Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203136353039.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          8D9K3ar/q2RbVKFfQ8ACLhy7PUHlv8JtOXiBvEwMePg=
Subject key identifier:   CC:B4:D0:37:48:30:C8:D8:1E:0E:AD:53:FE:09:66:42:E8:D0:8D:2A
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6CCEDFF602F083C7E8AF1DA26740CC0D4E2CCAD0
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203136353039.roa
Signing time:             Thu 19 Jun 2025 09:58:43 +0000
ROA not before:           Thu 19 Jun 2025 09:53:43 +0000
ROA not after:            Thu 18 Jun 2026 09:58:43 +0000
asID:                     16509
IP address blocks:        2620:134:600b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 02:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ce:df:f6:02:f0:83:c7:e8:af:1d:a2:67:40:cc:0d:4e:2c:ca:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun 19 09:53:43 2025 GMT
            Not After : Jun 18 09:58:43 2026 GMT
        Subject: CN=CCB4D0374830C8D81E0EAD53FE096642E8D08D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:26:ca:4a:cb:9a:2e:99:7d:50:9a:01:75:
                    70:23:21:b5:a9:9f:4b:5e:98:ae:d3:08:fd:ef:51:
                    e4:80:13:2b:fb:88:e9:5f:b7:9d:b9:e2:e9:72:4a:
                    a2:35:4e:21:b2:69:98:ea:88:44:f1:43:c8:ad:6e:
                    32:2e:04:6f:42:08:c0:2a:7f:14:95:9b:b3:f2:f5:
                    8d:a7:15:bb:44:24:1e:62:dc:5f:3b:bf:76:dc:c7:
                    5e:1b:e1:5c:5c:ca:6c:a8:81:4c:4e:d9:17:f0:4f:
                    41:3a:20:e0:18:e2:5b:69:7c:bc:2f:8a:40:b4:ba:
                    1a:41:8e:41:3c:86:c0:70:1c:22:29:f8:22:36:fe:
                    e6:da:39:db:3f:06:a6:b9:0e:12:c3:ca:11:17:e4:
                    8b:c3:57:a3:b0:48:ef:50:62:01:53:c9:91:36:b9:
                    08:81:a5:47:9a:33:de:bb:b8:30:7b:25:e9:b0:f3:
                    63:f9:fb:56:13:16:67:57:1b:3a:aa:fb:c9:03:c3:
                    30:20:7a:dc:3e:dc:71:bc:e7:d7:b7:90:1e:a3:97:
                    44:66:3c:f4:a8:8d:88:23:b3:46:fe:dd:6f:7e:05:
                    78:67:6b:ea:01:64:3c:f3:c1:71:b6:72:e0:9d:b8:
                    cd:a0:01:49:3f:31:a0:98:6c:b3:8c:14:6e:f2:f4:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B4:D0:37:48:30:C8:D8:1E:0E:AD:53:FE:09:66:42:E8:D0:8D:2A
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:16:bb:5b:2a:d4:3d:6e:0a:a8:bd:c9:27:c7:0d:9c:f0:56:
         c2:d0:2b:95:f7:0a:ea:57:09:3c:38:17:b8:b7:ed:27:75:29:
         a5:b5:18:86:78:c3:14:0b:7c:02:d4:8c:77:bc:32:4c:e2:f8:
         d3:11:a2:18:74:5b:43:b8:85:2f:f0:66:fe:7e:dd:88:cc:e9:
         bb:5a:8e:e0:c6:2f:c5:cb:70:98:49:a1:d3:db:52:55:17:9a:
         46:4a:09:02:9f:ae:06:a0:a5:a5:f5:b5:07:40:73:fc:43:32:
         08:af:1f:b4:8d:07:0f:6f:c3:d5:30:4b:6e:d4:ec:aa:49:e6:
         68:1a:c5:ec:6a:f5:8f:59:c2:e8:8f:71:73:9e:4f:6a:c5:8f:
         0c:d2:46:02:b2:33:57:23:ea:6f:38:5c:1a:53:dc:10:a8:8d:
         28:bb:eb:29:38:dc:78:14:9e:d0:59:82:65:e9:83:ea:92:9b:
         af:91:42:00:a0:82:42:96:c2:1f:b4:1e:42:e3:e3:bd:15:e2:
         85:43:36:ce:67:76:f1:31:19:5e:b9:92:90:72:cf:b0:3b:21:
         fe:f6:52:3c:5f:88:cf:fa:85:d0:1e:b9:c0:43:60:a5:ab:bd:
         93:4e:4b:b4:e0:26:dd:bf:9c:21:ff:3d:68:eb:9b:9a:5d:48:
         4d:6b:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:24:53 2025 by rpki-client