Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          XWauShA1BPcsf2j9MH0XrnHY04LZtZAgT0aDjQ6x1/8=
Subject key identifier:   67:E6:91:FB:0D:70:0C:9D:B8:A3:C6:3C:FA:A1:4F:8C:18:D1:DC:10
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6F4A2460A72D96E16B1FD82C9E9F5EDADF0E7315
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
Signing time:             Thu 17 Aug 2023 09:07:49 +0000
ROA not before:           Thu 17 Aug 2023 09:02:49 +0000
ROA not after:            Thu 15 Aug 2024 09:07:49 +0000
asID:                     33538
IP address blocks:        2620:134:600c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4a:24:60:a7:2d:96:e1:6b:1f:d8:2c:9e:9f:5e:da:df:0e:73:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug 17 09:02:49 2023 GMT
            Not After : Aug 15 09:07:49 2024 GMT
        Subject: CN=67E691FB0D700C9DB8A3C63CFAA14F8C18D1DC10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:9a:36:c8:a7:43:7c:1b:33:7a:e1:1f:7d:
                    29:9d:04:13:e6:62:c3:41:26:b2:d7:e2:9e:02:c0:
                    37:d1:f1:c3:04:9a:71:c7:33:0e:2e:27:1c:a1:40:
                    2c:39:bf:e3:c8:de:2c:c1:51:3f:17:aa:9e:cd:96:
                    35:53:3d:ad:2b:5c:1d:ac:f6:a0:60:e1:13:58:bc:
                    06:a9:42:be:a3:1a:d5:d4:4e:01:06:2e:05:44:50:
                    a2:c4:cd:a0:f5:39:2a:b5:1d:85:fd:ec:e5:ad:7e:
                    bf:1f:55:26:89:f9:11:96:7f:fb:5a:20:77:8c:49:
                    6a:9d:17:57:15:2c:1c:8a:cb:d0:5e:ca:32:df:a2:
                    da:e5:d3:d9:6e:2c:dd:da:6c:be:af:04:d4:08:7f:
                    da:d1:1f:20:ca:be:65:68:81:f4:4b:67:32:df:c5:
                    a3:da:13:56:e7:b3:ea:a1:9f:59:6a:81:8e:91:22:
                    7c:8e:72:ed:cb:6d:34:33:fe:be:1e:4f:0e:10:fc:
                    95:e3:28:e9:35:a3:ed:44:43:54:4d:e0:a0:26:3a:
                    58:6c:0e:8d:a5:87:da:c0:cc:04:d5:62:65:5b:e2:
                    30:5e:2e:0e:f2:93:62:6b:25:3c:af:c1:94:7c:6d:
                    e1:f2:c2:84:74:17:f9:1d:4c:2f:02:91:8c:e1:8a:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:91:FB:0D:70:0C:9D:B8:A3:C6:3C:FA:A1:4F:8C:18:D1:DC:10
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:41:f1:98:f3:11:cb:9a:4e:1e:7d:36:eb:52:ed:76:9d:
         cb:32:94:49:89:ca:0b:18:d8:4d:59:37:1f:e8:1f:cf:f9:f6:
         25:ce:19:3a:26:e5:b2:c0:8c:ef:f1:1f:51:da:b6:78:19:7a:
         51:37:6f:83:5c:ce:37:84:d6:25:16:2b:e8:e5:3d:cb:42:b4:
         dd:48:59:2c:bd:f3:26:28:06:41:76:49:5c:70:bb:b7:c7:cc:
         4e:68:c3:fe:f8:4b:cf:0c:fa:f1:84:b0:8c:49:80:77:d2:2e:
         88:aa:ff:4c:36:79:01:c8:bc:62:8a:3b:d0:6a:ea:f1:14:a2:
         d1:9e:e9:99:a6:fb:26:f5:74:9f:a6:db:ee:83:b4:53:e5:a1:
         f3:8d:b3:63:c5:94:e8:1e:70:8d:4e:f2:91:15:4d:f4:a1:b1:
         09:92:20:45:53:48:15:b1:02:3c:7e:9a:dc:46:03:96:9f:a8:
         b6:7a:10:27:04:8d:cb:10:d6:60:ac:4e:e5:cc:47:25:e2:85:
         18:6b:2b:72:bb:59:6f:c7:a3:85:8a:09:be:a1:36:b6:ec:8c:
         4d:f3:69:7c:a2:87:de:ac:dd:bd:23:8a:a8:e8:d2:6b:3b:05:
         bf:d9:e4:2e:0b:68:9c:75:51:9e:20:77:0b:43:6e:53:58:97:
         e6:cc:38:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org