Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231342e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          O2+2PgkQGJ5XSzYnOt21X0F6U2ROxubE1nmOxbDfxuE=
Subject key identifier:   9E:06:15:86:F0:0A:F2:EA:D1:F1:A6:C8:F5:EB:1B:C5:73:CE:C5:13
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       712BEAD23F91208465A166B0DF79A7C9014094FC
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:27 +0000
ROA not before:           Fri 02 Aug 2024 11:19:27 +0000
ROA not after:            Fri 01 Aug 2025 11:24:27 +0000
asID:                     397726
IP address blocks:        216.145.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2b:ea:d2:3f:91:20:84:65:a1:66:b0:df:79:a7:c9:01:40:94:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:27 2024 GMT
            Not After : Aug  1 11:24:27 2025 GMT
        Subject: CN=9E061586F00AF2EAD1F1A6C8F5EB1BC573CEC513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:7a:7a:c9:37:b6:39:01:fb:10:3d:e0:a7:
                    b5:27:e0:cd:5f:4a:1d:4c:c5:c5:a5:00:9e:19:71:
                    9d:97:e2:e6:31:68:23:1b:a9:88:1c:9b:ab:05:5a:
                    b1:f9:78:30:c0:9a:52:8d:e5:e7:ac:2f:8a:8b:aa:
                    b4:9e:ea:d1:8c:6b:b2:c6:a0:eb:15:7f:5f:80:b9:
                    47:0c:1b:71:fe:fe:33:68:b0:6e:c1:95:da:5d:36:
                    47:6e:af:2b:1e:46:ca:d3:51:d3:70:f0:4c:39:a0:
                    22:52:b5:39:65:fd:6f:43:2a:aa:f7:4e:cb:4e:90:
                    c7:fb:8f:ac:2d:59:3c:81:ca:e0:f8:9d:5c:a4:fd:
                    37:07:14:5b:01:bd:f5:26:0d:c8:42:c9:49:7f:ae:
                    54:b6:8d:6e:db:c8:52:ff:60:1f:ca:d0:2d:91:38:
                    a6:04:9a:41:68:a8:f5:1c:9f:3e:64:f7:8e:32:17:
                    35:5c:69:78:1b:8f:a1:ac:eb:ef:3a:4b:15:1a:bc:
                    d2:0e:a8:9c:30:c0:2b:d2:9b:3f:eb:6b:18:b9:bf:
                    75:4f:f0:33:a3:fa:51:6b:47:b0:5b:33:4a:a7:bc:
                    a9:b3:fd:15:02:1c:cc:74:e3:0d:9c:e5:d6:37:b0:
                    f3:fe:64:b1:6e:cf:43:6d:81:f0:65:71:c4:b1:87:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:15:86:F0:0A:F2:EA:D1:F1:A6:C8:F5:EB:1B:C5:73:CE:C5:13
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:f2:c7:06:37:fc:9e:2d:51:d4:a7:86:63:5b:ef:e1:c7:
         89:19:50:44:40:c0:25:52:03:61:58:69:ad:c6:be:e1:de:7f:
         a3:4c:a9:7d:02:95:b6:08:80:e5:91:1b:98:5b:6f:98:d1:98:
         0c:f1:01:80:b8:d1:37:61:c0:65:86:73:21:e7:e8:4d:ed:77:
         2f:3e:67:86:80:72:8d:09:e2:d3:2c:f7:02:30:24:7a:ee:89:
         de:6b:58:23:9e:79:46:91:cc:d4:cf:1b:ce:d5:79:fb:19:ff:
         fa:14:ae:01:04:84:df:c4:9a:4c:ff:71:26:26:41:c6:1a:92:
         15:72:b1:36:50:6c:32:0d:07:ea:9d:5e:0e:ef:6d:b1:a5:00:
         83:69:be:5b:90:c1:2d:80:7f:f9:de:b0:a9:83:e0:7c:cd:aa:
         ea:15:93:9e:4d:3a:dc:d5:0b:35:98:7a:d7:20:b1:6d:1a:b4:
         2a:e1:87:fa:c7:11:c5:e1:7e:da:4c:8b:aa:75:90:6c:c0:63:
         af:85:93:5e:32:52:0d:fa:e3:c0:0b:f0:14:d4:c7:f5:bd:d4:
         f8:2e:8c:c3:fc:fe:c7:7e:72:93:e5:a6:ab:38:3e:30:e2:0c:
         60:9a:83:a2:2e:01:f3:b6:ee:46:34:c3:3d:1d:7e:47:98:fc:
         64:6a:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org