Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e20313336373932.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          2k7JWVgFtNOifqm+h+he0Ydcxh8/UxCK0BZlsIgqnKw=
Subject key identifier:   CC:66:A1:A4:1D:99:92:B2:CC:F0:EA:F9:6F:F2:6C:A7:CB:ED:98:D6
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       60006EE1313D6CF2D31228AA4F3FB8B7272D71F4
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 02 Aug 2024 11:24:31 +0000
ROA not before:           Fri 02 Aug 2024 11:19:31 +0000
ROA not after:            Fri 01 Aug 2025 11:24:31 +0000
asID:                     136792
IP address blocks:        216.145.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:00:6e:e1:31:3d:6c:f2:d3:12:28:aa:4f:3f:b8:b7:27:2d:71:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:31 2024 GMT
            Not After : Aug  1 11:24:31 2025 GMT
        Subject: CN=CC66A1A41D9992B2CCF0EAF96FF26CA7CBED98D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:76:cf:c1:1b:86:e8:a9:8d:a6:fe:d5:d9:
                    1d:e8:9e:b7:54:39:d8:28:87:07:b6:1b:7e:70:32:
                    52:14:a0:07:00:cf:1c:54:f8:d9:aa:eb:e5:c2:ae:
                    a9:75:84:1c:c1:81:b8:7f:24:5e:19:55:4d:6e:af:
                    5c:1a:0a:8d:20:87:ec:15:d3:ac:a6:ce:f0:ff:0b:
                    fb:fc:48:56:f5:2b:be:0a:2a:36:b5:ea:32:d8:24:
                    97:3e:e6:64:4f:a3:40:19:0e:e3:75:eb:cb:f4:8c:
                    3b:f4:95:a9:ec:8a:21:fe:1f:06:6c:cb:3e:40:ad:
                    cc:ac:62:f5:f3:b5:74:d5:05:be:5b:72:87:3c:7b:
                    8f:02:be:0c:0b:c5:93:bc:12:d3:e6:45:74:f4:13:
                    64:16:bd:f7:aa:bb:b2:88:52:42:54:25:73:8d:3c:
                    c5:14:5a:90:02:e4:ac:6b:06:db:c5:9c:9e:c7:08:
                    2e:c1:a8:b6:63:63:8a:d0:17:fd:61:45:db:45:cc:
                    84:44:52:39:c2:0b:f9:97:d9:13:3e:ec:3a:2e:f6:
                    a4:eb:96:b9:83:35:d7:7e:0a:d2:52:e2:0b:ec:00:
                    06:f0:56:68:61:3c:a4:0a:73:b0:51:f0:0a:e5:0b:
                    eb:b1:24:b7:13:ce:dd:67:6b:27:a4:95:b0:37:c9:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:66:A1:A4:1D:99:92:B2:CC:F0:EA:F9:6F:F2:6C:A7:CB:ED:98:D6
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:51:30:da:1b:2e:bc:8b:31:b9:ca:81:2a:85:60:59:b6:bd:
         8f:e4:dc:7e:9e:ac:bf:90:84:1d:cc:7f:b2:c2:cc:c1:bf:97:
         a0:3a:48:8a:0a:f3:ed:0c:42:9c:a0:c1:0e:3d:3c:28:dc:aa:
         0f:6a:1e:38:1e:04:d5:26:8d:ea:65:b2:17:33:14:62:c9:e6:
         6e:37:47:80:58:bc:69:e5:c2:eb:29:30:a9:4f:f0:be:7e:bc:
         e8:4e:dd:e3:8e:5c:0a:b6:c3:6b:e3:db:cc:fc:6f:a7:06:53:
         96:bc:a8:b5:3f:bd:ab:77:b1:22:1b:58:d4:b4:a1:f5:74:58:
         e5:3b:86:ca:9b:2a:b7:4c:56:9f:90:98:b3:7f:88:0d:9e:7e:
         77:d9:26:a3:63:df:06:99:ec:b4:2a:6c:7d:a0:31:04:75:ad:
         fb:06:78:aa:e7:e8:ad:e4:27:97:a4:24:35:03:38:a5:10:48:
         17:ab:c1:51:88:e6:01:0c:9f:39:ab:e1:54:9d:e2:5d:e5:8d:
         fc:d7:46:12:f2:2d:cb:57:52:90:4c:ff:b9:c8:39:cf:5e:35:
         28:19:25:7d:8c:ac:00:83:f7:b4:b1:36:b3:5b:6a:d7:13:13:
         d9:30:e5:8f:91:20:92:55:13:90:47:d6:d9:ea:ad:77:91:af:
         15:7a:a1:a4
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUYABu4TE9bPLTEiiqTz+4tyctcfQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTMxWhcNMjUwODAxMTEyNDMx
WjAzMTEwLwYDVQQDEyhDQzY2QTFBNDFEOTk5MkIyQ0NGMEVBRjk2RkYyNkNBN0NC
RUQ5OEQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscp2z8Ebhuip
jab+1dkd6J63VDnYKIcHtht+cDJSFKAHAM8cVPjZquvlwq6pdYQcwYG4fyReGVVN
bq9cGgqNIIfsFdOsps7w/wv7/EhW9Su+Cio2teoy2CSXPuZkT6NAGQ7jdevL9Iw7
9JWp7Ioh/h8GbMs+QK3MrGL187V01QW+W3KHPHuPAr4MC8WTvBLT5kV09BNkFr33
qruyiFJCVCVzjTzFFFqQAuSsawbbxZyexwguwai2Y2OK0Bf9YUXbRcyERFI5wgv5
l9kTPuw6Lvak65a5gzXXfgrSUuIL7AAG8FZoYTykCnOwUfAK5QvrsSS3E87dZ2sn
pJWwN8mmiQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFMxmoaQdmZKyzPDq+W/ybKfL
7ZjWMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMTM4MmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHaMA0G
CSqGSIb3DQEBCwUAA4IBAQA5UTDaGy68izG5yoEqhWBZtr2P5Nx+nqy/kIQdzH+y
wszBv5egOkiKCvPtDEKcoMEOPTwo3KoPah44HgTVJo3qZbIXMxRiyeZuN0eAWLxp
5cLrKTCpT/C+frzoTt3jjlwKtsNr49vM/G+nBlOWvKi1P72rd7EiG1jUtKH1dFjl
O4bKmyq3TFafkJizf4gNnn532SajY98Gmey0Kmx9oDEEda37Bniq5+it5CeXpCQ1
AzilEEgXq8FRiOYBDJ85q+FUneJd5Y3810YS8i3LV1KQTP+5yDnPXjUoGSV9jKwA
g/e0sTazW2rXExPZMOWPkSCSVROQR9bZ6q13ka8VeqGk
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org