:4d:b4:81:
         77:03:78:26:8c:df:7d:a0:c3:1d:21:fc:af:9c:f8:2d:06:31:
         9a:c5:26:8c:6d:10:9b:06:0d:46:d8:d1:e1:05:c5:d2:6b:19:
         2a:49:37:61:5a:4a:28:78:03:d6:0c:de:64:7a:c8:b6:26:bf:
         68:6b:95:5b:64:79:9a:5d:da:d8:77:ce:4c:f3:e6:11:5e:c9:
         56:b5:be:ff:88:a8:0d:a6:11:e5:ee:37:fe:55:af:f8:86:a2:
         6e:ca:a2:e4:e8:6c:0a:34:7a:12:44:9d:a5:99:ab:f4:42:d6:
         48:70:65:b6:1e:e7:23:6b:6f:c0:7f:92:8a:97:c7:21:ef:48:
         08:53:6a:af:de:cf:59:e3:4f:df:22:7b:8b:d3:ec:94:17:5c:
         5e:72:ff:14:9f:a3:d9:4b:e2:26:0f:6d:2c:6f:86:d6:bd:44:
         f1:74:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:27:11 2024 by rpki-client on console-ams.rpki-client.org