Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          QaYSMsJs43P4qIiDll9gJF/eg52IOsWpE/B2oOvNHSc=
Subject key identifier:   BE:99:F9:0F:B2:69:18:8C:DD:D6:2E:0E:95:D5:04:37:A8:E2:15:87
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       446A90FCF4EAAEA69982E59F83A461457C3E6DBE
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
Signing time:             Thu 17 Aug 2023 09:07:07 +0000
ROA not before:           Thu 17 Aug 2023 09:02:07 +0000
ROA not after:            Thu 15 Aug 2024 09:07:07 +0000
asID:                     30031
IP address blocks:        2620:134:600b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6a:90:fc:f4:ea:ae:a6:99:82:e5:9f:83:a4:61:45:7c:3e:6d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug 17 09:02:07 2023 GMT
            Not After : Aug 15 09:07:07 2024 GMT
        Subject: CN=BE99F90FB269188CDDD62E0E95D50437A8E21587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:9e:7c:b2:0c:ba:e3:81:08:bb:19:95:f9:
                    6c:bd:3c:cf:ef:40:31:e1:11:5c:86:ba:16:1a:b0:
                    0c:a3:89:68:a4:98:15:5c:30:3c:10:96:7c:b2:1b:
                    fa:60:6b:ba:c5:16:84:c6:9e:a0:45:c7:d4:bd:05:
                    0b:32:21:b6:72:b4:ce:4c:c8:ce:01:e7:b2:cc:5c:
                    d5:ca:84:14:da:d7:ae:67:a5:31:8e:0a:34:47:19:
                    d5:28:c7:f4:32:7f:b3:a1:bb:b2:08:bf:ce:fb:99:
                    52:7e:43:9c:1c:32:f9:af:78:f8:e4:c7:28:b3:b8:
                    0a:44:6b:e6:f2:39:98:3e:aa:8d:9a:31:56:c7:92:
                    57:5a:95:fa:4e:0b:09:fe:ae:31:b9:4b:18:f9:08:
                    d1:9e:52:ad:af:bf:24:be:2c:28:6f:30:4a:17:73:
                    7f:40:5f:4d:11:06:0d:1a:30:60:10:c9:4f:7c:91:
                    68:e6:a4:64:37:e4:e4:59:4c:0b:ad:22:d1:35:53:
                    24:e5:93:6c:75:f5:1f:72:d7:66:76:9f:37:1b:37:
                    34:6e:70:69:7c:45:7e:08:03:4d:ea:e9:6d:d4:d1:
                    b7:ac:0e:1f:01:8f:5e:20:ed:6f:9c:7b:b3:b7:92:
                    99:e0:12:80:83:e3:7e:77:98:cc:22:24:a5:28:0c:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:99:F9:0F:B2:69:18:8C:DD:D6:2E:0E:95:D5:04:37:A8:E2:15:87
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:26:17:f6:a4:01:a8:48:07:d7:e7:31:1d:4e:4d:36:b5:97:
         3f:57:ac:9f:80:48:50:df:41:9a:4b:96:0b:21:1d:82:78:57:
         fc:1c:bc:e4:e3:48:19:7b:cc:c3:eb:10:d9:e0:f9:ec:55:49:
         6b:34:7c:68:b7:14:eb:65:b2:c6:7a:20:54:78:a2:06:38:c5:
         e5:c7:d4:92:df:c0:a8:ac:7f:46:0f:c2:3c:08:e3:9c:b2:a4:
         cf:49:e6:a4:cb:f2:15:13:98:25:45:e2:0f:0a:9a:9e:ca:a5:
         a7:94:9a:18:7c:c9:aa:5e:3a:af:12:a6:37:ca:2d:0d:e1:92:
         2e:44:26:02:db:67:87:f7:24:b0:bf:84:bb:42:17:59:f5:23:
         d3:7d:32:a4:d3:4f:8d:77:b7:c1:60:d0:2d:1c:69:f4:f6:66:
         b2:60:12:2c:a3:e1:5e:24:b4:a2:1d:a6:db:09:44:75:ad:ae:
         f6:c6:55:4a:ab:8e:d1:1c:a5:ef:4e:a2:24:94:2a:2c:20:78:
         b0:06:0c:31:f7:a0:ee:c0:ab:5d:3f:60:0c:d3:4c:8f:12:a6:
         7b:1d:89:78:10:d7:93:72:d2:d3:27:1b:07:f9:e8:60:29:1c:
         9a:52:dc:dc:a9:82:da:3e:a8:3e:d7:7e:04:6a:1c:d6:eb:75:
         ac:df:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:41:33 2024 by rpki-client on console-ams.rpki-client.org