Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130613a616363323a3a2f33322d3438203d3e2036323333.roa
File:                     326130613a616363323a3a2f33322d3438203d3e2036323333.roa (raw, json)
Hash identifier:          Yyn3/wa7vfc7O62FKkGu7UiMALSDwNUSjrN397Zsk1Q=
Subject key identifier:   CB:FC:45:EF:B2:1F:74:65:8D:8E:E3:F9:B6:5A:F6:50:95:82:BB:46
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       4690E8A65A79A3FA36A73B51E4C7C0A081BE9FCC
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363323a3a2f33322d3438203d3e2036323333.roa
Signing time:             Thu 12 Oct 2023 16:10:34 +0000
ROA not before:           Thu 12 Oct 2023 16:05:34 +0000
ROA not after:            Thu 10 Oct 2024 16:10:34 +0000
asID:                     6233
IP address blocks:        2a0a:acc2::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:90:e8:a6:5a:79:a3:fa:36:a7:3b:51:e4:c7:c0:a0:81:be:9f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Oct 12 16:05:34 2023 GMT
            Not After : Oct 10 16:10:34 2024 GMT
        Subject: CN=CBFC45EFB21F74658D8EE3F9B65AF6509582BB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:24:00:a2:16:e3:4a:c9:19:90:fb:56:d9:
                    8c:27:99:9a:ff:96:71:0c:3f:b1:69:0b:03:2f:86:
                    d7:bb:70:66:e7:d4:92:fe:a2:12:f7:74:54:1e:9f:
                    df:39:38:41:61:42:2b:55:5b:69:09:b0:eb:01:12:
                    85:45:a6:52:25:63:34:3a:ce:c7:32:be:68:54:ba:
                    19:19:90:6e:46:d4:06:6b:76:06:e6:35:30:fe:47:
                    71:c7:c6:44:d5:b6:f9:3e:3c:27:62:32:50:13:d9:
                    f5:77:21:4e:1b:e3:49:53:31:6a:00:93:69:90:46:
                    87:ce:91:1f:f0:2a:70:c6:bb:80:75:90:4e:fb:22:
                    07:b0:08:b1:88:9c:e5:0a:0f:ab:be:7a:ee:6c:56:
                    3c:6d:6f:d2:81:3b:1c:cb:e9:0d:90:a6:6c:6e:fa:
                    5b:0b:8d:05:b3:37:7b:37:de:a1:60:38:9c:4d:7e:
                    33:fb:80:10:e6:62:97:7e:d0:70:f0:2e:4e:65:8d:
                    d4:a0:38:50:1c:b1:dc:1e:39:92:11:2c:7f:50:c6:
                    cd:bf:e3:f6:e0:ec:86:24:a5:08:e7:69:10:59:54:
                    17:80:6f:7b:2d:74:f5:a5:4f:6e:a5:df:d0:6f:2b:
                    8a:a6:22:7a:40:fd:21:a4:69:eb:1f:27:db:28:5d:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FC:45:EF:B2:1F:74:65:8D:8E:E3:F9:B6:5A:F6:50:95:82:BB:46
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130613a616363323a3a2f33322d3438203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:acc2::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:65:9d:4c:69:6e:fd:f5:0d:c7:4c:7a:12:32:98:00:51:
         b0:7d:0b:2a:2e:0f:8c:f5:25:3b:c0:22:ec:49:b5:f1:3b:f3:
         ba:38:74:96:90:77:87:2d:f7:41:5e:8a:55:63:ce:f9:33:3f:
         56:d1:b0:03:82:14:2f:36:05:8a:f0:18:d2:86:9e:c2:e2:03:
         f3:57:7b:ad:b1:ca:bc:21:77:63:6f:24:31:c9:cd:41:23:92:
         41:a3:09:07:e2:5c:c3:6c:86:b1:6e:7f:2c:74:58:0f:74:ba:
         df:28:5a:40:bd:dc:e9:0a:40:42:3c:65:75:ab:2f:81:67:f3:
         51:b0:e8:e3:82:b9:8a:10:d1:f0:19:a0:a5:5f:14:ad:a4:7e:
         01:c0:ad:ae:4a:6e:e1:9e:ce:11:58:84:63:5c:83:94:47:67:
         8c:e8:1f:1d:a5:12:ef:40:fd:74:40:de:98:46:3c:84:1b:a1:
         52:6e:ca:ab:d8:9e:50:5f:81:f7:cc:c5:c5:16:b0:e0:34:3c:
         22:4b:a4:f9:9d:cf:4f:2f:4d:35:fd:4a:17:a4:d4:f3:4a:f0:
         55:14:83:67:f1:68:13:77:69:d1:99:9c:b8:c7:0b:d5:3b:fe:
         14:ef:99:04:fc:f2:a5:28:c8:4f:a8:a4:32:e7:d5:f0:ce:54:
         ff:43:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----