Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
File:                     32332e3134352e34382e302f32342d3234203d3e203530313331.roa (raw, json)
Hash identifier:          ta3bBWXxY4qLWB10THmdI9XwgmXKENQbgYikvtaJzH0=
Subject key identifier:   36:81:BD:85:70:74:EA:9A:2F:49:84:7C:20:16:74:CE:E7:91:B6:E4
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       60504C86F5641CE65BD8E15F9910017214C7E8C8
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
Signing time:             Wed 02 Jul 2025 16:24:23 +0000
ROA not before:           Wed 02 Jul 2025 16:19:23 +0000
ROA not after:            Wed 01 Jul 2026 16:24:23 +0000
asID:                     50131
IP address blocks:        23.145.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 09:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:50:4c:86:f5:64:1c:e6:5b:d8:e1:5f:99:10:01:72:14:c7:e8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jul  2 16:19:23 2025 GMT
            Not After : Jul  1 16:24:23 2026 GMT
        Subject: CN=3681BD857074EA9A2F49847C201674CEE791B6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:8b:f8:74:8f:a0:a0:d3:a9:f7:9a:14:36:
                    73:5a:27:60:f9:f9:e0:b4:d0:6f:32:ba:62:ef:8f:
                    79:27:f3:fd:87:ba:ba:43:04:cf:bb:01:98:5c:b8:
                    3e:bf:4a:61:28:26:85:34:32:43:cd:0f:a6:ca:f5:
                    ce:28:fc:07:e8:8c:0d:59:c3:69:ad:08:b2:69:bc:
                    74:cd:b8:6f:5e:14:b1:b1:5c:7f:ba:3f:83:81:94:
                    2a:b4:e7:eb:1b:bd:bb:a0:d9:d2:04:30:e3:c8:4e:
                    0c:34:4d:9a:1e:0a:b6:de:ff:0f:5d:48:f6:34:1c:
                    ce:67:c9:3c:0b:9c:ae:d4:82:b8:ef:6e:45:2a:64:
                    7d:ef:f3:48:db:e1:7b:7d:aa:a1:6a:a1:55:f2:d1:
                    c9:6b:91:bd:c0:6e:2a:fd:e1:f0:9b:18:a2:8f:32:
                    dd:eb:5b:61:75:7a:ae:58:08:b8:94:80:73:12:32:
                    e9:8a:4a:73:f6:f0:39:26:cb:f1:5e:f2:f4:a5:ea:
                    c3:9f:38:31:95:1c:39:04:12:69:bf:b4:4f:d8:da:
                    c3:83:75:d7:60:a7:23:e7:39:c5:15:5f:c1:29:57:
                    6d:91:b3:2c:24:4e:eb:ae:0e:c4:c3:63:81:f7:45:
                    fb:13:2b:26:4e:c1:36:d8:34:4f:cd:03:05:be:dd:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:81:BD:85:70:74:EA:9A:2F:49:84:7C:20:16:74:CE:E7:91:B6:E4
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:3e:22:aa:3a:22:b6:8e:53:52:c2:aa:83:da:02:5a:6c:
         05:4a:7b:f7:8f:4f:5e:58:02:c4:e0:b9:d7:5e:55:f7:54:fe:
         39:dd:ed:70:35:95:fc:b6:a3:22:56:fe:ce:b6:ac:42:6b:77:
         e3:76:e3:2a:34:b2:f3:e5:63:8a:c4:a3:4a:34:e5:92:2f:51:
         0d:ab:8c:03:89:c3:4f:9b:93:f9:77:c9:96:f3:9c:8e:93:9b:
         87:93:01:21:32:d1:b6:10:7e:c8:36:a2:31:f2:e7:5a:53:c0:
         13:4c:48:2f:16:08:db:bc:db:a3:1a:ee:a1:f3:17:8e:46:6b:
         12:6f:7b:1d:5f:10:ca:97:6d:8b:c0:44:a6:d9:4f:ae:54:f1:
         8a:13:53:39:57:0a:3c:80:64:b4:8c:83:28:53:63:eb:15:45:
         19:aa:d4:da:23:e9:e1:1c:cb:20:ef:4b:f6:f9:db:26:51:d6:
         3d:ce:d8:ec:73:d0:0d:44:63:1a:ce:a6:12:53:2e:5f:4c:df:
         ae:8f:b1:78:3b:40:78:66:0c:15:86:3b:97:10:14:3a:3e:9f:
         81:01:98:db:06:5a:2b:49:ef:ba:dd:03:72:bb:04:c7:4f:dd:
         1a:0a:10:17:53:6a:19:9a:31:e3:26:4a:a6:ec:4e:db:14:3b:
         8e:b5:cb:54
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYFBMhvVkHOZb2OFfmRABchTH6MgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjUwNzAyMTYxOTIzWhcNMjYwNzAxMTYyNDIz
WjAzMTEwLwYDVQQDEygzNjgxQkQ4NTcwNzRFQTlBMkY0OTg0N0MyMDE2NzRDRUU3
OTFCNkU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7eL+HSPoKDT
qfeaFDZzWidg+fngtNBvMrpi7495J/P9h7q6QwTPuwGYXLg+v0phKCaFNDJDzQ+m
yvXOKPwH6IwNWcNprQiyabx0zbhvXhSxsVx/uj+DgZQqtOfrG727oNnSBDDjyE4M
NE2aHgq23v8PXUj2NBzOZ8k8C5yu1IK4725FKmR97/NI2+F7faqhaqFV8tHJa5G9
wG4q/eHwmxiijzLd61thdXquWAi4lIBzEjLpikpz9vA5JsvxXvL0perDnzgxlRw5
BBJpv7RP2NrDg3XXYKcj5znFFV/BKVdtkbMsJE7rrg7Ew2OB90X7EysmTsE22DRP
zQMFvt1kqQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFDaBvYVwdOqaL0mEfCAWdM7n
kbbkMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzMzJlMzEzNDM1MmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMDMxMzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeRMDAN
BgkqhkiG9w0BAQsFAAOCAQEABvk+Iqo6IraOU1LCqoPaAlpsBUp7949PXlgCxOC5
115V91T+Od3tcDWV/LajIlb+zrasQmt343bjKjSy8+VjisSjSjTlki9RDauMA4nD
T5uT+XfJlvOcjpObh5MBITLRthB+yDaiMfLnWlPAE0xILxYI27zboxruofMXjkZr
Em97HV8Qypdti8BEptlPrlTxihNTOVcKPIBktIyDKFNj6xVFGarU2iPp4RzLIO9L
9vnbJlHWPc7Y7HPQDURjGs6mElMuX0zfro+xeDtAeGYMFYY7lxAUOj6fgQGY2wZa
K0nvut0DcrsEx0/dGgoQF1NqGZox4yZKpuxO2xQ7jrXLVA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:18:31 2025 by rpki-client