Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          SFCSHvIc59P0JP7wFhGch5CJFBTA7/OQNO1d17+o/hA=
Subject key identifier:   18:94:F9:66:36:6D:C5:01:30:6B:CB:BB:95:9B:91:54:20:91:FA:3C
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0193BCF8DA06D90A01E5DC7B4A25D4725FBE6FC1
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:27 +0000
ROA not before:           Fri 01 Sep 2023 11:09:27 +0000
ROA not after:            Fri 30 Aug 2024 11:14:27 +0000
asID:                     397726
IP address blocks:        216.145.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Apr 2024 12:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:bc:f8:da:06:d9:0a:01:e5:dc:7b:4a:25:d4:72:5f:be:6f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:27 2023 GMT
            Not After : Aug 30 11:14:27 2024 GMT
        Subject: CN=1894F966366DC501306BCBBB959B91542091FA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:da:80:c2:08:1d:b8:6a:b6:b0:ca:5f:57:74:
                    c9:2f:a4:9d:95:44:95:6d:03:a4:b6:93:6f:90:d7:
                    b8:60:62:3c:55:d6:5e:c0:1e:72:26:52:37:89:c2:
                    dd:4f:c3:2e:cb:6b:3f:4f:c8:7a:e6:16:52:d4:fe:
                    af:06:30:8e:60:38:e5:c5:8e:05:24:dd:d3:b6:db:
                    41:75:2a:4f:6f:a3:73:ae:9c:9c:7f:39:3e:bf:b3:
                    c3:c6:05:36:0f:46:18:76:c5:d1:60:12:29:39:c7:
                    ee:51:ab:58:46:42:0a:49:38:68:62:68:17:83:ef:
                    fe:2b:5e:e9:6d:77:85:57:cb:f8:26:2d:2b:64:f1:
                    0b:fd:a0:76:df:18:84:0e:b7:64:d0:84:f9:90:d4:
                    bd:b4:f5:49:19:00:ae:d3:08:67:23:8d:5d:f1:be:
                    09:31:f6:1c:a0:ed:24:ad:f1:bd:20:56:f6:ae:54:
                    92:01:67:c9:a6:46:99:6c:66:62:63:6c:bb:9d:76:
                    09:18:ff:36:ad:92:b9:77:e5:eb:90:81:fa:5e:57:
                    72:ff:97:bc:41:0d:4f:f4:97:a4:e2:79:dc:4a:db:
                    01:c2:44:34:f8:14:c8:76:84:3a:65:24:35:3d:1e:
                    51:8a:e7:4e:83:18:7a:02:1c:7a:e9:fc:fa:79:b3:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:F9:66:36:6D:C5:01:30:6B:CB:BB:95:9B:91:54:20:91:FA:3C
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:6e:75:6f:64:52:13:9f:8f:2a:5c:3f:fd:bb:82:ce:cb:
         92:c9:d0:52:ca:36:23:6e:7a:1f:36:80:ca:78:bd:ba:56:d9:
         4d:5b:ae:c6:f1:50:2b:fd:15:d9:2e:31:ef:5b:e8:87:30:9a:
         09:d8:f0:3d:8d:84:ba:0c:56:80:65:17:b9:f2:d8:99:36:16:
         b4:60:92:ac:64:3e:09:8c:ca:cb:05:af:1d:74:5c:14:8e:14:
         23:3b:85:8c:f0:a0:10:86:04:a1:bc:c4:5f:28:ad:56:a9:38:
         f6:71:a6:ec:6c:f8:71:72:dd:f5:8a:57:dc:5e:ac:00:87:d5:
         0d:bf:81:12:5c:04:4b:91:1c:a4:ce:a1:a2:28:c0:0d:da:ef:
         d1:7e:b1:b2:6c:f0:2a:e4:b6:1a:42:03:ad:20:25:74:1a:d9:
         4a:e0:fc:d2:ec:fc:bb:e9:1b:e4:09:f0:af:a2:2c:29:f6:4d:
         17:3b:6b:7d:45:81:11:f0:1c:69:0a:c9:f0:84:47:58:3e:fa:
         19:65:7c:ad:cb:83:b7:98:6d:c3:f0:23:4e:03:6c:28:a7:06:
         bf:77:88:3a:85:c9:4a:24:5f:8f:29:46:05:43:5f:06:2a:af:
         ef:b6:da:48:58:21:f4:df:d5:12:7a:16:9c:70:45:92:9e:18:
         6e:0e:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 20:27:21 2024 by rpki-client on console-ams.rpki-client.org