Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030363a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030363a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          HVIlfAOuHEbt6TQykTWrDGkjRcBRGYsVLHT2d3z1T+4=
Subject key identifier:   40:14:91:1A:EC:BB:9E:98:6C:60:BD:9C:82:C4:41:AA:24:0A:EE:4B
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       3C2F08307DBA648726731BC75FD1FEC556F9C8C0
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030363a3a2f34382d3438203d3e203333353338.roa
Signing time:             Fri 01 Sep 2023 11:14:28 +0000
ROA not before:           Fri 01 Sep 2023 11:09:28 +0000
ROA not after:            Fri 30 Aug 2024 11:14:28 +0000
asID:                     33538
IP address blocks:        2620:134:6006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:08:30:7d:ba:64:87:26:73:1b:c7:5f:d1:fe:c5:56:f9:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:28 2023 GMT
            Not After : Aug 30 11:14:28 2024 GMT
        Subject: CN=4014911AECBB9E986C60BD9C82C441AA240AEE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:3f:69:d5:52:d5:29:ab:7f:4b:6d:be:a6:
                    fc:69:55:8d:da:0a:e8:eb:ab:7b:45:e1:5b:35:47:
                    5b:37:c8:a6:ec:e7:8d:b5:69:c0:66:cc:35:aa:f5:
                    2a:c7:d2:f8:37:22:ff:68:d0:86:11:01:59:ba:e0:
                    79:91:ba:5b:0a:36:a0:e5:cf:ea:b7:57:1d:d1:09:
                    40:36:aa:c7:07:5a:63:08:be:5a:1a:76:08:6b:4a:
                    4e:12:7a:f7:06:25:e7:5f:74:c6:5d:be:76:9b:21:
                    0b:d2:65:c0:4f:83:f4:33:86:5b:8a:b3:a6:f2:66:
                    b1:43:28:71:5e:c2:8a:8f:25:4d:ca:0e:1a:4f:6f:
                    a1:d9:10:95:f9:92:38:2c:cf:23:85:b6:a8:ec:89:
                    fc:73:08:32:40:a8:ae:75:0c:aa:fd:d7:b8:14:35:
                    b6:a9:11:e5:15:11:f9:18:2a:cb:8b:56:2a:1a:42:
                    74:8d:7b:01:2a:2f:37:05:ca:eb:c9:c6:1a:06:ee:
                    71:eb:8a:e3:ce:51:37:95:38:69:43:70:1e:43:d7:
                    7e:fd:55:5d:a3:a3:24:d1:8f:9f:a2:95:fb:53:2c:
                    de:27:40:78:eb:7f:00:1b:a7:c6:3d:d0:00:7e:bd:
                    09:8f:58:22:cb:86:05:16:95:6d:76:99:50:91:a3:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:14:91:1A:EC:BB:9E:98:6C:60:BD:9C:82:C4:41:AA:24:0A:EE:4B
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030363a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:35:78:44:10:93:ef:f4:3f:d4:75:63:d2:d3:62:77:6d:
         b4:be:1a:f2:9c:6a:c2:36:c4:2d:17:6c:ed:5f:1a:eb:bc:e9:
         9f:10:dc:c7:13:d5:28:43:56:e8:13:f5:e7:bd:03:ae:57:9a:
         15:30:c6:86:f5:97:f3:60:24:f8:05:37:e1:53:62:a9:fd:68:
         30:be:50:48:e3:15:9e:52:e5:20:dc:dc:39:3a:54:08:f0:6b:
         be:16:72:db:49:d1:47:58:79:15:bb:c2:ff:32:5b:3a:2a:ce:
         32:68:c2:b6:d9:3a:dd:b0:c7:87:59:ae:fa:5d:9b:b4:e4:a3:
         34:9b:98:b9:96:64:44:ab:f7:62:9e:1b:90:de:ce:94:d7:fa:
         45:8f:1d:9a:d1:91:f0:8c:00:d9:b3:c0:53:c9:cd:1f:55:70:
         7b:92:32:50:64:aa:0c:31:df:77:72:68:26:7a:2e:86:76:55:
         2e:e5:b4:b4:76:d1:2c:8b:e1:b6:ec:29:b0:34:f6:ab:f2:e9:
         ce:c8:e8:aa:00:9f:f4:06:59:ad:a3:46:d3:76:f2:c1:a0:2b:
         94:a8:e7:e2:b9:2a:37:44:56:92:66:9e:6f:34:26:e4:ca:29:
         85:36:67:40:49:8a:61:5c:09:c1:b2:b3:a2:ce:4f:dd:03:e8:
         2b:c2:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org