Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier:          rRZIvIbeIKtFy+fg7WD5vHXyA/3sdYGOYKV7aW8aYn4=
Subject key identifier:   BE:E4:78:E5:5B:D0:8C:D9:03:FC:09:42:E0:2A:52:31:D4:48:57:57
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       1C17CEA2261E02D6A8BC3E9B5B984068FB55E0A3
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
Signing time:             Fri 05 Jun 2026 12:30:47 +0000
ROA not before:           Fri 05 Jun 2026 12:25:47 +0000
ROA not after:            Fri 04 Jun 2027 12:30:47 +0000
asID:                     33538
IP address blocks:        216.145.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:17:ce:a2:26:1e:02:d6:a8:bc:3e:9b:5b:98:40:68:fb:55:e0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:47 2026 GMT
            Not After : Jun  4 12:30:47 2027 GMT
        Subject: CN=BEE478E55BD08CD903FC0942E02A5231D4485757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:23:c9:58:56:c7:2a:bf:07:22:95:b7:a2:
                    aa:e1:0a:b4:90:04:d1:19:da:e0:be:84:09:3c:38:
                    c4:e2:ab:11:51:65:30:3c:43:04:8e:cc:04:14:f1:
                    70:44:5a:69:23:b8:07:61:f7:3a:3c:14:c5:a1:42:
                    d8:df:2e:6c:e1:30:66:ee:63:76:43:23:7d:30:98:
                    5f:1f:87:c9:44:15:2d:9d:1a:35:2f:6d:dd:0c:96:
                    2a:06:a8:9d:fe:67:93:c4:71:89:94:20:94:5a:35:
                    7b:ba:c7:37:7e:42:25:87:6e:e9:f6:de:6d:93:0a:
                    8b:f0:38:c4:f4:b1:96:70:2b:cd:df:4f:4f:83:1a:
                    b3:46:f9:0c:f1:5a:58:da:ba:e5:c0:88:50:68:be:
                    00:fe:07:6a:e2:64:c7:60:1f:a2:1d:a9:99:2d:03:
                    e0:24:79:63:4c:84:45:94:17:14:9a:9e:31:84:4b:
                    72:61:d1:61:2c:59:56:02:31:22:72:d9:11:7c:01:
                    22:a4:40:ef:52:06:ac:b4:98:a0:be:58:1e:24:d7:
                    8a:7f:70:12:16:40:b5:a1:87:75:f5:ed:e7:4a:ea:
                    45:53:be:fe:cc:a5:f1:6b:6e:85:11:1f:c0:61:46:
                    d0:db:76:41:09:ab:26:3f:6a:1b:03:4d:0e:5f:b8:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E4:78:E5:5B:D0:8C:D9:03:FC:09:42:E0:2A:52:31:D4:48:57:57
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:60:38:cb:ed:36:84:17:bd:1a:4b:5c:82:36:c7:9f:8d:08:
         60:b4:f4:d5:ec:c3:d6:d5:b2:ba:67:c9:ff:cf:f0:be:a1:2a:
         c7:df:da:89:55:e9:04:27:2d:31:13:ab:7c:37:88:e5:fc:e4:
         e1:f1:4e:4d:2b:c1:45:89:23:6d:43:8b:c7:8e:48:fb:80:25:
         4c:4d:7f:89:e6:de:09:35:e0:14:38:a1:17:df:e3:de:d2:aa:
         51:d8:65:b9:0e:76:78:ff:50:68:5b:33:b4:7f:70:0a:c0:dc:
         35:43:14:cc:ba:2a:63:52:17:87:50:d1:27:bb:35:a5:86:94:
         53:5e:b0:f9:e2:0d:8f:ac:72:5b:b6:16:40:69:43:9b:d1:95:
         b7:5d:6f:01:78:24:b9:a3:c0:2e:df:8e:49:d9:01:19:a7:42:
         a1:5d:41:ba:10:c6:7a:b0:2d:b5:80:92:cb:b6:d1:11:3e:82:
         9d:f4:57:58:94:ee:4e:14:78:05:f0:f7:e1:55:36:df:13:aa:
         b3:16:be:4a:ff:87:82:e3:77:b6:d3:c8:1c:03:5a:1b:9a:0b:
         f3:9d:f1:92:b7:41:8e:a4:89:7a:fa:a7:1f:08:3e:ed:df:55:
         4c:86:a4:27:85:3c:b0:bf:4d:86:30:ce:64:b5:b5:18:68:17:
         ec:61:82:13
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUHBfOoiYeAtaovD6bW5hAaPtV4KMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTQ3WhcNMjcwNjA0MTIzMDQ3
WjAzMTEwLwYDVQQDEyhCRUU0NzhFNTVCRDA4Q0Q5MDNGQzA5NDJFMDJBNTIzMUQ0
NDg1NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs8jyVhWxyq/
ByKVt6Kq4Qq0kATRGdrgvoQJPDjE4qsRUWUwPEMEjswEFPFwRFppI7gHYfc6PBTF
oULY3y5s4TBm7mN2QyN9MJhfH4fJRBUtnRo1L23dDJYqBqid/meTxHGJlCCUWjV7
usc3fkIlh27p9t5tkwqL8DjE9LGWcCvN309PgxqzRvkM8VpY2rrlwIhQaL4A/gdq
4mTHYB+iHamZLQPgJHljTIRFlBcUmp4xhEtyYdFhLFlWAjEictkRfAEipEDvUgas
tJigvlgeJNeKf3ASFkC1oYd19e3nSupFU77+zKXxa26FER/AYUbQ23ZBCasmP2ob
A00OX7jS8wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFL7keOVb0IzZA/wJQuAqUjHU
SFdXMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/
MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG
SIb3DQEBCwUAA4IBAQBLYDjL7TaEF70aS1yCNsefjQhgtPTV7MPW1bK6Z8n/z/C+
oSrH39qJVekEJy0xE6t8N4jl/OTh8U5NK8FFiSNtQ4vHjkj7gCVMTX+J5t4JNeAU
OKEX3+Pe0qpR2GW5DnZ4/1BoWzO0f3AKwNw1QxTMuipjUheHUNEnuzWlhpRTXrD5
4g2PrHJbthZAaUOb0ZW3XW8BeCS5o8Au345J2QEZp0KhXUG6EMZ6sC21gJLLttER
PoKd9FdYlO5OFHgF8PfhVTbfE6qzFr5K/4eC43e208gcA1obmgvznfGSt0GOpIl6
+qcfCD7t31VMhqQnhTywv02GMM5ktbUYaBfsYYIT
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:13 2026 by rpki-client