Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231342e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          HS7gWvUpKogZ/VywfuFtsbtMCau5Ffw78dTXPZpJC10=
Subject key identifier:   19:A4:41:01:18:0E:1D:F6:CF:36:80:53:11:E5:7A:1F:78:C8:0A:F8
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       4C7699A498786DE7B5E5C72B92FCAAF1629F11F6
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:32 +0000
ROA not before:           Fri 02 Aug 2024 11:19:32 +0000
ROA not after:            Fri 01 Aug 2025 11:24:32 +0000
asID:                     397726
IP address blocks:        216.145.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:76:99:a4:98:78:6d:e7:b5:e5:c7:2b:92:fc:aa:f1:62:9f:11:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:32 2024 GMT
            Not After : Aug  1 11:24:32 2025 GMT
        Subject: CN=19A44101180E1DF6CF36805311E57A1F78C80AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:b5:af:b7:85:bf:11:c5:82:a7:3e:1f:4a:
                    d4:5e:b1:4b:59:d4:fe:70:f2:e8:5c:8c:50:c2:16:
                    f4:05:f3:4b:a2:95:d9:a1:68:24:5c:d4:94:23:ce:
                    55:76:51:58:4f:d7:f6:26:64:60:c3:30:43:6f:c2:
                    93:db:8b:36:c4:cd:f5:7a:f0:75:71:0b:53:4b:4e:
                    5a:72:10:3f:a3:b0:ed:7b:9c:c2:dc:63:1b:55:06:
                    90:fb:01:51:6c:66:d5:fe:32:f2:04:ca:bd:04:87:
                    8e:c9:2e:3b:85:4b:28:ae:0b:39:03:9a:ad:cc:c8:
                    19:6b:a3:ef:db:3a:e6:3b:c1:ff:ba:3b:cd:9a:be:
                    e6:22:df:5f:5a:4a:27:c6:f6:08:30:75:5b:00:e9:
                    d0:61:26:e6:6d:c4:b2:49:ef:76:50:a2:4b:38:0e:
                    d7:3d:ae:ea:e6:59:4b:b7:4b:41:22:bf:5b:51:d1:
                    ef:01:49:55:27:b7:80:2e:77:f5:14:e5:91:7b:5a:
                    9c:7a:1f:f1:0d:88:a7:9d:61:01:84:85:8a:68:4f:
                    17:3d:19:59:ad:39:f8:7c:2a:63:86:e4:b5:f8:ef:
                    06:de:40:6c:e6:7e:98:9b:95:c4:a0:28:f3:b1:d3:
                    8c:0d:64:0f:8a:50:ab:0f:87:4c:82:d0:05:72:cd:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A4:41:01:18:0E:1D:F6:CF:36:80:53:11:E5:7A:1F:78:C8:0A:F8
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:99:a7:00:87:74:99:1a:3a:28:d6:cc:f0:48:a9:c3:46:fe:
         08:88:b7:a0:8b:20:2a:a6:df:88:ae:4b:f4:4d:1a:7f:a1:c8:
         96:4d:41:41:4a:4c:bb:3d:2c:12:24:d1:51:ff:c0:55:78:e3:
         b6:a7:1e:3f:33:14:73:79:0e:ef:c4:93:9b:44:32:88:38:94:
         bf:fe:9a:37:e8:2e:64:85:37:b3:23:7a:38:26:a4:12:fe:60:
         ca:b4:8d:b1:97:f0:ac:1c:3d:23:ea:b6:d1:8f:4b:14:9a:77:
         ef:a2:fd:05:01:4c:88:b0:a0:b4:1b:ba:7c:d3:e5:e8:4d:81:
         44:20:b5:2f:4a:d6:3e:84:bf:b3:b1:85:d6:79:a0:e3:87:e5:
         41:5e:bc:87:c9:0c:3a:6e:61:0f:42:96:79:85:15:98:93:52:
         9e:30:93:fa:e8:d1:7a:2e:87:f1:03:d9:3a:37:ef:be:f5:71:
         98:78:da:59:a7:aa:38:38:9c:f5:53:12:21:20:b9:a5:c4:0e:
         5c:27:62:ec:5d:41:d5:88:46:07:7f:68:e3:00:f7:0f:67:9e:
         8d:c5:24:ed:66:52:8b:e9:a9:fa:1e:45:4d:0a:2c:27:34:0b:
         9a:ce:da:9c:36:c8:b6:ef:ec:e7:bf:31:6a:16:1f:2e:3d:9b:
         b7:aa:75:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org