Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          XU7lo6KWrSKxonskwMT0vCsi56UCBxXhYM2FXsLd1a0=
Subject key identifier:   EB:C7:6A:F5:2A:7F:28:18:FE:B0:B0:EE:36:A6:27:C8:0E:CC:D2:F7
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       54676D8CDAFD0425E7D767C07078D127DBFD6584
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 02 Aug 2024 11:24:26 +0000
ROA not before:           Fri 02 Aug 2024 11:19:26 +0000
ROA not after:            Fri 01 Aug 2025 11:24:26 +0000
asID:                     30031
IP address blocks:        2620:134:6003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:67:6d:8c:da:fd:04:25:e7:d7:67:c0:70:78:d1:27:db:fd:65:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:26 2024 GMT
            Not After : Aug  1 11:24:26 2025 GMT
        Subject: CN=EBC76AF52A7F2818FEB0B0EE36A627C80ECCD2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:06:62:9f:76:bf:78:8b:da:63:9a:db:21:
                    cb:b7:c0:30:8a:5e:cc:5f:b2:20:7f:6d:7f:77:31:
                    0f:4a:ea:dd:19:d6:65:1c:92:8e:2a:43:14:01:59:
                    3f:01:0c:b6:d7:71:74:07:dc:f3:b5:da:c6:00:dc:
                    d8:53:e9:c3:2f:c6:2b:68:e2:1c:1d:ff:70:dc:0c:
                    b0:6e:b1:40:aa:17:3f:54:d6:ec:28:2d:84:fe:9b:
                    70:8d:4f:90:34:34:c0:19:16:82:19:0b:0f:1e:81:
                    69:36:2d:cf:42:65:e4:e8:23:46:e2:50:a0:d0:c4:
                    7f:c8:1d:61:a1:73:3f:91:7e:9b:62:eb:42:16:b8:
                    21:4c:fd:d4:41:4a:a6:31:4a:e0:08:ba:13:fc:f2:
                    dd:94:fa:7c:2b:fa:3f:fe:01:fc:42:08:a0:24:5a:
                    b5:45:cc:34:48:7b:97:c5:6f:c8:f4:55:07:ed:ec:
                    28:66:17:91:14:da:fd:a8:c5:d6:4d:41:ff:7d:8c:
                    dd:26:9a:89:8b:62:e5:df:67:d3:1f:ef:19:64:4b:
                    a8:4e:64:df:c7:4d:ad:e8:8a:b1:51:25:7a:f1:53:
                    2f:af:11:ae:d8:2c:2b:8b:6b:a1:f3:3d:4b:7d:50:
                    26:22:12:e4:6f:e7:5b:4f:3c:25:eb:e1:64:1d:6f:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C7:6A:F5:2A:7F:28:18:FE:B0:B0:EE:36:A6:27:C8:0E:CC:D2:F7
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:d2:00:1e:17:47:6d:2e:98:b2:fd:8e:d7:22:39:3b:0d:
         ca:d6:d3:0b:96:37:79:d7:0e:ba:b2:15:ae:cf:53:64:44:14:
         b1:28:4e:15:50:b5:cb:a6:9d:ac:1d:76:1a:72:5d:bf:9f:9d:
         a9:5f:e4:4a:b3:ff:fe:13:19:69:a2:7b:00:bd:53:b3:34:e6:
         32:4b:af:ab:1b:1b:3f:80:2a:d1:65:d3:8d:16:b0:f0:c0:24:
         de:e6:40:28:69:5c:bf:bd:d2:af:90:3a:99:8c:40:28:f6:b5:
         7c:97:23:30:52:9f:9f:68:c7:e2:d6:92:7e:a9:6a:67:d7:e3:
         2f:c0:31:44:19:d0:24:05:90:4d:4c:18:ba:f8:d5:98:35:e6:
         a9:ae:2a:4d:07:5f:bd:fc:7c:3f:a7:7e:32:fa:0d:95:66:7b:
         f5:33:96:20:6a:8c:33:a5:e4:5b:5a:c4:e9:bc:fc:40:a6:48:
         83:df:d0:ec:49:5e:78:c3:d8:2d:1a:50:a9:e1:3c:15:5f:0a:
         83:25:a5:f9:06:f0:8b:73:84:f1:34:3c:ce:4d:05:2e:c4:d9:
         d3:97:d2:b3:4a:54:f0:5c:d9:4a:a2:71:40:f2:75:c1:0d:62:
         cc:d2:a5:be:b8:f6:9e:f9:4c:ea:a9:21:34:c8:81:01:a2:0d:
         91:19:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org