Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203330303331.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          JyD/jk6qeCpG2qejBR5uCDmPOiZV+3ZQstYySBQ66yI=
Subject key identifier:   96:1D:B3:DF:1F:4E:15:0D:51:FB:AC:90:6B:44:FC:D8:8B:D0:2D:7E
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       31E46ED1B657A2F617244EF72B9398BDDAE056FA
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:31 +0000
ROA not before:           Fri 01 Sep 2023 11:09:31 +0000
ROA not after:            Fri 30 Aug 2024 11:14:31 +0000
asID:                     30031
IP address blocks:        216.145.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e4:6e:d1:b6:57:a2:f6:17:24:4e:f7:2b:93:98:bd:da:e0:56:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:31 2023 GMT
            Not After : Aug 30 11:14:31 2024 GMT
        Subject: CN=961DB3DF1F4E150D51FBAC906B44FCD88BD02D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:d4:3d:1f:80:53:96:8e:d1:71:de:1c:a0:
                    e2:1e:17:61:27:6b:b7:d1:6c:64:a9:2c:47:1c:50:
                    e5:1e:ad:46:50:63:38:9f:7c:38:0c:0f:15:b7:07:
                    fc:9b:e8:ec:27:4d:e5:ea:42:15:55:59:e0:9a:5d:
                    db:b8:4e:74:58:e1:fa:59:cf:07:75:70:ed:16:b3:
                    05:c8:54:89:f3:3a:09:58:f4:92:d5:f1:e4:11:9c:
                    85:d8:6c:09:98:48:e4:fa:f2:44:e0:79:f9:9b:92:
                    eb:c8:84:08:9c:4a:06:54:7a:f8:96:18:3f:20:ba:
                    3a:07:20:3f:7a:c4:3f:a2:71:82:e6:62:f8:4d:42:
                    32:c5:37:14:2d:40:f5:63:56:c8:01:f9:4c:dc:9c:
                    bb:c5:8b:ac:b5:bd:a9:19:ab:7c:d5:21:ae:de:87:
                    ca:fc:b3:48:2e:20:66:ee:2e:7b:6a:16:63:47:fc:
                    66:b0:f8:14:f4:34:d8:a8:23:4e:5b:0d:b6:d1:ce:
                    3c:a7:95:41:19:15:a8:b6:23:fc:f2:b9:89:9a:dc:
                    db:da:60:a9:de:54:87:f2:e3:78:6d:4c:e5:57:60:
                    8d:bd:0c:bc:9a:63:e3:9b:55:d5:7e:c8:dc:82:38:
                    7b:26:05:9b:04:55:d4:64:f9:60:9c:99:a3:4a:21:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1D:B3:DF:1F:4E:15:0D:51:FB:AC:90:6B:44:FC:D8:8B:D0:2D:7E
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d5:c1:8e:1b:05:cb:04:f6:00:0f:9f:e3:1c:a7:a6:15:de:
         a2:77:ce:1d:ec:4f:41:f4:9d:50:cf:d8:aa:8b:49:75:eb:96:
         36:d7:49:e2:79:b1:76:f2:74:a7:e3:fa:34:87:b2:f5:96:32:
         e1:1f:50:70:9d:3b:56:e7:ca:e6:76:0e:93:f4:5b:63:76:70:
         14:63:13:93:df:1c:a4:dc:49:dd:10:e4:e9:1e:fa:f2:38:3c:
         1b:23:89:1a:00:5f:a4:ef:06:85:c9:b0:5f:2b:5d:63:fe:22:
         dd:7b:c6:7e:d5:46:a8:9f:bd:62:85:7e:ed:54:c4:dc:eb:7a:
         54:6d:7e:f1:be:57:ea:10:71:2c:bf:90:4a:c3:17:9e:2e:31:
         ab:a8:69:18:76:81:ce:83:83:12:46:8a:d6:6a:ac:59:ea:1a:
         9c:94:9a:f1:1e:80:7a:55:3f:de:2a:89:7e:db:02:a3:f7:bf:
         70:2d:14:49:63:1b:b6:1d:d4:76:f0:d9:aa:58:a6:46:55:83:
         40:24:21:56:e7:80:ce:9b:7d:7e:73:ae:69:8d:57:74:80:e5:
         f0:b6:8e:cb:1c:eb:3a:2e:46:07:cd:a5:39:72:5d:d7:81:58:
         23:49:c0:1a:47:93:b8:f5:28:f4:51:42:a8:28:3a:36:b6:5c:
         d6:2c:d8:44
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUMeRu0bZXovYXJE73K5OYvdrgVvowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMxWhcNMjQwODMwMTExNDMx
WjAzMTEwLwYDVQQDEyg5NjFEQjNERjFGNEUxNTBENTFGQkFDOTA2QjQ0RkNEODhC
RDAyRDdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+jUPR+AU5aO
0XHeHKDiHhdhJ2u30WxkqSxHHFDlHq1GUGM4n3w4DA8Vtwf8m+jsJ03l6kIVVVng
ml3buE50WOH6Wc8HdXDtFrMFyFSJ8zoJWPSS1fHkEZyF2GwJmEjk+vJE4Hn5m5Lr
yIQInEoGVHr4lhg/ILo6ByA/esQ/onGC5mL4TUIyxTcULUD1Y1bIAflM3Jy7xYus
tb2pGat81SGu3ofK/LNILiBm7i57ahZjR/xmsPgU9DTYqCNOWw220c48p5VBGRWo
tiP88rmJmtzb2mCp3lSH8uN4bUzlV2CNvQy8mmPjm1XVfsjcgjh7JgWbBFXUZPlg
nJmjSiEADQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJYds98fThUNUfuskGtE/NiL
0C1+MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/
MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG
SIb3DQEBCwUAA4IBAQCd1cGOGwXLBPYAD5/jHKemFd6id84d7E9B9J1Qz9iqi0l1
65Y210niebF28nSn4/o0h7L1ljLhH1BwnTtW58rmdg6T9FtjdnAUYxOT3xyk3End
EOTpHvryODwbI4kaAF+k7waFybBfK11j/iLde8Z+1Uaon71ihX7tVMTc63pUbX7x
vlfqEHEsv5BKwxeeLjGrqGkYdoHOg4MSRorWaqxZ6hqclJrxHoB6VT/eKol+2wKj
979wLRRJYxu2HdR28NmqWKZGVYNAJCFW54DOm31+c65pjVd0gOXwto7LHOs6LkYH
zaU5cl3XgVgjScAaR5O49Sj0UUKoKDo2tlzWLNhE
-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org