Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          0ZaDkOK5lA+U16EO1skrHOejo3+7fez5hpMP4a2fAUU=
Subject key identifier:   C7:6A:E4:9E:D1:9F:C1:9A:C8:C0:7B:E3:45:6B:AE:16:0D:D8:F2:80
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       4E898FAB0312AED13BFCA03E68F7265CFFFE003F
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa
Signing time:             Fri 05 Jun 2026 12:30:51 +0000
ROA not before:           Fri 05 Jun 2026 12:25:51 +0000
ROA not after:            Fri 04 Jun 2027 12:30:51 +0000
asID:                     33538
IP address blocks:        2620:134:6007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:89:8f:ab:03:12:ae:d1:3b:fc:a0:3e:68:f7:26:5c:ff:fe:00:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:51 2026 GMT
            Not After : Jun  4 12:30:51 2027 GMT
        Subject: CN=C76AE49ED19FC19AC8C07BE3456BAE160DD8F280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:55:88:aa:b6:be:1a:7d:d1:07:1b:9e:15:
                    a7:d5:dd:f3:ed:80:36:23:de:da:31:87:14:c6:a4:
                    76:4e:ce:d0:b1:b0:3a:eb:61:f0:fe:c1:a7:c9:7e:
                    c1:2c:ce:a2:77:6f:6e:4e:bb:f6:29:97:08:0b:53:
                    ce:09:0c:8b:7c:a3:d1:51:60:5a:e1:2d:93:8c:66:
                    fb:f0:ee:00:00:e6:f1:e6:42:fb:09:09:f3:fb:09:
                    bb:26:bd:52:f1:78:a8:b6:88:66:eb:14:56:fc:bc:
                    36:00:f0:53:eb:c2:01:d2:86:b0:12:41:16:a2:c5:
                    bb:20:57:ec:95:9a:7e:38:3e:2e:8e:ec:98:ba:ed:
                    bf:9e:52:39:85:d9:11:2f:86:51:cf:51:14:bb:0e:
                    26:d0:85:f1:0f:e7:fc:16:95:58:b6:08:07:f8:24:
                    04:dd:44:22:2f:e2:a6:9b:45:33:08:02:05:87:25:
                    ef:f5:0b:20:05:03:65:13:35:95:cb:03:e4:32:ff:
                    d0:d5:2c:8f:43:6a:84:34:36:2e:41:e9:00:d5:e2:
                    fd:8e:44:bb:46:0d:ac:97:32:d8:6f:d3:fb:8d:cd:
                    c5:37:b6:d6:38:d8:49:28:7e:ca:b9:34:46:d6:ef:
                    6b:dc:df:8d:7b:ae:9e:8b:d0:55:75:8b:bf:2e:85:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:E4:9E:D1:9F:C1:9A:C8:C0:7B:E3:45:6B:AE:16:0D:D8:F2:80
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:50:8a:fe:df:72:6b:9d:79:d5:86:65:67:9d:16:58:83:9a:
         90:c7:0d:c2:a9:fd:08:3e:2d:5b:a9:76:e7:eb:2e:7a:be:df:
         8b:55:78:60:93:3e:64:12:f6:40:2b:49:72:43:30:ea:e2:49:
         d9:3a:81:72:93:4d:2a:10:df:c7:4a:1e:f8:d4:3c:4f:c6:b0:
         f8:2d:8c:4f:c4:0d:cb:ef:ee:b3:a6:52:0e:e7:cc:c2:fd:36:
         33:2d:45:67:ec:e5:87:f5:f7:86:f8:c7:25:db:c4:2f:48:0a:
         ee:53:33:d7:ca:8c:66:d9:88:97:c3:98:2f:24:83:e3:60:ac:
         1b:d0:8b:7b:6b:15:ec:e0:99:0c:be:08:22:0c:93:05:e6:54:
         1c:49:9a:cb:2d:2d:9b:e3:9e:4a:61:17:a1:4a:93:1c:0b:83:
         81:45:fa:b3:5c:34:06:10:f2:19:ad:32:6e:2d:a0:1f:70:7f:
         c4:dd:29:da:4c:dd:0e:ee:32:f8:04:7c:52:d7:ef:5c:00:b2:
         44:f2:59:6f:43:ba:94:5c:6b:ba:6a:79:f0:71:0b:06:d3:5c:
         fb:24:63:42:34:a9:00:fa:cf:ab:33:5a:c5:29:20:d3:a4:a5:
         9c:f5:93:79:dc:8f:83:39:61:57:a0:6f:fa:70:1b:f6:4c:e8:
         8d:b3:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:52 2026 by rpki-client