Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa
File:                     323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa (raw, json)
Hash identifier:          /oQ2W3ZHR9E2sgRVphjxB8sNzl4/IHjAwcVEOd74rZ8=
Subject key identifier:   3B:DF:E1:AD:AC:9B:A6:61:23:95:86:DE:60:20:4B:04:E6:47:E9:3E
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       07F1536FA592053B8D44AEFFF0C653B6E14A349F
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:29 +0000
ROA not before:           Fri 02 Aug 2024 11:19:29 +0000
ROA not after:            Fri 01 Aug 2025 11:24:29 +0000
asID:                     397726
IP address blocks:        2620:134:6004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f1:53:6f:a5:92:05:3b:8d:44:ae:ff:f0:c6:53:b6:e1:4a:34:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:29 2024 GMT
            Not After : Aug  1 11:24:29 2025 GMT
        Subject: CN=3BDFE1ADAC9BA661239586DE60204B04E647E93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:6a:91:84:46:ad:4a:92:b4:54:36:2d:ac:
                    1e:9f:73:15:ea:95:03:0a:ed:eb:dd:3d:18:ba:a6:
                    4b:56:a7:64:52:7e:23:2b:be:69:b0:78:8d:c4:89:
                    f3:0c:58:23:74:f2:f4:95:81:b5:fc:66:91:3b:5a:
                    83:73:e0:63:32:60:b1:a8:cd:db:58:eb:b9:ae:9c:
                    3b:fc:c9:16:2b:11:2e:ac:91:33:7d:01:d9:fa:ac:
                    6c:e0:1c:f9:89:6a:73:f8:6e:67:da:38:4c:66:d5:
                    37:23:97:0e:8e:f4:1c:af:f4:d8:39:c3:f3:b6:6e:
                    a9:75:ca:de:c9:70:7b:55:95:10:01:4a:4d:06:0c:
                    a8:97:81:37:e6:ce:30:1c:37:8c:13:8b:4b:91:75:
                    34:76:bf:fe:78:ef:bd:7d:ba:ed:6e:9a:2d:c9:17:
                    04:32:47:0f:06:27:3e:f6:ad:12:8f:3c:67:54:2b:
                    ee:c1:b0:fb:6f:ab:71:17:39:dc:ff:31:f3:7a:34:
                    e5:27:c4:3b:0a:de:22:4c:d0:50:ad:98:00:08:26:
                    f0:58:80:87:8f:5e:51:90:bf:1b:59:c7:d7:5f:ba:
                    77:c2:70:14:3c:cd:20:16:7e:cf:07:c4:54:6d:f0:
                    fb:f6:4e:8a:97:1c:c5:cf:b9:43:0c:00:17:23:5d:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DF:E1:AD:AC:9B:A6:61:23:95:86:DE:60:20:4B:04:E6:47:E9:3E
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:41:85:a2:e9:75:23:6e:58:48:8e:9b:3c:49:18:71:f1:12:
         27:af:58:6d:1d:d9:d8:38:75:8d:2a:c9:8d:bd:fd:09:1b:be:
         87:f4:f9:6c:0d:99:fb:2e:36:1d:fd:99:04:b8:d6:a7:8e:ce:
         82:56:a5:cb:13:ab:9a:a2:cb:ca:9b:39:9e:69:9a:8c:24:aa:
         d3:f3:51:ba:d7:67:58:dc:08:56:82:43:1d:73:fd:9d:c8:e4:
         81:07:d5:17:1a:e9:79:5f:7f:c6:04:fb:e6:08:2d:4d:4c:70:
         67:f5:b8:77:7a:f9:c4:5c:66:7e:4c:ec:d6:a4:06:67:15:3f:
         f8:69:52:c0:80:38:58:89:18:54:db:1f:e3:1f:88:8d:b4:53:
         27:7c:1d:0b:28:21:6a:b3:d6:bb:33:78:4a:c6:96:cc:93:59:
         8f:98:4e:3c:81:0e:40:15:f5:c9:f0:01:c4:ef:e9:74:cc:0c:
         1c:7b:91:5b:06:36:6b:45:e4:e0:66:7d:c9:f5:01:0d:38:ed:
         c0:b6:70:7f:d5:b2:d9:81:24:9b:a1:fb:72:e2:7b:c5:64:17:
         37:dd:16:b7:aa:ac:3a:cd:da:38:ae:b5:22:bf:f9:79:d1:f0:
         50:8e:74:b4:7e:b2:47:fd:cd:7f:23:6c:3f:3d:4d:e5:31:6f:
         48:28:8b:de
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUB/FTb6WSBTuNRK7/8MZTtuFKNJ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI5WhcNMjUwODAxMTEyNDI5
WjAzMTEwLwYDVQQDEygzQkRGRTFBREFDOUJBNjYxMjM5NTg2REU2MDIwNEIwNEU2
NDdFOTNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B5qkYRGrUqS
tFQ2Lawen3MV6pUDCu3r3T0YuqZLVqdkUn4jK75psHiNxInzDFgjdPL0lYG1/GaR
O1qDc+BjMmCxqM3bWOu5rpw7/MkWKxEurJEzfQHZ+qxs4Bz5iWpz+G5n2jhMZtU3
I5cOjvQcr/TYOcPztm6pdcreyXB7VZUQAUpNBgyol4E35s4wHDeME4tLkXU0dr/+
eO+9fbrtbpotyRcEMkcPBic+9q0SjzxnVCvuwbD7b6txFznc/zHzejTlJ8Q7Ct4i
TNBQrZgACCbwWICHj15RkL8bWcfXX7p3wnAUPM0gFn7PB8RUbfD79k6KlxzFz7lD
DAAXI13ktwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvf4a2sm6ZhI5WG3mAgSwTm
R+k+MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGWBggrBgEFBQcBCwSBiTCB
hjCBgwYIKwYBBQUHMAuGd3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwMzQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM5MzczNzMyMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
IAE0YAQwDQYJKoZIhvcNAQELBQADggEBAC1BhaLpdSNuWEiOmzxJGHHxEievWG0d
2dg4dY0qyY29/Qkbvof0+WwNmfsuNh39mQS41qeOzoJWpcsTq5qiy8qbOZ5pmowk
qtPzUbrXZ1jcCFaCQx1z/Z3I5IEH1Rca6Xlff8YE++YILU1McGf1uHd6+cRcZn5M
7NakBmcVP/hpUsCAOFiJGFTbH+MfiI20Uyd8HQsoIWqz1rszeErGlsyTWY+YTjyB
DkAV9cnwAcTv6XTMDBx7kVsGNmtF5OBmfcn1AQ047cC2cH/VstmBJJuh+3Lie8Vk
FzfdFreqrDrN2jiutSK/+XnR8FCOdLR+skf9zX8jbD89TeUxb0goi94=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org