Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          XZV2vhu1u+7DKNB4Vtbr4q3HHOHz1MgjDPRy21sF5gY=
Subject key identifier:   13:6D:8C:AD:58:74:BC:5A:EE:54:0F:25:52:70:CB:9B:59:B1:68:32
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       47619B2041C9E3671C8C0DA9E21B3416FCE2644B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 18 Jul 2024 09:18:19 +0000
ROA not before:           Thu 18 Jul 2024 09:13:19 +0000
ROA not after:            Thu 17 Jul 2025 09:18:19 +0000
asID:                     14618
IP address blocks:        2620:134:600c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 08:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:61:9b:20:41:c9:e3:67:1c:8c:0d:a9:e2:1b:34:16:fc:e2:64:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul 18 09:13:19 2024 GMT
            Not After : Jul 17 09:18:19 2025 GMT
        Subject: CN=136D8CAD5874BC5AEE540F255270CB9B59B16832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:8c:4e:4c:c4:c3:1f:45:d8:bd:3d:a7:f4:
                    a2:13:99:eb:fe:51:25:57:37:d5:39:f2:bc:01:b0:
                    27:93:4c:b9:48:8c:c3:32:ac:b6:bc:6c:c2:e6:01:
                    c6:ed:ee:5c:92:f3:49:9e:ca:17:47:27:87:49:9a:
                    9a:d8:7f:58:d3:35:79:97:56:86:87:80:56:30:5f:
                    6e:a7:f1:66:64:8c:c5:79:c8:15:cb:ec:14:b6:6b:
                    f5:3c:df:fa:33:48:f8:56:5c:91:72:2e:c7:98:a3:
                    18:33:4e:d0:dd:e9:5c:89:42:e1:2a:cb:ce:58:b4:
                    c5:5c:8a:42:34:49:42:67:50:33:01:1d:b6:b1:dd:
                    7d:5b:4d:34:51:ea:b7:36:a4:fa:1d:86:7d:09:bd:
                    eb:67:43:8f:bf:00:e5:05:6f:99:4a:2c:a4:75:74:
                    1c:a3:4a:ae:b1:af:77:3d:85:cd:9c:ef:43:67:b8:
                    07:ea:82:c9:b4:e5:e6:41:59:6b:e7:ac:96:68:94:
                    7e:2a:95:8c:f0:a7:4d:1d:8b:c0:52:a6:e6:cc:28:
                    22:28:4a:0c:a9:d4:88:cd:cd:31:28:4d:65:83:18:
                    f2:b8:00:a8:0e:5f:c6:6f:36:e4:96:97:c8:be:00:
                    92:e4:7d:0b:f7:67:db:97:f0:48:7c:f3:94:9a:92:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6D:8C:AD:58:74:BC:5A:EE:54:0F:25:52:70:CB:9B:59:B1:68:32
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:28:5d:c3:a6:a9:87:c8:d4:98:f1:bb:25:b3:90:b9:44:68:
         63:8d:e0:a1:38:15:6e:d7:4d:56:17:9f:f0:99:8b:d6:11:7a:
         43:4a:16:54:57:ba:9d:58:c3:fc:56:d8:19:e1:30:e7:69:69:
         6e:ee:6d:ac:1c:7c:0f:1d:eb:0c:58:d0:d0:53:c4:3d:53:9c:
         01:98:6b:67:2d:2b:7a:13:59:16:bb:69:58:ac:7c:6b:72:3e:
         58:63:bc:e2:48:f6:d4:4c:4d:65:56:50:a9:1f:65:3b:cf:f7:
         db:7c:b2:18:32:4c:f3:5a:6b:e6:c9:ec:1a:6c:ca:a1:49:68:
         7e:fa:c2:5a:8d:06:d8:af:ab:d6:64:25:03:79:d0:cc:56:7d:
         a5:9c:a0:79:e1:1d:d3:68:cd:08:af:c1:fb:78:8b:35:1e:29:
         a5:ed:34:be:e0:54:c0:80:e4:7f:f5:8d:58:74:2d:68:7d:07:
         63:0b:f2:ca:39:39:64:eb:06:f4:43:d4:ce:92:6c:04:43:ba:
         71:f2:aa:8b:d6:29:9b:dc:9d:2f:ab:ea:13:b4:e6:d6:d2:81:
         9c:6e:21:eb:f6:8a:a9:7f:7c:4d:2c:81:77:5d:90:b0:82:96:
         57:2d:8a:b7:aa:f0:dd:c1:b9:dc:64:cf:05:68:14:9d:c3:dc:
         d3:66:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:34 2025 by rpki-client