Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          kTVsBNStRuQbWHaUm7V5XYneCdSD9iTJntHQrgg/GOg=
Subject key identifier:   5F:F9:09:8C:FB:6D:6F:99:25:13:5B:E3:72:FD:8D:DC:62:7B:7E:8F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       56221CD26748DDBFC24A655EAEC49EC90B904071
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:32 +0000
ROA not before:           Fri 02 Aug 2024 11:19:32 +0000
ROA not after:            Fri 01 Aug 2025 11:24:32 +0000
asID:                     397726
IP address blocks:        216.145.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:22:1c:d2:67:48:dd:bf:c2:4a:65:5e:ae:c4:9e:c9:0b:90:40:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:32 2024 GMT
            Not After : Aug  1 11:24:32 2025 GMT
        Subject: CN=5FF9098CFB6D6F9925135BE372FD8DDC627B7E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:a2:22:53:18:5d:6c:2f:95:c0:c1:9f:10:
                    5d:71:53:ca:35:43:3b:b6:02:cb:d5:06:62:65:fa:
                    e5:6e:b5:3a:16:af:08:16:46:aa:41:57:6b:f7:b7:
                    5d:e0:b5:da:60:2c:38:61:a2:2e:9f:02:46:11:28:
                    b8:03:f1:61:8c:c2:0a:91:8d:a6:25:83:62:f2:61:
                    53:ea:70:d8:b9:90:ac:08:e5:6e:d4:a5:34:00:b1:
                    47:4e:25:19:94:16:e9:a7:90:3a:eb:4a:f7:c8:4c:
                    6b:f1:d5:07:2e:62:91:6e:4b:3b:ce:25:0f:89:a7:
                    5f:22:9e:d1:c7:eb:cf:1e:35:e0:4d:d3:09:22:86:
                    63:3c:b2:30:99:b0:7f:bc:67:f9:c0:db:ff:ee:aa:
                    c2:18:4d:70:43:af:de:ac:3d:95:e3:06:60:00:af:
                    53:30:86:6f:71:83:b4:7c:38:aa:8b:a2:75:d1:1c:
                    cf:50:7d:fb:c1:92:13:9f:77:e5:70:4b:b0:b7:f4:
                    0f:17:bd:4d:93:29:ff:8b:6b:03:95:46:08:cc:2c:
                    7f:7d:2b:ad:ea:23:7c:58:cc:8c:4f:2d:77:f7:e7:
                    c4:1a:da:ef:ac:a9:10:c2:b9:c3:f0:ae:47:e6:8e:
                    d8:d2:f1:02:d6:d7:67:18:32:7c:79:82:bc:00:e1:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F9:09:8C:FB:6D:6F:99:25:13:5B:E3:72:FD:8D:DC:62:7B:7E:8F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d4:fd:1a:45:ed:d1:d0:5e:60:e3:4d:d6:89:84:5e:da:18:
         ca:5d:ef:92:cd:be:bf:b6:d1:6e:7d:d0:94:fd:3a:21:63:40:
         77:64:1b:49:c9:e5:c0:df:ab:d0:ca:e8:b6:08:d0:52:ca:0f:
         99:bb:44:af:9e:82:93:90:65:4f:6d:cc:cb:da:ec:d7:f0:c3:
         2d:2b:78:1b:4c:aa:13:5c:3b:cc:62:57:40:ed:f2:fb:5a:24:
         a3:6c:e8:7f:89:ab:2d:71:ab:bc:eb:9e:df:62:c5:d5:13:a8:
         ac:84:0f:90:bd:4f:0d:36:8d:3e:85:0a:fc:56:e6:4f:80:0d:
         d5:20:e7:ba:ef:ab:38:be:96:b8:61:d0:9d:64:3b:ef:ab:5f:
         2c:ff:7b:f3:dd:6b:28:d4:15:bf:97:7c:46:d8:0f:f9:66:85:
         8d:72:f9:a6:7c:9d:cf:01:c8:ae:fa:db:ab:ca:de:2f:ce:7c:
         40:5c:1b:c9:9b:04:b4:23:7b:1a:9e:27:7c:3e:9f:3f:01:0b:
         6b:e3:01:77:c3:0b:9a:61:f9:6a:00:1e:f1:e1:56:00:17:d2:
         1b:78:b0:43:a5:1f:d6:e9:0e:fc:d0:23:ad:33:04:e4:28:07:
         85:29:9f:72:c6:bb:f9:f2:d2:de:c3:1d:e7:94:23:00:42:9c:
         fc:02:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org