Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          9rsOmqzPnd5A16R2I9+NZmBh8FPaMvlhJ44XkwdwEO8=
Subject key identifier:   D1:B7:30:F8:B3:2E:6E:6B:44:69:56:D9:10:63:2A:37:A0:90:BB:F0
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0B7134B1FA814158D97EDF298745A496FF36CCEC
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:27 +0000
ROA not before:           Fri 01 Sep 2023 11:09:27 +0000
ROA not after:            Fri 30 Aug 2024 11:14:27 +0000
asID:                     397726
IP address blocks:        216.145.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:71:34:b1:fa:81:41:58:d9:7e:df:29:87:45:a4:96:ff:36:cc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:27 2023 GMT
            Not After : Aug 30 11:14:27 2024 GMT
        Subject: CN=D1B730F8B32E6E6B446956D910632A37A090BBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:7c:02:24:63:f7:24:20:4b:33:29:37:a3:
                    7b:e2:6d:a3:ad:96:78:87:7f:f4:44:e0:26:8a:7c:
                    02:f3:01:8a:84:1d:6e:71:cd:b7:7c:73:24:e8:20:
                    2d:3d:03:87:3c:60:35:06:59:22:7f:c5:a6:86:d4:
                    cc:b0:e1:8f:c8:27:1c:d9:94:de:d8:f3:28:f5:04:
                    c4:29:54:89:13:b9:6a:76:ed:c6:dd:f1:20:e3:1c:
                    52:85:a7:c7:0f:cc:bc:a7:b1:e3:92:cf:09:27:8c:
                    d5:f8:c2:d3:b5:d0:c9:55:38:94:f0:7f:c3:a2:e3:
                    3f:03:36:e4:8e:42:4a:43:82:77:50:60:10:fe:03:
                    1f:5b:9f:9a:bc:0c:e8:ae:0c:92:05:ec:bd:cb:b1:
                    40:d1:d5:70:08:f6:da:ed:76:e0:ff:5b:5b:2c:5f:
                    66:0e:43:6d:81:a1:08:43:da:e4:90:b1:ad:98:d7:
                    2c:31:2d:db:84:d3:3b:29:dd:88:8b:34:22:45:87:
                    78:17:ab:5e:aa:30:a7:ca:c9:3b:e5:e3:cb:29:65:
                    ff:00:59:e7:d6:0b:05:85:f1:56:8d:92:9b:41:f3:
                    f0:b5:d5:36:80:d3:a5:22:03:ee:65:8c:f5:67:ce:
                    93:25:0d:46:b5:74:2d:24:dc:ab:d4:1a:17:97:96:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B7:30:F8:B3:2E:6E:6B:44:69:56:D9:10:63:2A:37:A0:90:BB:F0
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:e0:82:03:bd:a2:7a:b8:02:3f:67:4b:5f:04:2f:1c:54:
         9f:4c:37:3f:e6:5b:44:80:77:7a:91:81:1b:09:a2:97:fa:50:
         15:67:aa:fc:6c:c5:9c:35:c4:e9:d6:41:dc:eb:34:af:3e:70:
         ca:e5:ae:23:a5:ec:5e:f2:1e:0a:4a:ae:fc:52:4e:b9:df:2e:
         73:be:10:81:3f:fc:69:76:9b:e1:62:ea:76:65:ff:1a:a1:0c:
         ca:66:b6:45:a7:b1:ad:93:7f:fd:78:51:80:a5:38:90:de:0b:
         85:c2:66:63:ee:10:b0:47:58:02:15:a7:fa:ff:01:b1:e4:c0:
         b2:1a:e3:ab:5a:42:e2:fb:e7:00:29:0f:d2:02:ab:a6:f4:93:
         ef:32:1c:56:66:fc:e0:5e:05:89:8b:b6:af:0c:96:2b:18:e1:
         2e:5c:b3:db:2e:3d:2c:28:4b:b3:cf:36:b7:2b:73:95:17:ec:
         e0:90:ce:ca:04:09:11:eb:40:34:4a:d5:a3:fd:a5:db:6a:d8:
         37:3d:28:1c:08:5e:12:0b:90:cb:a8:44:cc:f2:93:a0:fe:4e:
         7d:30:7c:27:69:5a:a5:79:33:08:f6:3e:d0:4b:64:7f:74:14:
         23:a8:6f:45:8d:ec:6d:06:ae:90:06:af:b4:e7:1b:15:b9:c1:
         c7:4c:d2:e4
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUC3E0sfqBQVjZft8ph0Wklv82zOwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI3WhcNMjQwODMwMTExNDI3
WjAzMTEwLwYDVQQDEyhEMUI3MzBGOEIzMkU2RTZCNDQ2OTU2RDkxMDYzMkEzN0Ew
OTBCQkYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm18AiRj9yQg
SzMpN6N74m2jrZZ4h3/0ROAminwC8wGKhB1ucc23fHMk6CAtPQOHPGA1Blkif8Wm
htTMsOGPyCcc2ZTe2PMo9QTEKVSJE7lqdu3G3fEg4xxShafHD8y8p7Hjks8JJ4zV
+MLTtdDJVTiU8H/DouM/AzbkjkJKQ4J3UGAQ/gMfW5+avAzorgySBey9y7FA0dVw
CPba7Xbg/1tbLF9mDkNtgaEIQ9rkkLGtmNcsMS3bhNM7Kd2IizQiRYd4F6teqjCn
ysk75ePLKWX/AFnn1gsFhfFWjZKbQfPwtdU2gNOlIgPuZYz1Z86TJQ1GtXQtJNyr
1BoXl5b2zQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFNG3MPizLm5rRGlW2RBjKjeg
kLvwMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMTMyMmUzMDJm
MzIzMzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JHUMA0G
CSqGSIb3DQEBCwUAA4IBAQAeReCCA72iergCP2dLXwQvHFSfTDc/5ltEgHd6kYEb
CaKX+lAVZ6r8bMWcNcTp1kHc6zSvPnDK5a4jpexe8h4KSq78Uk653y5zvhCBP/xp
dpvhYup2Zf8aoQzKZrZFp7Gtk3/9eFGApTiQ3guFwmZj7hCwR1gCFaf6/wGx5MCy
GuOrWkLi++cAKQ/SAqum9JPvMhxWZvzgXgWJi7avDJYrGOEuXLPbLj0sKEuzzza3
K3OVF+zgkM7KBAkR60A0StWj/aXbatg3PSgcCF4SC5DLqETM8pOg/k59MHwnaVql
eTMI9j7QS2R/dBQjqG9FjextBq6QBq+05xsVucHHTNLk
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:04:56 2024 by rpki-client on console-fra.rpki-client.org