Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231352e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231352e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          B7Ag2k3RrM9uLB4/9rI/oAFAvBuYdZYKU/aJ8TyRMuI=
Subject key identifier:   64:6C:5D:E3:C4:58:3E:80:8F:4E:0B:7E:61:EA:C1:CA:8C:D4:B3:04
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       61001B076C0EA2348225FE4B46C6047F89A396B3
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231352e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:25 +0000
ROA not before:           Fri 01 Sep 2023 11:09:25 +0000
ROA not after:            Fri 30 Aug 2024 11:14:25 +0000
asID:                     397726
IP address blocks:        216.145.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Apr 2024 20:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:00:1b:07:6c:0e:a2:34:82:25:fe:4b:46:c6:04:7f:89:a3:96:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:25 2023 GMT
            Not After : Aug 30 11:14:25 2024 GMT
        Subject: CN=646C5DE3C4583E808F4E0B7E61EAC1CA8CD4B304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:61:90:f9:f7:0f:5a:80:87:d2:26:66:8a:
                    e3:98:11:6f:ae:7a:48:84:c2:8f:46:82:9d:52:02:
                    8f:bf:b2:8f:90:b4:c9:1d:2d:f2:cc:37:78:f8:ce:
                    b5:78:cc:aa:5b:02:3a:d7:e3:4b:61:0a:03:9b:dd:
                    a6:f1:7b:52:9e:9e:db:85:fb:c6:b6:a7:5f:cd:a0:
                    51:ce:5c:54:21:e2:bc:82:da:7e:aa:c3:76:99:3d:
                    f0:b1:ac:c7:a9:f9:18:98:27:3f:64:b9:b4:ae:94:
                    43:dd:7f:98:fa:47:ec:16:91:5a:6e:cd:ad:77:80:
                    e4:4c:ee:cc:2f:40:90:9a:6f:b9:ca:2e:fa:7a:6b:
                    55:5a:33:08:a1:4e:07:8a:be:01:06:62:9d:72:aa:
                    05:ae:1b:a5:11:43:b2:50:73:95:0b:d6:a8:48:cb:
                    76:07:19:5e:c8:87:63:e8:e1:27:96:6e:67:14:63:
                    3c:aa:25:92:00:45:eb:2a:97:e4:ce:0c:51:b4:88:
                    90:16:e0:0a:44:b1:a3:61:2c:6a:5b:9f:9e:57:54:
                    93:fc:88:05:d5:7b:1a:9f:a3:2b:94:21:19:39:68:
                    81:1f:79:77:87:53:a7:a4:f1:99:f3:43:e7:01:57:
                    66:b4:be:33:83:0d:13:05:69:f6:5d:00:0f:a3:9e:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6C:5D:E3:C4:58:3E:80:8F:4E:0B:7E:61:EA:C1:CA:8C:D4:B3:04
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231352e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:81:e5:03:ea:af:38:e8:0b:ef:9e:02:28:dc:0e:9a:ea:bd:
         c8:ce:7e:67:88:c8:b7:73:07:c9:12:20:7f:0b:42:56:20:4d:
         a1:5b:2b:20:a8:07:b2:ab:93:70:68:46:e8:db:c7:f9:44:63:
         ef:75:87:af:83:0f:26:46:ab:c4:8d:d2:f6:f2:b8:96:cc:b6:
         91:f3:0f:a8:6b:46:db:e2:b0:65:7f:a9:cb:a7:a5:cb:54:ba:
         0c:e7:f1:b1:44:dd:0a:47:24:e4:e4:00:72:f5:ea:ba:2f:a9:
         af:27:25:e3:17:1a:ef:de:c4:e1:34:b0:49:25:89:82:90:52:
         39:d6:a1:7a:1a:cc:b9:d7:eb:13:f3:b2:b3:02:f9:ce:e4:b1:
         e0:a3:ae:0f:7b:f8:47:6d:8b:1a:2a:b0:f5:99:95:6e:ad:42:
         76:fe:a4:38:ca:19:ca:95:f9:61:47:32:e0:38:5e:d1:a0:ea:
         84:76:d2:ac:52:19:e1:87:9e:b9:61:30:43:44:e3:0c:bc:2d:
         68:5b:4a:3e:23:48:fd:e6:d8:38:06:b1:10:2a:ab:86:06:23:
         13:e6:1b:69:0d:88:26:1b:2e:ec:9e:b7:33:18:1a:48:bb:1c:
         92:dc:1b:e9:ea:58:09:c5:60:bd:b9:13:d3:61:2b:f6:64:3f:
         b2:de:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:22 2024 by rpki-client on console-fra.rpki-client.org