Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          QtgtHB42XGUGZIV9Xoew0++i4hkDJZYjQSATxghrEnw=
Subject key identifier:   0F:F4:70:4F:13:3D:5F:6D:5A:50:D1:62:81:E6:80:85:64:FD:17:EB
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       4D92D2CAF40E5BBB4282CB8B5DC78D89D5A2F9DC
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:27 +0000
ROA not before:           Fri 01 Sep 2023 11:09:27 +0000
ROA not after:            Fri 30 Aug 2024 11:14:27 +0000
asID:                     397726
IP address blocks:        216.145.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 12:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:92:d2:ca:f4:0e:5b:bb:42:82:cb:8b:5d:c7:8d:89:d5:a2:f9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:27 2023 GMT
            Not After : Aug 30 11:14:27 2024 GMT
        Subject: CN=0FF4704F133D5F6D5A50D16281E6808564FD17EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:b6:10:47:31:d1:e9:fb:bd:ea:b6:10:45:
                    be:b7:07:a8:fb:df:d8:19:c6:e4:5d:f2:6c:55:c5:
                    4b:06:36:2d:03:77:21:d8:5c:fa:f3:40:6f:34:49:
                    c7:ce:b6:5d:e7:43:bf:40:e2:fb:8c:2c:2c:66:fe:
                    72:bf:4d:b7:df:fa:a1:5d:56:aa:b7:3e:2a:50:26:
                    87:c5:c3:41:7e:41:d8:07:84:0d:8e:80:e2:34:9d:
                    19:ed:e3:fc:88:7a:17:2e:ed:2e:22:72:eb:34:55:
                    f6:30:64:08:0f:d6:cd:59:9e:4a:a1:fb:63:0a:16:
                    e6:39:c9:fa:0a:8c:9c:e7:7d:c5:ac:bd:7e:51:65:
                    70:f5:00:57:93:17:c7:88:dd:ea:c4:6e:6b:03:38:
                    55:b2:d9:73:90:0f:75:f3:51:ef:85:cc:d1:19:3c:
                    20:de:df:43:52:1d:ff:59:ef:4a:7e:28:40:e9:51:
                    60:e8:39:5f:0d:f0:d1:42:71:3d:03:99:df:7c:42:
                    b8:64:83:d2:5b:99:92:f6:88:79:6d:a7:20:eb:71:
                    19:3d:6e:a0:e1:f9:cf:0a:f0:57:22:be:3c:33:b8:
                    cc:c5:52:fe:89:5a:04:2c:ed:e1:1b:b0:76:68:df:
                    c3:fe:6f:c8:d9:9c:9b:b2:45:a1:31:b3:f1:de:be:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:70:4F:13:3D:5F:6D:5A:50:D1:62:81:E6:80:85:64:FD:17:EB
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:16:37:fe:2d:96:00:f2:50:22:98:ea:f8:0b:53:90:d0:
         a5:6d:0d:a9:72:1c:b5:68:c1:9f:55:b4:c3:0f:6d:1b:8f:55:
         4b:58:63:90:ec:ed:ba:91:6b:22:e8:df:85:a2:ea:19:51:7e:
         6e:ee:26:9b:95:4a:de:65:49:4e:f8:56:54:86:83:7c:30:77:
         f2:ab:01:31:b3:7a:fa:44:69:13:23:b0:1b:e3:e8:ee:65:39:
         a6:64:04:1c:85:28:5a:c6:ae:14:04:4a:2f:f4:d6:00:9b:19:
         6f:15:6d:1d:06:1e:2a:30:4b:25:e3:d6:a8:0e:b3:e3:de:f1:
         a5:25:a3:4c:4c:06:99:16:85:8d:3b:ec:06:d2:d1:79:d6:fb:
         f2:97:66:1a:83:1f:06:69:68:4a:18:1f:7a:80:28:21:9b:c8:
         cd:22:03:0d:1a:ba:ec:78:e3:53:6c:3e:be:7e:e3:30:c1:7a:
         cb:f0:93:fc:a8:ca:f5:86:b8:e5:2f:77:57:5c:e2:88:62:3c:
         a3:9e:6f:6e:2c:3b:69:f8:15:ff:a7:96:54:ba:03:00:fc:83:
         6f:0e:6e:85:cf:ec:81:b8:a2:a4:39:27:ce:1d:cf:8b:0c:43:
         e8:74:2e:7a:e1:b5:53:e4:f3:84:09:ef:f8:03:8e:54:78:05:
         c2:87:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:51:14 2024 by rpki-client on console-fra.rpki-client.org