Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203339353838.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier:          P5sbAnNpiddgS7+IWNp9rnfKvng3KM3vAsq5F80gx84=
Subject key identifier:   BA:B7:2D:B5:5D:82:8D:AD:5D:08:0C:C9:D4:47:72:54:DA:E4:1B:71
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       3A35D2EE687135122C3957088E0EE0DD353A7005
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203339353838.roa
Signing time:             Fri 02 Aug 2024 11:24:27 +0000
ROA not before:           Fri 02 Aug 2024 11:19:27 +0000
ROA not after:            Fri 01 Aug 2025 11:24:27 +0000
asID:                     39588
IP address blocks:        216.145.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:35:d2:ee:68:71:35:12:2c:39:57:08:8e:0e:e0:dd:35:3a:70:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:27 2024 GMT
            Not After : Aug  1 11:24:27 2025 GMT
        Subject: CN=BAB72DB55D828DAD5D080CC9D4477254DAE41B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:ed:26:40:a5:9d:9b:d5:53:8d:92:35:f0:
                    72:aa:a4:f4:56:ba:06:24:d0:8b:b5:00:59:96:23:
                    03:5b:47:28:48:ac:36:11:9b:29:90:07:a0:ba:d1:
                    da:80:2e:2a:88:46:c3:7a:72:f7:d6:09:63:b1:06:
                    4a:85:7d:ff:f4:28:47:92:88:5f:86:6b:92:e8:01:
                    b1:89:e2:e3:09:7d:ba:d6:39:a7:f4:a9:c7:62:5b:
                    ae:78:17:0c:4f:8f:8d:f1:84:46:f8:39:fb:2b:e2:
                    4c:0c:56:1d:48:97:b4:7d:d0:c0:c2:be:39:33:4f:
                    2e:e3:ad:8d:5b:a0:6b:2e:6c:03:6d:cf:2c:1f:7e:
                    22:16:49:a9:10:81:e9:1f:aa:56:f7:6e:d0:6a:b2:
                    5b:ff:ad:75:1e:f9:7e:82:41:a2:61:54:f2:ea:6d:
                    fc:92:ea:d3:8a:43:77:e9:b8:ad:3d:6e:ab:6d:19:
                    a3:77:ec:d0:3c:15:a9:c9:19:9b:17:4f:de:f0:c1:
                    09:69:3d:03:7d:fb:0d:ca:42:68:23:40:77:68:ff:
                    fb:0f:f5:92:64:26:26:62:bd:4b:5f:25:f2:28:69:
                    cc:69:d6:7a:b8:24:80:44:9f:a4:a3:ef:bc:2e:31:
                    48:4c:47:68:d4:fd:7c:ad:4a:98:b6:26:bc:99:26:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B7:2D:B5:5D:82:8D:AD:5D:08:0C:C9:D4:47:72:54:DA:E4:1B:71
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203339353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:41:1d:17:db:3a:11:be:7b:5e:c4:78:80:cd:22:58:7a:
         8d:91:ac:85:14:fe:c4:1c:8b:8a:3c:3c:f8:cd:a7:d0:ee:e5:
         73:97:0d:e1:d2:28:24:9f:74:73:a2:19:42:d2:5b:8f:9f:9c:
         f6:3d:43:1b:03:90:33:cd:6d:67:a9:0c:99:6c:d3:0a:29:06:
         12:b1:39:05:25:92:87:c2:a4:96:ba:61:e3:5a:56:7b:31:51:
         80:b4:0a:8a:fb:c7:05:09:d8:40:61:a9:24:ff:5c:ed:de:c5:
         86:ef:e0:15:a8:05:f6:a8:66:15:a4:b8:8d:be:97:36:78:72:
         1b:69:91:b2:b5:08:16:2c:2b:89:0e:44:4f:14:d2:55:be:74:
         9b:dc:75:95:10:aa:d4:fe:a7:12:5b:de:04:71:8a:71:7d:57:
         31:78:13:6f:64:a8:d5:55:c6:2b:3a:12:90:c8:70:4c:33:4c:
         0a:06:94:5e:ed:39:e6:db:8b:98:ec:59:47:5a:1c:c0:70:5c:
         fa:45:1d:7a:a7:74:d8:a8:1b:35:e1:2e:48:c2:3d:02:05:c5:
         02:da:f6:9e:5b:bf:57:ba:3c:3b:c6:d3:6d:9d:d7:5e:ba:fc:
         2b:b5:44:ca:1a:bb:d0:03:ad:1f:a7:16:80:ae:da:a0:be:71:
         eb:79:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org