Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          fU8DC7GOw3DMUjCGvHFMOO/EGIMApR96UzZfn4jQxf8=
Subject key identifier:   EF:1A:57:52:2F:FB:8A:D1:4A:CB:E7:41:19:C4:AE:81:4D:16:67:8C
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       46076BC2649E46FD36ACE35C7594696696EB6F87
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:31 +0000
ROA not before:           Fri 02 Aug 2024 11:19:31 +0000
ROA not after:            Fri 01 Aug 2025 11:24:31 +0000
asID:                     397726
IP address blocks:        216.145.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:07:6b:c2:64:9e:46:fd:36:ac:e3:5c:75:94:69:66:96:eb:6f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:31 2024 GMT
            Not After : Aug  1 11:24:31 2025 GMT
        Subject: CN=EF1A57522FFB8AD14ACBE74119C4AE814D16678C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:fa:9b:06:08:0e:34:71:84:ee:0c:59:f6:
                    4a:ce:21:70:2a:0f:87:b1:2f:b9:99:8d:a4:70:97:
                    e2:9c:0c:d8:4e:ab:bf:10:0d:a2:bd:63:07:a6:25:
                    d2:b3:4a:a3:2b:af:37:9b:94:d2:d0:55:b3:4b:75:
                    3f:39:c1:71:75:1a:af:73:79:c0:01:99:a0:13:fb:
                    b7:bc:eb:d5:f1:35:7a:2c:ca:7a:df:39:7d:af:50:
                    03:8d:f3:71:27:d9:84:28:00:87:72:3d:10:3c:a6:
                    e8:4b:03:8a:57:8a:82:37:74:4c:d6:60:36:12:20:
                    97:90:bd:9c:dc:69:7f:ee:89:96:fa:0a:d7:ec:07:
                    37:ad:64:05:05:ec:a0:4c:cc:ce:d4:4e:17:31:ec:
                    b4:b6:df:b0:23:7c:2e:f7:70:3a:db:46:f8:d0:49:
                    55:10:e3:3a:61:af:20:07:eb:55:bd:0f:9f:58:b2:
                    27:d4:e4:c9:36:54:e1:0f:b0:43:0c:5f:f6:ff:f1:
                    a6:35:ef:34:0c:c7:b6:1a:62:d3:0f:90:90:a6:85:
                    83:a8:86:9d:a8:7f:6f:72:39:eb:9f:b6:27:26:b5:
                    f8:f9:e0:31:cd:fc:33:a4:49:39:41:e7:7a:b0:bc:
                    ec:c0:42:55:e8:9a:cd:3d:91:ff:51:e3:bf:01:43:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1A:57:52:2F:FB:8A:D1:4A:CB:E7:41:19:C4:AE:81:4D:16:67:8C
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:f6:32:a2:cd:37:97:ef:dc:2b:42:e5:e9:f7:a6:1a:5f:c7:
         e6:e9:40:b0:90:01:69:ff:a1:2a:c9:19:07:1e:6a:7d:0f:b2:
         be:be:dc:02:25:35:c6:9a:c0:f4:86:77:94:45:4b:da:75:68:
         f4:64:d9:26:ca:26:72:fd:0b:18:a8:a0:fd:bc:a6:73:91:0e:
         fc:dd:4b:f1:f3:3f:d3:be:1e:d7:10:19:a9:b4:b3:51:95:99:
         9f:f7:51:e0:40:2c:e4:fb:2d:4b:15:3f:52:42:36:79:4b:52:
         5a:5e:da:ed:b3:95:47:dc:3e:3f:ee:7b:c6:4c:c2:0c:fc:7f:
         fb:1f:4d:0f:97:4b:cf:d6:38:15:e9:e1:a1:98:f1:b1:f7:5e:
         07:78:74:8e:08:af:95:37:04:35:23:ad:2c:ea:80:34:62:60:
         26:5f:2b:1a:44:1c:a4:c0:e4:89:cd:2e:c3:59:71:47:bf:c0:
         40:26:88:23:c0:a7:fb:80:ad:4c:06:53:e9:17:fc:14:0b:7c:
         13:52:39:27:0c:c5:28:25:d0:62:5f:c6:21:1a:b8:ce:5e:99:
         3d:a0:c2:0e:f5:23:3f:3c:6f:b6:de:b1:c8:1f:65:8d:b9:25:
         1c:9f:40:f1:da:89:ca:8d:10:6a:21:23:2c:13:91:fc:a7:98:
         ca:88:0f:3e
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIURgdrwmSeRv02rONcdZRpZpbrb4cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMxWhcNMjUwODAxMTEyNDMx
WjAzMTEwLwYDVQQDEyhFRjFBNTc1MjJGRkI4QUQxNEFDQkU3NDExOUM0QUU4MTRE
MTY2NzhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2n6mwYIDjRx
hO4MWfZKziFwKg+HsS+5mY2kcJfinAzYTqu/EA2ivWMHpiXSs0qjK683m5TS0FWz
S3U/OcFxdRqvc3nAAZmgE/u3vOvV8TV6LMp63zl9r1ADjfNxJ9mEKACHcj0QPKbo
SwOKV4qCN3RM1mA2EiCXkL2c3Gl/7omW+grX7Ac3rWQFBeygTMzO1E4XMey0tt+w
I3wu93A620b40ElVEOM6Ya8gB+tVvQ+fWLIn1OTJNlThD7BDDF/2//GmNe80DMe2
GmLTD5CQpoWDqIadqH9vcjnrn7YnJrX4+eAxzfwzpEk5Qed6sLzswEJV6JrNPZH/
UeO/AUPIXwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFO8aV1Iv+4rRSsvnQRnEroFN
FmeMMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMTMwMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHSMA0G
CSqGSIb3DQEBCwUAA4IBAQAi9jKizTeX79wrQuXp96YaX8fm6UCwkAFp/6EqyRkH
Hmp9D7K+vtwCJTXGmsD0hneURUvadWj0ZNkmyiZy/QsYqKD9vKZzkQ783Uvx8z/T
vh7XEBmptLNRlZmf91HgQCzk+y1LFT9SQjZ5S1JaXtrts5VH3D4/7nvGTMIM/H/7
H00Pl0vP1jgV6eGhmPGx914HeHSOCK+VNwQ1I60s6oA0YmAmXysaRBykwOSJzS7D
WXFHv8BAJogjwKf7gK1MBlPpF/wUC3wTUjknDMUoJdBiX8YhGrjOXpk9oMIO9SM/
PG+23rHIH2WNuSUcn0Dx2onKjRBqISMsE5H8p5jKiA8+
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org