Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa
File:                     3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          MyDmDy9dHOQs9Bu+a2PsRHonUM05CpMzFenmk+CpDMM=
Subject key identifier:   8A:B0:67:EA:EC:A7:B3:DC:8B:13:9A:7E:96:CA:F8:46:75:34:25:26
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6ED1B173B86222C9D7DC49B7FA77A60D8E41DCB0
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:28 +0000
ROA not before:           Fri 01 Sep 2023 11:09:28 +0000
ROA not after:            Fri 30 Aug 2024 11:14:28 +0000
asID:                     30031
IP address blocks:        216.145.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d1:b1:73:b8:62:22:c9:d7:dc:49:b7:fa:77:a6:0d:8e:41:dc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:28 2023 GMT
            Not After : Aug 30 11:14:28 2024 GMT
        Subject: CN=8AB067EAECA7B3DC8B139A7E96CAF84675342526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3c:bd:27:a9:3d:9a:f0:4d:61:6f:de:ec:5b:
                    e1:91:f9:02:8e:41:e9:3d:df:8a:af:ed:59:30:db:
                    e1:d8:2a:2e:d1:c6:45:d5:57:ea:9e:38:b1:b0:f3:
                    9c:a2:6f:53:45:18:cb:34:5d:b7:55:fd:bc:3b:24:
                    66:97:aa:ed:f8:9b:7a:92:a7:8b:44:c3:13:52:3f:
                    e3:85:93:62:ad:e4:28:44:a0:f1:0e:08:d3:63:5e:
                    7f:aa:77:08:ee:3f:c2:cb:c4:ac:f8:a7:cb:98:cd:
                    7e:1b:f7:1b:a1:0a:00:5f:d7:13:bb:20:c0:1a:7f:
                    48:cf:fc:66:db:0b:08:f8:a4:6f:84:54:51:fa:4a:
                    d5:f6:2b:44:9f:eb:0b:ea:c6:72:19:56:cc:4d:7b:
                    69:fa:d4:f1:b2:c4:8b:92:bb:cb:57:6e:8e:2e:b3:
                    c2:72:3a:39:ef:cb:62:d0:7e:fa:c6:86:a7:b5:1a:
                    3a:0f:33:38:03:78:82:c4:5e:fe:1d:ec:a2:02:10:
                    a2:ea:cc:3f:2d:89:eb:40:54:0c:66:87:f5:33:b1:
                    de:0e:ab:ca:cf:c8:c6:a6:78:e0:11:b3:94:a0:c0:
                    12:47:18:21:7d:aa:fb:8c:c5:33:5d:9b:dd:00:13:
                    b7:da:98:a2:25:b3:02:94:4a:55:f0:dc:f8:8f:46:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B0:67:EA:EC:A7:B3:DC:8B:13:9A:7E:96:CA:F8:46:75:34:25:26
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232312e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:fc:51:44:89:af:db:20:96:80:90:41:fa:52:52:55:e0:dc:
         e2:37:6c:61:fa:77:8a:99:9c:fa:fa:2c:b9:27:9a:dc:3a:9c:
         6e:79:55:e4:ff:a1:95:27:a9:0b:f0:82:89:c4:5c:7b:68:4a:
         d6:ed:21:31:1b:42:23:e6:ba:7f:7e:90:84:a1:63:0b:c3:9e:
         5f:6a:6b:ce:54:7f:94:50:e3:cb:32:a2:da:fa:44:8a:16:56:
         47:8b:a3:b2:c0:a4:f2:53:f8:1b:10:52:ba:bf:77:16:8c:db:
         7e:c6:b7:ed:42:b8:21:22:29:76:76:66:fa:7c:b8:ca:13:3f:
         05:43:49:cb:cc:2a:e3:8f:b0:d6:d1:b7:a4:36:30:7c:f4:e7:
         26:ee:4a:6b:c1:56:a3:76:2f:b3:8d:58:b7:4d:a9:3e:b7:92:
         89:ed:75:c7:57:76:2f:1a:b3:57:29:2c:51:ac:63:ef:49:f8:
         11:e5:f1:a6:7b:ed:f3:d5:69:3d:07:2e:37:12:0f:ce:68:dd:
         0e:93:9b:92:8d:3e:5e:05:cb:2b:29:21:59:57:62:04:ad:7c:
         b4:0d:69:d9:29:1b:d7:8f:b0:f9:c1:31:53:f0:6c:45:2d:cd:
         3f:18:3c:60:9d:46:01:23:d1:d4:78:06:ed:e7:87:ba:5b:c0:
         b0:25:c7:5f
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUbtGxc7hiIsnX3Em3+nemDY5B3LAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI4WhcNMjQwODMwMTExNDI4
WjAzMTEwLwYDVQQDEyg4QUIwNjdFQUVDQTdCM0RDOEIxMzlBN0U5NkNBRjg0Njc1
MzQyNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jy9J6k9mvBN
YW/e7FvhkfkCjkHpPd+Kr+1ZMNvh2Cou0cZF1VfqnjixsPOcom9TRRjLNF23Vf28
OyRml6rt+Jt6kqeLRMMTUj/jhZNireQoRKDxDgjTY15/qncI7j/Cy8Ss+KfLmM1+
G/cboQoAX9cTuyDAGn9Iz/xm2wsI+KRvhFRR+krV9itEn+sL6sZyGVbMTXtp+tTx
ssSLkrvLV26OLrPCcjo578ti0H76xoantRo6DzM4A3iCxF7+HeyiAhCi6sw/LYnr
QFQMZof1M7HeDqvKz8jGpnjgEbOUoMASRxghfar7jMUzXZvdABO32piiJbMClEpV
8Nz4j0YzdQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFIqwZ+rsp7PcixOafpbK+EZ1
NCUmMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/
MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHdMA0GCSqG
SIb3DQEBCwUAA4IBAQAP/FFEia/bIJaAkEH6UlJV4NziN2xh+neKmZz6+iy5J5rc
OpxueVXk/6GVJ6kL8IKJxFx7aErW7SExG0Ij5rp/fpCEoWMLw55famvOVH+UUOPL
MqLa+kSKFlZHi6OywKTyU/gbEFK6v3cWjNt+xrftQrghIil2dmb6fLjKEz8FQ0nL
zCrjj7DW0bekNjB89Ocm7kprwVajdi+zjVi3Tak+t5KJ7XXHV3YvGrNXKSxRrGPv
SfgR5fGme+3z1Wk9By43Eg/OaN0Ok5uSjT5eBcsrKSFZV2IErXy0DWnZKRvXj7D5
wTFT8GxFLc0/GDxgnUYBI9HUeAbt54e6W8CwJcdf
-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org