Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231312e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231312e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          Zz0gKq5+bs296tU7WBJyOJB5mvpnqmPjRhmymuOumqw=
Subject key identifier:   07:FF:C0:3F:49:E4:A3:C4:C6:7F:92:2D:39:E2:33:62:7B:1B:70:44
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       08E9BE0E8D35484D7795438F367B14F0DC4CE8A9
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231312e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:26 +0000
ROA not before:           Fri 02 Aug 2024 11:19:26 +0000
ROA not after:            Fri 01 Aug 2025 11:24:26 +0000
asID:                     397726
IP address blocks:        216.145.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e9:be:0e:8d:35:48:4d:77:95:43:8f:36:7b:14:f0:dc:4c:e8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:26 2024 GMT
            Not After : Aug  1 11:24:26 2025 GMT
        Subject: CN=07FFC03F49E4A3C4C67F922D39E233627B1B7044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:90:ab:c8:1b:3b:c3:06:9b:f0:45:43:5e:
                    d2:4f:13:b8:61:14:c2:57:79:b3:ab:29:43:9e:5e:
                    81:4e:75:c2:36:c9:6e:db:05:19:26:d6:86:0d:b0:
                    97:a7:07:2a:63:d9:19:ce:67:6e:7e:e3:d5:5c:95:
                    34:bf:2b:9a:e2:eb:aa:09:43:24:84:ed:18:9a:d6:
                    ca:91:cf:3d:25:f4:8c:be:19:04:3c:16:95:1d:e0:
                    ca:23:20:80:d4:92:e4:a4:ae:4a:45:3a:6e:54:91:
                    a1:1b:62:69:27:20:e7:3e:21:48:85:3a:c0:a4:a4:
                    15:15:97:80:7f:d6:fa:e1:49:cc:21:cf:58:35:36:
                    f0:e7:a9:7b:d5:f8:9b:e5:9f:51:53:99:9a:b8:90:
                    b5:87:6c:f7:27:0f:c2:05:7d:3e:e2:f6:4a:b4:e8:
                    db:d7:bd:8d:13:f7:b8:0b:5e:5a:5e:3b:b5:d4:73:
                    8c:af:54:31:9f:05:cd:4d:60:24:34:b8:2f:91:25:
                    c3:00:d7:54:67:1b:39:e7:b2:e9:25:20:50:70:45:
                    5c:04:84:5f:f7:2d:4d:9a:f3:f0:43:f5:04:67:f6:
                    96:9e:67:21:46:40:00:60:5e:d5:bb:a1:fc:e9:3b:
                    30:aa:54:d7:1e:7f:76:26:d0:8d:e2:4e:b8:4e:c0:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FF:C0:3F:49:E4:A3:C4:C6:7F:92:2D:39:E2:33:62:7B:1B:70:44
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231312e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:dc:ff:3f:ff:24:19:2a:36:9a:aa:6c:b8:92:2f:92:4a:
         e8:08:3f:93:1b:fb:fd:a5:e2:e4:14:f1:87:41:5f:9f:c5:03:
         36:f5:9c:8c:b1:2a:69:73:5f:7d:e9:ba:61:a4:73:6b:b3:37:
         09:a7:40:ee:e0:11:a9:0c:7e:89:c2:61:71:bd:a8:10:00:04:
         e7:c0:1d:4a:5f:ad:1d:87:9a:a7:8a:b8:de:c7:f0:e8:3c:c5:
         66:6d:e0:e7:13:7f:5e:b4:af:65:8a:a6:9e:b3:1e:da:b3:0e:
         d2:fa:a0:10:ab:26:09:cf:0f:29:f4:8c:8c:fc:26:f5:85:df:
         0b:6b:dc:96:52:17:2f:1e:57:38:1c:8b:f9:dd:9e:9d:d9:02:
         ab:f1:61:58:24:49:b7:40:bc:6f:a0:60:59:a0:78:16:1c:ce:
         75:bf:c3:39:f3:02:26:ad:4b:29:4c:93:6f:b0:4e:d8:f3:dd:
         a2:90:bd:7a:e7:1b:cd:f0:18:c3:26:a3:66:4d:d7:bf:e7:e2:
         37:86:5c:3b:5c:d7:b2:89:e5:b5:13:a3:4c:e5:e1:0d:c2:ab:
         8e:f6:0e:e7:e5:95:ea:6c:98:2c:0d:19:63:ee:b1:d6:64:16:
         23:1c:6d:bc:a2:f1:27:81:2a:6d:66:53:30:83:82:c5:0f:6b:
         99:42:29:ff
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUCOm+Do01SE13lUOPNnsU8NxM6KkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI2WhcNMjUwODAxMTEyNDI2
WjAzMTEwLwYDVQQDEygwN0ZGQzAzRjQ5RTRBM0M0QzY3RjkyMkQzOUUyMzM2MjdC
MUI3MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30eQq8gbO8MG
m/BFQ17STxO4YRTCV3mzqylDnl6BTnXCNslu2wUZJtaGDbCXpwcqY9kZzmdufuPV
XJU0vyua4uuqCUMkhO0YmtbKkc89JfSMvhkEPBaVHeDKIyCA1JLkpK5KRTpuVJGh
G2JpJyDnPiFIhTrApKQVFZeAf9b64UnMIc9YNTbw56l71fib5Z9RU5mauJC1h2z3
Jw/CBX0+4vZKtOjb172NE/e4C15aXju11HOMr1QxnwXNTWAkNLgvkSXDANdUZxs5
57LpJSBQcEVcBIRf9y1NmvPwQ/UEZ/aWnmchRkAAYF7Vu6H86TswqlTXHn92JtCN
4k64TsDQRwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFAf/wD9J5KPExn+SLTniM2J7
G3BEMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMTMxMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHTMA0G
CSqGSIb3DQEBCwUAA4IBAQB+Ydz/P/8kGSo2mqpsuJIvkkroCD+TG/v9peLkFPGH
QV+fxQM29ZyMsSppc1996bphpHNrszcJp0Du4BGpDH6JwmFxvagQAATnwB1KX60d
h5qnirjex/DoPMVmbeDnE39etK9liqaesx7asw7S+qAQqyYJzw8p9IyM/Cb1hd8L
a9yWUhcvHlc4HIv53Z6d2QKr8WFYJEm3QLxvoGBZoHgWHM51v8M58wImrUspTJNv
sE7Y892ikL165xvN8BjDJqNmTde/5+I3hlw7XNeyieW1E6NM5eENwquO9g7n5ZXq
bJgsDRlj7rHWZBYjHG28ovEngSptZlMwg4LFD2uZQin/
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org