Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          UemSzSnfVwTaaR4+XcRqkpdaHuFVLmLz6DjSQHIbp7o=
Subject key identifier:   9B:DA:AD:68:42:BD:58:B0:F1:71:B0:C5:C9:DF:50:0D:AF:24:C5:AB
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2D91C27B46141962AE6EBD9C07B4E11A16F96B78
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:53 +0000
ROA not before:           Fri 05 Jun 2026 12:25:53 +0000
ROA not after:            Fri 04 Jun 2027 12:30:53 +0000
asID:                     30031
IP address blocks:        2620:134:6003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:91:c2:7b:46:14:19:62:ae:6e:bd:9c:07:b4:e1:1a:16:f9:6b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:53 2026 GMT
            Not After : Jun  4 12:30:53 2027 GMT
        Subject: CN=9BDAAD6842BD58B0F171B0C5C9DF500DAF24C5AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:91:0d:14:a6:9b:7c:cb:13:2a:70:7f:8d:
                    cc:77:a7:77:45:dd:39:ca:e7:b1:a6:85:7d:25:ad:
                    ce:55:4e:55:98:79:38:a3:f1:82:bc:02:56:4b:9f:
                    9f:d2:91:7e:37:ff:f4:e1:c9:db:51:36:b1:e4:c6:
                    79:34:12:03:b2:33:88:8e:c0:5a:a1:51:75:83:37:
                    6d:99:65:2c:ee:07:a8:7f:af:e8:29:02:a0:4f:41:
                    90:7a:28:8f:91:c9:50:91:4b:ba:eb:9a:95:5d:d9:
                    c9:24:36:99:36:3d:01:ce:52:55:29:9e:7c:41:88:
                    01:63:84:43:42:f7:9e:7c:42:1b:6f:42:ea:2a:a8:
                    af:f0:b8:21:90:8c:fd:95:ae:c1:50:f0:91:73:5a:
                    09:2e:6e:97:a5:42:8f:66:4f:5a:37:5f:83:46:e6:
                    f7:a1:ba:ab:ca:f4:a5:7c:63:da:63:45:6f:4a:9a:
                    4c:0e:f6:01:a7:54:57:c7:37:92:5a:a6:1b:41:8f:
                    40:9c:ed:7d:30:97:fb:46:8c:26:a1:a4:cd:29:31:
                    ab:ee:9f:67:4e:d5:ce:5e:00:47:61:59:79:06:c0:
                    8f:6d:17:db:49:b2:bb:09:c3:1d:70:93:2a:9c:4a:
                    19:5c:2b:47:30:6f:7d:7d:cf:a0:54:c6:eb:8e:23:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DA:AD:68:42:BD:58:B0:F1:71:B0:C5:C9:DF:50:0D:AF:24:C5:AB
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:65:2c:2b:39:7d:20:53:cc:bc:16:d1:0f:3e:b2:ef:de:89:
         23:ac:83:51:0d:9f:f4:af:b6:23:52:ee:a8:0e:3a:5c:a2:15:
         6f:1c:00:0e:5d:3c:bd:aa:c2:11:cb:c7:10:9f:59:cb:e5:0b:
         bc:0c:46:9a:32:4b:8d:2e:ef:51:23:a8:07:3e:5a:85:9f:61:
         e1:53:c5:d8:d2:d6:5e:c2:d6:82:28:8e:73:39:c3:44:30:b2:
         92:ae:0a:33:01:e4:93:92:4f:90:23:e4:20:63:02:b9:43:e2:
         11:5d:86:75:95:f6:c3:f9:d0:1b:d3:cf:09:68:28:98:6f:6f:
         2a:e9:9d:34:c5:cf:81:55:a3:cc:7a:be:4f:b0:e7:88:ce:fe:
         24:b4:aa:16:2e:02:67:95:7c:3c:94:f2:03:94:a6:09:ea:6b:
         d6:cb:d1:9c:f5:0c:8d:d6:48:96:43:eb:ef:49:2b:06:cd:9c:
         14:1c:5d:f7:f2:1d:4a:9f:72:09:4a:1a:5f:ea:2e:bf:c4:f7:
         22:3d:86:eb:70:1e:ca:05:ae:ce:e6:61:1d:ab:11:b7:11:d9:
         f3:08:b1:34:e9:ab:0f:2b:e1:87:5b:8e:60:a2:af:64:6d:bb:
         c4:0f:11:8d:43:06:c9:10:66:0a:2e:4b:f0:76:32:d0:bd:9f:
         75:6e:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:00 2026 by rpki-client