Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier:          stmZYxU0P9abOsb/kvZHLtV5zF63poG7miHcuT37SXE=
Subject key identifier:   A2:ED:9A:5C:1F:A9:EA:AE:A5:28:9E:09:48:0C:2F:F0:A7:07:C4:66
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6B7A9A40F44CFAADCAD02CFDED76847996F1CAA2
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa
Signing time:             Fri 01 Sep 2023 11:14:32 +0000
ROA not before:           Fri 01 Sep 2023 11:09:32 +0000
ROA not after:            Fri 30 Aug 2024 11:14:32 +0000
asID:                     33538
IP address blocks:        216.145.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7a:9a:40:f4:4c:fa:ad:ca:d0:2c:fd:ed:76:84:79:96:f1:ca:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:32 2023 GMT
            Not After : Aug 30 11:14:32 2024 GMT
        Subject: CN=A2ED9A5C1FA9EAAEA5289E09480C2FF0A707C466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:80:dd:b4:0c:a6:47:9d:d9:70:c1:9e:1a:
                    f0:42:97:06:6e:28:00:ff:bf:4a:04:d1:ed:30:03:
                    4e:d3:32:a4:a8:b6:47:2c:05:6b:03:1c:a2:2e:17:
                    36:d9:ed:d2:96:4f:81:66:19:04:e4:87:07:39:b3:
                    41:a3:7e:36:ed:c0:24:17:2a:b2:28:a4:e5:a0:0f:
                    98:27:29:58:09:fb:1d:b9:21:12:78:1e:80:18:29:
                    27:cf:b8:40:ec:67:91:62:34:f0:12:c9:fb:bc:bf:
                    1d:2c:0a:20:fd:0b:ca:88:0b:1b:ee:b7:bb:e6:79:
                    0e:7c:b5:5c:bc:a2:5a:e4:1a:6e:6e:7d:b8:11:bc:
                    80:25:78:b7:4c:f8:94:43:fe:6a:2a:a7:3b:be:b2:
                    2f:60:b7:9e:e0:f3:96:24:bf:64:73:91:d5:26:57:
                    76:7e:3d:ec:c7:de:3f:42:70:dc:4a:32:cd:a9:ac:
                    b3:65:46:ae:eb:17:d0:d3:41:42:d3:ff:07:88:68:
                    f6:27:a6:2f:fe:a8:84:8a:cd:ef:16:b0:67:59:0d:
                    3e:9a:bd:2c:a3:23:51:46:43:e7:fe:f3:4f:84:70:
                    b1:4f:6b:ca:66:f9:59:da:26:79:ca:ed:36:3f:bf:
                    70:39:49:14:9e:d1:87:3d:a0:4d:95:39:7c:80:26:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:ED:9A:5C:1F:A9:EA:AE:A5:28:9E:09:48:0C:2F:F0:A7:07:C4:66
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:84:38:57:d6:c2:2f:ca:90:74:18:0e:a9:f4:7b:12:b5:
         3d:d3:d4:d2:8d:c6:9b:3e:55:17:0b:a6:37:e8:95:00:88:4c:
         23:9f:e7:00:c3:4f:3d:72:cc:bb:5b:33:2e:c8:62:74:ce:01:
         c5:38:86:88:22:ff:ec:b7:2f:3c:fa:82:a7:d5:00:6b:2c:e8:
         7c:14:f2:21:4e:ce:26:87:34:3d:ea:d6:bb:62:01:bd:25:06:
         a5:98:1a:89:cb:45:31:16:58:07:eb:da:fe:e4:a9:94:66:c4:
         89:84:61:2a:5a:83:d6:22:7e:23:93:17:a1:34:b0:97:62:5e:
         b7:d5:46:ea:b6:36:07:69:2e:30:0d:09:55:da:d2:10:b7:ed:
         97:28:35:8e:87:f9:4c:72:be:1a:22:5e:78:3c:e7:68:6d:ce:
         db:0b:5c:55:1f:0f:2d:e9:81:6e:9e:f7:65:af:75:80:2a:24:
         ed:c5:44:53:81:25:7b:d6:24:29:f1:12:72:86:da:51:54:1a:
         ef:d4:1a:70:6f:11:0c:d3:e5:64:65:b3:e5:61:50:85:46:f2:
         5a:43:ae:ff:94:3e:9a:04:60:4f:3b:82:80:cf:6f:00:0d:f0:
         38:0c:81:f9:50:0d:91:54:9e:c2:51:d2:07:2a:f6:8e:86:ac:
         4f:79:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org