Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          58uA/gkqCTYuAiqSDXOmYhRsT09mBncaparl7Bk6W+E=
Subject key identifier:   3C:6E:87:3E:7D:57:04:EC:66:50:26:AE:42:FA:8E:23:C8:A1:DF:05
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5316B2DFF0EA9CD15B818203D3EFCFADA615A44B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:30 +0000
ROA not before:           Fri 01 Sep 2023 11:09:30 +0000
ROA not after:            Fri 30 Aug 2024 11:14:30 +0000
asID:                     30031
IP address blocks:        2620:134:6003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:16:b2:df:f0:ea:9c:d1:5b:81:82:03:d3:ef:cf:ad:a6:15:a4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:30 2023 GMT
            Not After : Aug 30 11:14:30 2024 GMT
        Subject: CN=3C6E873E7D5704EC665026AE42FA8E23C8A1DF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:e9:3a:a4:3e:00:f2:ba:83:87:17:1f:78:
                    bd:86:b4:e0:08:cb:5d:ac:41:6c:07:d9:89:16:2c:
                    a4:66:10:9a:17:2c:fc:ba:03:6d:e6:6e:a4:90:95:
                    f8:73:79:a1:df:55:c6:ff:15:8c:d9:b0:7c:4e:9e:
                    0e:a3:36:86:12:25:32:bc:fd:c4:36:fe:ae:a9:8a:
                    30:c7:c9:59:a0:1b:a7:48:c6:a2:6b:cb:a1:53:37:
                    1a:98:d9:92:69:36:52:88:6b:e9:12:47:ab:e1:87:
                    d5:37:9a:43:03:9b:b0:17:14:67:73:25:2f:17:4d:
                    3b:c7:c8:ef:75:10:00:26:37:85:36:a4:f1:36:a6:
                    73:07:68:b0:cf:6c:47:4f:f4:fe:8d:96:c6:37:84:
                    6d:19:11:bc:6e:1b:b9:46:c7:d6:dd:a7:4a:c2:fd:
                    12:9b:cf:48:0e:d4:65:06:0e:8e:a7:74:d9:25:2b:
                    a4:62:1a:72:2d:04:ec:5f:13:e1:f3:6c:fc:23:f6:
                    86:03:77:26:4b:b9:f7:4b:94:ad:64:ad:f5:cb:32:
                    8a:a2:b0:02:99:0e:81:41:9b:ac:8d:b2:46:1c:3c:
                    b0:87:ac:73:b9:c5:d8:bd:92:f7:d8:55:ff:be:15:
                    32:e9:53:9b:bb:4e:67:af:52:49:b4:c7:3a:2f:01:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6E:87:3E:7D:57:04:EC:66:50:26:AE:42:FA:8E:23:C8:A1:DF:05
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:77:81:fb:4a:fa:df:71:c5:80:b7:26:f6:1f:1e:84:09:
         0e:32:ed:90:d9:f8:19:aa:b0:c6:ad:2a:ec:5f:a6:4d:9b:91:
         fc:6e:94:1c:e1:af:40:12:27:fb:8e:53:61:75:bb:66:4d:b9:
         74:70:7f:a8:47:04:f5:f9:49:d3:86:df:e9:b5:28:b3:08:d0:
         c0:be:57:cb:5f:c8:63:e0:a1:b1:a1:15:cc:05:b3:f7:8d:4c:
         d1:c9:fd:c8:3b:9b:17:a3:42:8d:df:cf:a3:ae:c3:a7:51:d5:
         48:71:55:4a:9a:53:2d:eb:53:f3:d9:99:ba:04:eb:84:be:e9:
         fe:22:6b:0a:33:19:19:f8:eb:d5:2a:f8:d3:cd:5f:91:68:4f:
         1a:7d:c7:29:c8:ac:4e:f1:f5:7f:34:d8:81:bb:0a:42:68:05:
         70:81:da:74:bf:bc:93:7d:81:64:ff:54:dd:94:3b:ce:a7:dd:
         54:03:5b:71:e4:63:d6:15:31:b6:15:d6:b4:60:0d:6e:47:11:
         2a:a9:d9:f1:05:d4:57:c4:32:b3:e4:d5:d8:58:5d:f2:0c:04:
         a9:d8:a1:6f:a7:c2:8d:d5:71:15:d3:a1:27:84:c1:84:d3:b9:
         41:e3:5e:5b:c8:84:a0:44:0c:ac:21:47:bc:13:38:b3:46:89:
         93:bf:ba:b7
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUUxay3/DqnNFbgYID0+/PraYVpEswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMwWhcNMjQwODMwMTExNDMw
WjAzMTEwLwYDVQQDEygzQzZFODczRTdENTcwNEVDNjY1MDI2QUU0MkZBOEUyM0M4
QTFERjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJzpOqQ+APK6
g4cXH3i9hrTgCMtdrEFsB9mJFiykZhCaFyz8ugNt5m6kkJX4c3mh31XG/xWM2bB8
Tp4OozaGEiUyvP3ENv6uqYowx8lZoBunSMaia8uhUzcamNmSaTZSiGvpEker4YfV
N5pDA5uwFxRncyUvF007x8jvdRAAJjeFNqTxNqZzB2iwz2xHT/T+jZbGN4RtGRG8
bhu5RsfW3adKwv0Sm89IDtRlBg6Op3TZJSukYhpyLQTsXxPh82z8I/aGA3cmS7n3
S5StZK31yzKKorACmQ6BQZusjbJGHDywh6xzucXYvZL32FX/vhUy6VObu05nr1JJ
tMc6LwGJnwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFDxuhz59VwTsZlAmrkL6jiPI
od8FMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGUBggrBgEFBQcBCwSBhzCB
hDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB
NGADMA0GCSqGSIb3DQEBCwUAA4IBAQBx03eB+0r633HFgLcm9h8ehAkOMu2Q2fgZ
qrDGrSrsX6ZNm5H8bpQc4a9AEif7jlNhdbtmTbl0cH+oRwT1+UnTht/ptSizCNDA
vlfLX8hj4KGxoRXMBbP3jUzRyf3IO5sXo0KN38+jrsOnUdVIcVVKmlMt61Pz2Zm6
BOuEvun+ImsKMxkZ+OvVKvjTzV+RaE8afccpyKxO8fV/NNiBuwpCaAVwgdp0v7yT
fYFk/1TdlDvOp91UA1tx5GPWFTG2Fda0YA1uRxEqqdnxBdRXxDKz5NXYWF3yDASp
2KFvp8KN1XEV06EnhMGE07lB415byISgRAysIUe8EzizRomTv7q3
-----END CERTIFICATE-----
Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org