Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          Z2NbOHITqgBznXJm4M/3Ji+osarcYFGm6yMxqZZ6/PI=
Subject key identifier:   63:B8:66:D0:89:8E:D6:BA:7C:48:7D:6A:61:8D:DE:F1:1D:4B:C2:41
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       72321B12FCACC6A4F0A81E71104162B25319B2F4
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa
Signing time:             Thu 18 Jul 2024 09:18:19 +0000
ROA not before:           Thu 18 Jul 2024 09:13:19 +0000
ROA not after:            Thu 17 Jul 2025 09:18:19 +0000
asID:                     16509
IP address blocks:        2620:134:600c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:32:1b:12:fc:ac:c6:a4:f0:a8:1e:71:10:41:62:b2:53:19:b2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul 18 09:13:19 2024 GMT
            Not After : Jul 17 09:18:19 2025 GMT
        Subject: CN=63B866D0898ED6BA7C487D6A618DDEF11D4BC241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:44:f4:24:52:dc:6b:2c:43:a8:fa:0e:84:
                    d1:99:3b:0d:37:36:b6:e5:27:0f:67:e3:7d:1b:b7:
                    39:bc:83:6f:a8:ab:f5:2d:bc:f1:8d:97:07:a4:05:
                    8e:b1:ff:31:15:b6:8c:cd:a7:c2:62:39:63:4d:0b:
                    aa:8b:9f:4a:d6:b1:16:cb:70:cc:85:32:0f:e3:c0:
                    07:0c:c3:1e:49:d5:8d:0b:cc:07:11:89:e9:51:48:
                    6b:94:6b:ba:bb:f7:61:4b:5a:5f:6d:2c:69:0e:11:
                    2c:b6:0a:76:0c:45:4c:58:c1:9f:55:59:77:89:b1:
                    3b:76:d6:65:8c:b6:19:5a:9b:16:e9:64:01:fc:29:
                    df:3e:1a:89:84:ca:78:72:80:2b:eb:cc:54:a5:3b:
                    51:9c:3d:50:4e:39:b0:c6:8a:9e:85:d7:88:06:2f:
                    0a:8e:35:5f:32:6f:41:ca:e3:b4:2e:7f:06:79:08:
                    ab:98:6c:9a:f3:cb:cf:44:cf:cb:56:f4:ff:6c:2e:
                    b3:57:72:0f:2a:0b:48:fc:c0:0a:24:0e:ee:eb:58:
                    30:97:20:23:e1:4a:b5:23:9f:00:e0:21:6b:76:97:
                    9f:0b:8f:13:83:dc:39:ef:eb:b5:b3:63:2d:05:f4:
                    15:e0:96:5d:2e:cf:12:39:27:1a:8c:94:d7:7c:b3:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B8:66:D0:89:8E:D6:BA:7C:48:7D:6A:61:8D:DE:F1:1D:4B:C2:41
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:94:7e:81:9c:34:a9:9a:7b:fc:f2:08:5e:3b:a4:d1:12:15:
         55:d0:c6:c1:4b:b5:0d:d3:e3:44:bf:18:69:77:d9:71:ba:59:
         b6:24:31:1b:ca:28:07:b3:4c:94:94:80:ed:f9:75:ee:f2:82:
         f6:64:e4:46:c2:d6:14:e9:76:73:48:11:ec:dc:d7:ba:4d:1c:
         83:9a:f6:ba:02:cc:bc:ee:1f:10:8f:66:0e:64:67:82:13:f9:
         df:cd:1b:40:b1:d8:9e:08:89:48:2c:c8:4c:37:74:84:3c:02:
         3e:ef:8c:43:ae:de:95:98:0f:d7:72:3c:d8:f4:ed:5f:b4:ba:
         94:70:dc:1a:ef:b5:37:de:fc:2a:47:f4:2b:d7:df:8f:26:be:
         8f:2a:e1:ab:e3:4b:8a:53:67:fe:1d:d3:ec:1f:b4:83:b4:6d:
         5a:f1:77:6c:5c:68:a2:01:57:55:a1:8d:79:df:aa:a0:af:57:
         62:c4:a1:e7:b8:7c:01:a2:90:cf:75:44:c6:ff:de:fb:34:18:
         a7:db:5e:62:df:dd:0e:ae:79:70:a7:4d:e0:ea:15:4e:f0:92:
         59:c1:cf:0c:9f:53:91:80:df:2d:ba:12:f4:b8:31:bc:1b:a4:
         b2:1d:2a:32:9f:d6:75:35:15:4e:aa:51:76:bb:53:11:d9:65:
         3f:cf:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:06:08 2024 by rpki-client on console-ams.rpki-client.org