Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa
File:                     3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          trD/MJgWEjw0KaRUDn/KuE8Nib3f7rEIvyVIzfYrwXk=
Subject key identifier:   E0:5A:23:F0:23:BC:83:D3:F1:B2:BA:33:BC:68:66:7B:34:AA:34:59
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       124168880DB199F7B01E4CD66901722B862DCD5D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 02 Aug 2024 11:24:32 +0000
ROA not before:           Fri 02 Aug 2024 11:19:32 +0000
ROA not after:            Fri 01 Aug 2025 11:24:32 +0000
asID:                     30031
IP address blocks:        216.145.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:41:68:88:0d:b1:99:f7:b0:1e:4c:d6:69:01:72:2b:86:2d:cd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:32 2024 GMT
            Not After : Aug  1 11:24:32 2025 GMT
        Subject: CN=E05A23F023BC83D3F1B2BA33BC68667B34AA3459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:43:30:bf:56:9f:35:5b:fa:cc:b5:ae:dc:
                    d5:bd:ba:e3:83:70:3b:5f:fc:4b:9c:c9:bd:ff:70:
                    0e:66:b3:0c:2b:8b:37:46:d9:d2:dc:13:ef:fc:3c:
                    d2:53:c5:6d:af:0e:12:ce:94:40:e3:19:47:0c:1a:
                    3b:7f:26:f3:2d:c3:0a:d4:f3:f0:de:5b:4f:93:3b:
                    a4:4e:f5:a8:f3:c4:02:13:98:fe:ec:5c:25:99:57:
                    0f:ce:00:1a:6f:7f:dd:f3:5f:f9:4d:6f:9a:cc:e0:
                    d7:84:15:c8:5a:56:7f:f4:e4:61:11:95:71:44:e4:
                    72:7f:14:d6:88:4c:e5:2d:b6:45:f1:2c:f5:2f:c4:
                    f8:8a:86:94:3a:f3:0b:c3:cb:3e:26:42:e2:72:82:
                    5d:b3:d2:e4:fa:5f:34:f0:db:41:ce:61:21:9f:bb:
                    07:22:07:ce:12:23:1e:5b:9d:48:94:52:13:61:ec:
                    12:ca:c5:10:ca:82:4a:a5:df:96:68:d2:91:ed:1c:
                    b2:f0:08:be:9c:cf:0a:e8:b4:4a:c2:41:e0:ea:cb:
                    10:ff:95:af:24:5e:5a:d4:d6:fc:c1:25:b2:f6:70:
                    92:f8:e3:5b:16:af:6d:4d:92:9b:75:8a:59:64:15:
                    8d:4d:dc:58:b5:fa:20:c3:82:09:a0:6d:e3:ce:cc:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5A:23:F0:23:BC:83:D3:F1:B2:BA:33:BC:68:66:7B:34:AA:34:59
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:13:92:bb:ee:0d:3f:4c:64:de:7e:b1:cc:82:90:54:46:90:
         0b:d8:0c:fc:46:62:72:f6:2b:79:40:4e:55:6e:31:92:f0:b6:
         0c:95:55:0a:e2:3a:eb:5c:af:96:6b:48:10:67:c3:8b:4e:9f:
         d8:05:54:fa:60:a0:62:bc:c7:84:90:dc:0e:63:1d:08:5f:3a:
         2a:8a:ca:aa:a6:bf:a8:44:5b:fe:be:3c:6d:05:3e:91:42:6a:
         82:fa:c3:c3:f9:29:6d:93:a1:63:8f:b0:71:2a:54:40:f6:b9:
         ca:c6:f0:b7:ba:c7:e2:b7:1f:8a:a3:6c:75:90:a7:c0:c1:23:
         9e:fd:e2:7e:bd:a0:7a:eb:51:17:c2:6b:dd:29:f9:f7:5f:20:
         cb:5c:f7:33:ed:52:90:58:34:e5:34:99:86:9c:b9:1d:a2:23:
         57:7b:27:b0:74:58:b8:a2:97:45:20:5c:3d:15:d6:84:a0:43:
         28:6c:31:0f:f1:83:8b:3e:36:da:7b:8d:37:94:e2:a0:cb:92:
         2c:b4:2d:ca:b6:10:f1:63:6d:5e:86:c1:7f:59:3e:9a:4c:46:
         de:f6:52:2b:75:7f:5e:f6:5e:34:b5:f0:e1:dc:18:4d:39:86:
         d5:0d:d9:37:6f:b9:5c:99:ad:fa:30:75:de:9c:d6:37:32:9c:
         0d:b8:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org