Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          1GMgnW+fpP6vB5ltU7rhUOJQ8qgEGre6nvxJ7lmuvvg=
Subject key identifier:   8B:F3:21:4F:E5:32:9E:0B:06:54:4A:89:D2:87:09:65:59:F2:EB:1C
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       32ECAEC38A53754FBCC492DC3046AC4AF522AEA4
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
Signing time:             Thu 19 Jun 2025 09:58:43 +0000
ROA not before:           Thu 19 Jun 2025 09:53:43 +0000
ROA not after:            Thu 18 Jun 2026 09:58:43 +0000
asID:                     30031
IP address blocks:        2620:134:600b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 14:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ec:ae:c3:8a:53:75:4f:bc:c4:92:dc:30:46:ac:4a:f5:22:ae:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun 19 09:53:43 2025 GMT
            Not After : Jun 18 09:58:43 2026 GMT
        Subject: CN=8BF3214FE5329E0B06544A89D287096559F2EB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:73:8f:a6:55:fe:78:dd:17:f0:be:51:fa:
                    3d:7c:bc:ac:90:6e:5d:3a:dc:24:82:f1:f5:0e:53:
                    e3:9e:6b:65:58:fc:80:a3:cf:05:5f:ac:76:97:41:
                    e0:25:5e:28:90:6d:90:9e:a4:36:99:50:f4:a9:b4:
                    b1:e5:97:1c:d2:d2:96:e6:69:82:7d:69:10:29:b1:
                    a8:2f:80:7e:8d:f1:56:f5:0b:ab:c2:13:9f:9a:0d:
                    f6:bf:e9:25:28:5f:6a:76:1c:a9:99:1f:18:33:b5:
                    bd:64:15:55:f2:66:de:df:35:13:90:17:b6:89:ac:
                    45:1d:7c:c5:35:0d:44:76:7d:a2:47:fb:1b:01:d8:
                    4e:5d:6a:07:b0:39:37:f4:e3:30:ea:d1:dd:ea:97:
                    c3:4a:0e:d1:33:1d:98:47:aa:68:7f:6d:32:e2:e8:
                    8b:a0:c3:03:68:70:04:4f:67:87:77:c5:e6:51:e7:
                    2e:57:ea:3e:75:a9:16:0b:5a:b6:49:10:f7:2b:ba:
                    bf:d5:7d:2a:23:7d:af:dc:6a:f3:4f:42:e4:80:fc:
                    2f:17:e4:c9:b6:ab:88:55:41:35:1a:c6:0b:f4:37:
                    7a:e8:ad:e9:06:5c:c0:f8:d9:82:e6:30:a5:aa:5b:
                    ad:bd:e2:51:c8:c0:de:44:09:79:d4:2b:a7:63:de:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:21:4F:E5:32:9E:0B:06:54:4A:89:D2:87:09:65:59:F2:EB:1C
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:88:01:47:f8:aa:ba:c5:75:cf:09:27:65:20:fc:b3:1d:16:
         d8:f9:ab:29:ce:06:82:47:ad:35:08:f2:62:d0:27:a3:02:bf:
         d5:f8:f0:18:e0:a2:b3:e7:5d:66:4a:21:cf:2d:d6:e4:75:23:
         5d:ce:c7:4a:86:4c:1c:3f:8f:c7:2b:91:85:16:fb:5f:ea:46:
         e2:58:c6:6c:0c:47:69:31:41:4d:a3:64:fd:50:72:fe:11:e6:
         6c:2c:ba:93:90:48:e8:db:c5:fa:77:e7:9a:98:11:06:31:7f:
         d9:0c:c0:36:10:66:6e:bb:0f:2c:4a:85:3b:18:e9:39:64:f3:
         d1:8f:b6:08:2e:bc:8a:1f:7c:0e:73:84:ca:54:48:b9:84:eb:
         87:6f:c4:2c:a9:98:2b:6d:ae:d5:79:ef:e7:6a:01:12:f5:a8:
         ae:42:8b:b6:a8:03:63:c4:10:3f:b9:18:6f:20:2b:c8:bf:4c:
         08:2e:ed:0a:13:98:9f:7c:8c:fb:aa:da:32:55:64:86:5a:65:
         de:d8:b2:d9:18:b3:d0:ef:bd:44:6a:5e:5e:6d:a4:47:f5:9b:
         cd:86:3c:7d:a2:04:cd:dd:8e:42:07:a2:fb:da:cb:08:4e:a9:
         d1:83:60:25:5c:f6:fc:38:ad:f8:04:1f:12:18:54:da:fd:78:
         3b:5c:9c:54
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUMuyuw4pTdU+8xJLcMEasSvUirqQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNjE5MDk1MzQzWhcNMjYwNjE4MDk1ODQz
WjAzMTEwLwYDVQQDEyg4QkYzMjE0RkU1MzI5RTBCMDY1NDRBODlEMjg3MDk2NTU5
RjJFQjFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbVzj6ZV/njd
F/C+Ufo9fLyskG5dOtwkgvH1DlPjnmtlWPyAo88FX6x2l0HgJV4okG2QnqQ2mVD0
qbSx5Zcc0tKW5mmCfWkQKbGoL4B+jfFW9QurwhOfmg32v+klKF9qdhypmR8YM7W9
ZBVV8mbe3zUTkBe2iaxFHXzFNQ1Edn2iR/sbAdhOXWoHsDk39OMw6tHd6pfDSg7R
Mx2YR6pof20y4uiLoMMDaHAET2eHd8XmUecuV+o+dakWC1q2SRD3K7q/1X0qI32v
3GrzT0LkgPwvF+TJtquIVUE1GsYL9Dd66K3pBlzA+NmC5jClqlutveJRyMDeRAl5
1CunY97HoQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFIvzIU/lMp4LBlRKidKHCWVZ
8uscMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGUBggrBgEFBQcBCwSBhzCB
hDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwNjIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB
NGALMA0GCSqGSIb3DQEBCwUAA4IBAQCCiAFH+Kq6xXXPCSdlIPyzHRbY+aspzgaC
R601CPJi0CejAr/V+PAY4KKz511mSiHPLdbkdSNdzsdKhkwcP4/HK5GFFvtf6kbi
WMZsDEdpMUFNo2T9UHL+EeZsLLqTkEjo28X6d+eamBEGMX/ZDMA2EGZuuw8sSoU7
GOk5ZPPRj7YILryKH3wOc4TKVEi5hOuHb8QsqZgrba7Vee/nagES9aiuQou2qANj
xBA/uRhvICvIv0wILu0KE5iffIz7qtoyVWSGWmXe2LLZGLPQ771Eal5ebaRH9ZvN
hjx9ogTN3Y5CB6L72ssITqnRg2AlXPb8OK34BB8SGFTa/Xg7XJxU
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:48:15 2025 by rpki-client