Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa
File:                     326130613a616363303a3a2f33322d3438203d3e2036333639.roa (raw, json)
Hash identifier:          RFCEZxxca5K7Yue8Y+zTDIF6mxMSjpiyodhBTqIw324=
Subject key identifier:   AB:6F:F1:43:A7:84:9C:51:09:42:C1:EA:BC:B0:46:9F:D3:1A:02:8F
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       4F7916D7FC0C97A1F818966ED3FF928B079EADCF
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa
Signing time:             Thu 12 Oct 2023 16:10:33 +0000
ROA not before:           Thu 12 Oct 2023 16:05:33 +0000
ROA not after:            Thu 10 Oct 2024 16:10:33 +0000
asID:                     6369
IP address blocks:        2a0a:acc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:79:16:d7:fc:0c:97:a1:f8:18:96:6e:d3:ff:92:8b:07:9e:ad:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Oct 12 16:05:33 2023 GMT
            Not After : Oct 10 16:10:33 2024 GMT
        Subject: CN=AB6FF143A7849C510942C1EABCB0469FD31A028F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7b:8a:cc:ba:f2:36:1e:be:b9:a3:da:8e:48:
                    95:4a:23:96:a9:52:92:67:71:05:68:bd:b9:ae:f3:
                    ac:00:83:5c:00:1e:fb:ed:90:d3:1b:15:25:f9:df:
                    0b:5f:be:4e:c5:ff:72:74:02:a2:90:66:f5:0c:f4:
                    72:f3:2f:91:0c:ad:54:c0:03:59:47:38:df:5a:39:
                    3f:3d:cc:fe:ee:59:a3:bc:e2:94:af:88:22:f0:4e:
                    24:74:e0:76:8d:a7:56:09:08:df:8f:cd:8b:f2:21:
                    65:9a:92:e2:89:a9:03:8c:db:58:51:09:30:de:62:
                    3e:c2:9e:6e:29:10:bc:b6:b0:23:7d:af:a9:55:84:
                    bd:0a:ee:60:01:c4:97:dc:20:ea:19:ac:bb:94:87:
                    a2:31:93:4b:af:d6:d7:08:14:58:c8:7e:39:a0:65:
                    95:e1:38:55:52:42:00:78:28:06:cd:77:8f:74:3f:
                    13:7d:05:02:7a:97:8c:17:20:76:c3:c7:7e:72:89:
                    f1:fe:30:93:90:2c:3c:c1:9f:bf:d6:b2:f4:93:ec:
                    22:1d:76:13:4f:fe:a1:18:73:44:09:af:fc:cf:6a:
                    f1:c0:a9:00:ce:2d:04:3c:d2:71:0a:1b:d2:81:fb:
                    16:f1:68:7a:36:65:64:8a:37:eb:eb:cf:8c:80:fc:
                    90:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6F:F1:43:A7:84:9C:51:09:42:C1:EA:BC:B0:46:9F:D3:1A:02:8F
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363303a3a2f33322d3438203d3e2036333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:acc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:1a:71:f7:46:4a:fa:2f:5d:1a:58:ff:ae:c6:d1:2c:ca:75:
         8b:ce:5d:8a:48:ef:33:94:ef:84:02:02:01:12:55:96:b1:40:
         1f:41:5d:a7:07:f3:18:db:76:5b:66:2b:46:56:79:a4:bf:aa:
         62:f5:45:88:36:1a:49:9c:bd:eb:51:1c:f8:4b:d2:d4:84:8f:
         a8:66:26:6b:5a:1a:44:2f:62:f1:54:42:01:e7:39:62:7f:2f:
         59:75:33:03:5e:4b:31:fa:f9:78:66:11:1b:c9:e3:b5:58:52:
         0b:ec:a0:1d:fd:a6:11:6b:97:81:22:d9:bc:de:cd:7d:72:f5:
         13:a2:67:e5:34:81:48:1b:7a:af:70:4c:46:ef:fb:cc:f4:2f:
         4a:40:09:5f:22:00:8b:28:64:61:52:1d:8e:a5:7e:a4:9c:d0:
         6e:db:7e:7b:14:0e:70:5f:55:d1:75:2c:f1:6c:7f:27:e3:9b:
         81:3a:4a:5e:b1:ba:77:e8:e6:22:e7:b7:38:ff:a2:fb:24:2a:
         5a:ac:f7:33:32:7b:c6:d3:0f:8e:f7:7c:f0:c0:72:23:db:d5:
         4e:fd:5f:49:fc:7a:d9:12:b6:35:8f:a3:da:79:ee:20:47:19:
         c6:da:3b:ca:99:bf:b0:ca:c3:01:49:07:93:3f:ca:97:7d:b7:
         b6:69:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----