Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier:          j2MVrNnsmFzYqPpJ4G4UMdur+oTBQsWH1PJlFKNF4ck=
Subject key identifier:   96:EC:AF:4E:65:FB:1E:57:86:24:99:92:DE:31:A2:9B:75:8E:81:43
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       617EC5EF35192E335D7BBE12183CB306E3912F0F
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
Signing time:             Fri 01 Sep 2023 11:14:31 +0000
ROA not before:           Fri 01 Sep 2023 11:09:31 +0000
ROA not after:            Fri 30 Aug 2024 11:14:31 +0000
asID:                     33538
IP address blocks:        216.145.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7e:c5:ef:35:19:2e:33:5d:7b:be:12:18:3c:b3:06:e3:91:2f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:31 2023 GMT
            Not After : Aug 30 11:14:31 2024 GMT
        Subject: CN=96ECAF4E65FB1E5786249992DE31A29B758E8143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:86:c6:b5:6c:78:22:c9:c8:05:5f:48:ed:
                    84:bb:66:cd:53:5e:36:71:a8:ae:15:e3:80:a3:ee:
                    86:21:97:a3:db:d0:33:57:90:63:0b:d6:a0:8f:83:
                    a7:aa:02:c4:89:31:8c:91:3c:e9:89:d4:f4:fd:12:
                    1d:03:77:47:4f:70:e4:4d:36:a4:bd:f3:f1:f1:79:
                    9e:26:ff:a2:f9:66:62:23:ae:5a:4c:a0:3b:82:b7:
                    66:42:9d:07:6b:9b:d4:a4:0a:5f:0b:54:43:92:9b:
                    ca:a8:0a:2b:56:e3:cc:52:b1:fa:f1:27:59:72:84:
                    2d:99:d8:9a:3f:18:f3:28:cf:a8:99:90:a4:dc:73:
                    ea:2a:e9:4e:3d:1c:3d:d5:c4:1f:d3:46:9e:62:a6:
                    c5:2c:0f:b5:36:a4:c5:4e:98:56:1f:ad:ab:f4:15:
                    06:0b:a2:66:de:04:a4:1d:2a:31:41:bc:ae:dc:28:
                    18:f2:07:81:50:37:5d:b5:fd:31:1a:6e:81:bc:39:
                    07:4b:3a:a4:7d:02:00:74:75:1a:de:b5:b7:79:1a:
                    d4:07:1f:54:15:74:89:c8:2f:2a:3d:07:05:24:71:
                    5f:83:63:b3:66:c2:11:3b:d6:a3:e8:80:7a:4a:2c:
                    c2:bc:44:b9:01:81:2a:44:ff:d9:ea:95:1a:aa:72:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EC:AF:4E:65:FB:1E:57:86:24:99:92:DE:31:A2:9B:75:8E:81:43
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1f:2f:95:19:34:9d:85:86:1f:f7:cf:e8:a8:d7:b8:5c:aa:
         c2:3c:7a:af:da:1d:af:59:b1:cb:cd:37:e5:01:6d:b9:3a:0f:
         6a:5d:b4:d8:0e:24:dc:a9:46:0f:ee:6a:c5:0c:82:78:0e:db:
         20:80:99:f1:df:84:6c:5b:1c:c2:b0:2a:93:1a:b8:f2:bb:50:
         bc:30:b1:9b:ff:76:50:38:67:34:3f:5d:bb:2d:4d:5c:f2:07:
         02:07:b2:cd:3a:a3:a2:be:00:a7:91:a5:8a:5f:df:4c:d8:75:
         3f:ca:ce:22:ae:ac:52:73:f5:0c:9d:ee:86:35:1f:2e:e3:3a:
         1f:08:c6:70:2e:93:4f:9b:a4:ce:df:5d:fe:ef:22:e4:b2:45:
         7d:cf:9b:83:77:1c:3a:27:bc:63:45:ba:0f:d2:9c:1e:63:c1:
         9f:e9:01:6d:39:ad:e0:86:55:e7:65:1d:29:28:93:cc:e7:b2:
         0e:9e:51:36:bc:76:d7:91:7d:b2:c0:75:b1:3e:55:a1:a1:1b:
         e1:e2:29:ff:a7:ad:57:98:a2:7b:6d:d1:f2:a7:ab:57:55:6c:
         93:64:e1:be:63:ab:95:90:9a:5b:cc:af:16:0b:1b:1e:59:24:
         bf:b2:ed:0f:92:af:bb:24:df:79:57:ad:78:7c:15:76:62:52:
         4a:d3:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:41:33 2024 by rpki-client on console-ams.rpki-client.org