Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa
File:                     3137302e31302e3134362e302f32332d3233203d3e203333353338.roa (raw, json)
Hash identifier:          VnHmpPoqC8Q2Tw85RXB3wCi/T5w+VvBg5A2ZUoUoH74=
Subject key identifier:   37:63:36:08:FF:6B:79:1E:D4:DC:46:D4:04:93:CD:C2:25:F2:40:B2
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       65C4563D80609EBF2ACCF7A42F67BC436A92FE00
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa
Signing time:             Fri 05 Jun 2026 12:30:50 +0000
ROA not before:           Fri 05 Jun 2026 12:25:50 +0000
ROA not after:            Fri 04 Jun 2027 12:30:50 +0000
asID:                     33538
IP address blocks:        170.10.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c4:56:3d:80:60:9e:bf:2a:cc:f7:a4:2f:67:bc:43:6a:92:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:50 2026 GMT
            Not After : Jun  4 12:30:50 2027 GMT
        Subject: CN=37633608FF6B791ED4DC46D40493CDC225F240B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:d0:0d:e4:b7:b6:67:fe:3e:0e:06:ca:c6:
                    63:c9:39:06:83:09:28:e0:cd:69:c9:93:4f:e3:19:
                    88:42:99:8d:11:d1:80:ae:b3:c6:2b:f5:54:e1:10:
                    8f:80:79:85:c8:96:eb:93:eb:0b:5b:d7:01:2f:d6:
                    79:e4:ba:6a:21:f8:79:36:53:19:57:cd:36:6c:7b:
                    fa:0b:cf:8a:3b:74:ef:26:f4:30:7e:4e:6d:e7:91:
                    98:fc:3f:43:79:c8:91:99:31:bf:19:ad:eb:99:95:
                    37:ad:ea:8e:03:85:b1:ca:fb:a2:9b:db:07:e3:0f:
                    fc:b6:93:f6:f7:da:40:81:3c:2b:5f:4b:8e:da:19:
                    9b:02:79:5f:6b:89:f7:43:03:ce:56:8a:2a:68:89:
                    f8:e0:76:5a:31:af:84:2e:ff:4d:88:df:8a:a4:db:
                    c4:57:4c:97:30:9d:6f:68:7d:e7:34:8f:67:30:49:
                    53:8a:aa:34:09:8d:6f:c2:71:b4:97:35:9b:36:83:
                    45:7b:e7:97:f0:2a:68:07:d1:ca:5d:49:ae:1b:ee:
                    71:52:ba:0d:2b:7d:b3:0c:24:5d:da:77:1c:93:62:
                    8a:de:e3:95:47:5e:45:0c:de:1d:c7:75:1f:9d:70:
                    cf:b1:0c:93:eb:a5:ff:0a:a2:90:19:54:4d:f2:32:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:36:08:FF:6B:79:1E:D4:DC:46:D4:04:93:CD:C2:25:F2:40:B2
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134362e302f32332d3233203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:19:70:51:24:84:7d:a9:0f:d6:23:52:58:1f:bb:84:d0:24:
         a8:72:d2:58:1a:29:79:e1:cd:a1:9e:e0:fe:3b:03:f4:21:1b:
         96:58:d1:74:79:77:4d:99:f0:57:3e:27:d9:c1:0e:f7:14:f9:
         ef:1d:75:54:f2:97:0c:e9:0e:9a:9a:6b:49:2c:73:dd:b1:27:
         08:83:36:9e:a7:cd:75:3a:26:eb:f6:ce:3c:bf:1b:b5:af:30:
         53:38:2e:86:ce:1d:2c:4d:ce:80:d9:c6:a7:7d:eb:ac:c1:68:
         b1:e0:7f:c0:d7:a3:aa:a6:65:d4:c8:5f:26:e1:78:ea:86:40:
         d2:3e:21:b2:40:a0:91:30:f3:ce:65:18:de:dc:3d:76:3c:8e:
         a0:01:a7:ac:8f:52:cc:eb:27:ff:55:59:1e:bb:7f:a4:72:6b:
         80:99:fa:7d:ab:d6:f6:86:60:74:ff:2c:09:ab:02:81:1f:b1:
         76:29:89:32:7e:26:98:27:81:f0:93:e8:33:6c:f5:3f:cb:ab:
         82:cb:29:35:40:da:1f:a2:4c:02:58:74:cd:65:e7:10:26:ab:
         4b:46:bb:3d:98:bc:b4:8b:2d:2f:06:b4:14:09:14:61:1f:88:
         47:2f:4e:71:64:50:47:d3:0a:82:ff:fe:05:07:fb:5f:6b:cc:
         97:59:96:fc
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUZcRWPYBgnr8qzPekL2e8Q2qS/gAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTUwWhcNMjcwNjA0MTIzMDUw
WjAzMTEwLwYDVQQDEygzNzYzMzYwOEZGNkI3OTFFRDREQzQ2RDQwNDkzQ0RDMjI1
RjI0MEIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp7QDeS3tmf+
Pg4GysZjyTkGgwko4M1pyZNP4xmIQpmNEdGArrPGK/VU4RCPgHmFyJbrk+sLW9cB
L9Z55LpqIfh5NlMZV802bHv6C8+KO3TvJvQwfk5t55GY/D9DeciRmTG/Ga3rmZU3
reqOA4Wxyvuim9sH4w/8tpP299pAgTwrX0uO2hmbAnlfa4n3QwPOVooqaIn44HZa
Ma+ELv9NiN+KpNvEV0yXMJ1vaH3nNI9nMElTiqo0CY1vwnG0lzWbNoNFe+eX8Cpo
B9HKXUmuG+5xUroNK32zDCRd2ncck2KK3uOVR15FDN4dx3UfnXDPsQyT66X/CqKQ
GVRN8jIMEQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDdjNgj/a3ke1NxG1ASTzcIl
8kCyMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w
ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzYyZTMwMmYzMjMz
MmQzMjMzMjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqSMA0GCSqGSIb3
DQEBCwUAA4IBAQAKGXBRJIR9qQ/WI1JYH7uE0CSoctJYGil54c2hnuD+OwP0IRuW
WNF0eXdNmfBXPifZwQ73FPnvHXVU8pcM6Q6ammtJLHPdsScIgzaep811Oibr9s48
vxu1rzBTOC6Gzh0sTc6A2canfeuswWix4H/A16OqpmXUyF8m4XjqhkDSPiGyQKCR
MPPOZRje3D12PI6gAaesj1LM6yf/VVkeu3+kcmuAmfp9q9b2hmB0/ywJqwKBH7F2
KYkyfiaYJ4Hwk+gzbPU/y6uCyyk1QNofokwCWHTNZecQJqtLRrs9mLy0iy0vBrQU
CRRhH4hHL05xZFBH0wqC//4FB/tfa8yXWZb8
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:12 2026 by rpki-client