Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31302e302f32342d3234203d3e203336333531.roa
File:                     3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier:          ydLn4oI56Cxp80uZgPzD/u29mzxzfH/nFCZZVzzJ2JM=
Subject key identifier:   4E:7A:09:58:6C:AA:5A:A4:58:3D:E6:34:13:F3:5C:45:0B:06:1C:40
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       71FCBE4EC6CA1E9730F210A837E9D76560D0A42A
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31302e302f32342d3234203d3e203336333531.roa
Signing time:             Thu 12 Oct 2023 16:10:39 +0000
ROA not before:           Thu 12 Oct 2023 16:05:39 +0000
ROA not after:            Thu 10 Oct 2024 16:10:39 +0000
asID:                     36351
IP address blocks:        104.245.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 23:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fc:be:4e:c6:ca:1e:97:30:f2:10:a8:37:e9:d7:65:60:d0:a4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:39 2023 GMT
            Not After : Oct 10 16:10:39 2024 GMT
        Subject: CN=4E7A09586CAA5AA4583DE63413F35C450B061C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:93:20:5d:4a:a1:1c:73:63:48:50:78:ba:
                    96:1b:ed:2f:15:be:a5:95:54:11:10:34:7e:1d:a6:
                    eb:40:00:7e:14:77:c4:86:dd:df:f8:8a:43:ac:e2:
                    9f:b5:90:52:05:49:47:dc:3a:a2:b4:20:79:a5:3d:
                    43:da:fe:85:30:52:eb:4c:dd:3e:e0:6a:00:a2:48:
                    ca:b7:3a:2a:c2:69:ba:db:aa:a9:33:a0:d4:f6:de:
                    b7:e3:1e:43:d0:a1:51:dc:5a:1b:12:9e:bb:48:67:
                    94:fd:58:14:10:b1:62:ff:94:f4:cc:15:f6:11:ab:
                    d7:54:f3:33:85:30:a1:58:9c:fd:5f:6c:d3:6c:0d:
                    bc:2e:14:2f:d8:f1:14:f3:1f:5f:16:49:1a:d4:e7:
                    f6:12:51:4b:d5:d0:41:56:f7:dd:ae:bc:c7:07:19:
                    6d:82:0d:fe:cf:4e:9b:ac:3f:37:d6:bd:4c:f3:df:
                    78:ca:fe:4a:0c:29:8d:dd:f3:7f:4d:51:41:74:20:
                    ec:db:dc:d0:da:79:e8:04:92:97:0c:91:ca:c6:8e:
                    0a:5a:b5:a4:93:25:b8:d4:2e:53:c9:63:c9:2d:cd:
                    0d:9e:26:3d:35:7d:70:00:6c:9d:0d:67:17:96:e1:
                    75:8b:17:08:5b:f4:5e:2d:56:b7:1f:e0:74:d9:50:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7A:09:58:6C:AA:5A:A4:58:3D:E6:34:13:F3:5C:45:0B:06:1C:40
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31302e302f32342d3234203d3e203336333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2f:fb:74:96:59:43:ce:ac:96:2a:3c:ad:a3:f7:5e:b0:08:
         8b:3b:69:03:b9:9c:64:da:b8:6a:b0:b5:59:12:23:e2:b2:f9:
         d1:2b:ce:55:dd:ec:36:57:a4:85:b8:16:d2:1a:cf:57:c5:ff:
         73:9f:96:a7:1d:d7:3b:ab:88:60:6d:39:ec:89:97:54:f7:aa:
         ca:28:ce:cc:94:c8:e1:9f:2b:82:0e:ab:3f:b9:81:aa:0e:c4:
         63:2a:10:9e:a7:f9:2c:9c:3a:d7:c2:f0:4f:31:39:8e:43:5d:
         9f:17:04:e8:39:ce:16:70:9b:7b:43:ed:4b:6d:ff:92:7b:c2:
         25:12:09:b3:f5:72:3f:89:38:8d:2f:4d:ad:65:8b:01:e2:14:
         c8:2f:ef:df:9e:96:28:38:5d:6e:68:de:e5:2c:e9:3a:34:24:
         a4:d5:bb:f4:c9:f2:dc:78:e9:5f:b2:9a:15:9c:a5:33:a6:b9:
         c4:6d:8f:47:11:64:1f:bd:af:2f:d0:71:d2:56:56:37:b1:61:
         54:b8:b3:3f:eb:f6:e4:73:d0:07:3f:c7:eb:e1:32:42:1a:b4:
         b4:c5:0f:a0:ed:22:2a:a3:77:00:5d:27:64:e3:d6:67:76:a9:
         73:e3:49:48:34:e1:02:dd:71:2d:f7:05:6b:0a:58:bf:68:0a:
         28:35:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:50:21 2024 by rpki-client on console-ams.rpki-client.org