Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203339353838.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier:          7OPdmpC2mUx5qZrlJgiJBr96Hc9Q3I3pIjAuHi+jBL4=
Subject key identifier:   E4:E4:5F:86:BE:05:03:06:89:B1:2A:A6:4E:B5:3F:33:80:D7:E8:DF
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       12935E8D0B34740823E3E98D261EFDA892E1B835
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203339353838.roa
Signing time:             Fri 01 Sep 2023 11:14:32 +0000
ROA not before:           Fri 01 Sep 2023 11:09:32 +0000
ROA not after:            Fri 30 Aug 2024 11:14:32 +0000
asID:                     39588
IP address blocks:        216.145.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:93:5e:8d:0b:34:74:08:23:e3:e9:8d:26:1e:fd:a8:92:e1:b8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:32 2023 GMT
            Not After : Aug 30 11:14:32 2024 GMT
        Subject: CN=E4E45F86BE05030689B12AA64EB53F3380D7E8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:b1:a4:c2:61:74:63:2a:87:7e:33:fc:c4:
                    bf:83:41:63:4a:23:d3:07:d4:27:7e:6e:8f:7e:81:
                    08:88:9b:3a:9e:4d:e6:6b:2c:b4:b7:4c:2a:b2:85:
                    17:ba:41:47:dd:5b:45:f6:c0:7f:01:dc:de:47:1d:
                    74:30:a0:fd:cc:11:b9:9d:50:f6:c1:74:7c:e0:93:
                    c0:14:19:d8:e7:7f:d6:7e:6b:34:34:df:69:4a:cc:
                    ff:0f:ba:a3:b5:78:8e:db:f2:47:94:e0:5d:46:a9:
                    73:57:e9:df:19:65:1a:f2:9d:8e:4c:04:d4:34:15:
                    6f:e0:b4:d6:8f:01:58:42:ba:fe:ea:74:5e:31:7f:
                    98:93:b8:13:e3:be:97:09:8c:78:a9:93:f4:02:2b:
                    73:a2:65:1e:3b:6b:21:04:29:0e:b4:0a:56:db:78:
                    b8:c2:46:7c:2c:d3:bf:69:ff:ef:d6:1c:26:22:c8:
                    a6:ad:08:88:5f:67:dc:b1:e9:c1:5e:4b:f5:ff:ae:
                    bb:ef:12:42:bd:a3:97:6a:ca:58:cb:bf:66:b9:22:
                    eb:2d:87:05:83:be:06:c3:55:0c:fd:14:22:e8:99:
                    6e:7e:78:8f:3f:7b:8d:99:fd:5a:4d:ed:c2:f0:81:
                    e6:fa:c4:7c:cf:c3:43:11:f5:5e:1f:58:66:3b:9f:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E4:5F:86:BE:05:03:06:89:B1:2A:A6:4E:B5:3F:33:80:D7:E8:DF
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203339353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c7:36:a4:68:15:e6:05:70:22:63:dd:40:b9:ab:d1:75:0d:
         b6:f3:77:4a:48:77:45:f2:60:ae:7d:7e:1f:83:83:c4:f7:b7:
         d8:5f:f4:03:2d:ab:a7:5c:29:b9:22:82:2a:0c:84:22:5b:df:
         79:0c:d8:0f:57:50:e9:67:4f:2c:90:a0:2c:05:07:02:85:2f:
         45:11:09:68:82:13:4c:3a:9f:35:4f:fe:5a:9e:e3:96:b9:e5:
         4d:34:6f:c5:d1:87:19:07:86:72:f3:9c:a0:bb:54:2a:a6:54:
         f5:e7:04:07:b2:16:5a:e4:b9:24:e1:5f:ff:8a:00:1e:c1:1c:
         fc:b1:1c:d0:66:e7:4e:db:f2:33:68:a4:5a:f8:da:73:fa:52:
         c3:87:10:bf:87:9a:1d:3e:e5:9a:ef:ca:03:c0:24:f1:52:05:
         ef:f5:a8:3a:fc:c8:a7:82:c1:a9:52:5d:6b:69:9e:64:28:e1:
         bb:02:b4:34:b7:9b:29:18:2b:cd:76:73:68:d8:ec:c8:d7:21:
         84:57:6b:e0:b2:60:e0:2e:bb:d1:f0:55:94:52:30:35:be:3d:
         c6:b6:ae:b7:5a:1d:64:01:4c:c5:d9:4c:5a:0f:71:3d:71:3c:
         6d:56:95:c3:d4:5a:1e:ca:c6:e8:06:3c:4c:17:c9:8b:96:6b:
         8e:23:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org