Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa
File:                     3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          VtfKACnvV9p8KgoL0eGPone7FAEDbBxHSAE9bYMcM9A=
Subject key identifier:   86:6A:3D:4C:20:97:03:A7:16:45:92:50:02:48:7E:8D:28:7B:75:65
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       03CDFEBF6215AB2752ECBD5B533B3DA6D01838EB
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa
Signing time:             Thu 12 Oct 2023 16:10:37 +0000
ROA not before:           Thu 12 Oct 2023 16:05:37 +0000
ROA not after:            Thu 10 Oct 2024 16:10:37 +0000
asID:                     6233
IP address blocks:        104.245.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 10:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cd:fe:bf:62:15:ab:27:52:ec:bd:5b:53:3b:3d:a6:d0:18:38:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:37 2023 GMT
            Not After : Oct 10 16:10:37 2024 GMT
        Subject: CN=866A3D4C209703A71645925002487E8D287B7565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:14:a4:b3:3c:c1:28:06:0a:43:bf:92:62:01:
                    5d:96:8f:80:37:50:94:9d:bc:1c:b6:1f:0d:94:56:
                    95:ba:90:71:d9:07:79:bd:cd:d5:30:28:db:30:b4:
                    d1:cf:8c:65:a2:be:bf:24:fa:62:0c:49:2d:5e:9c:
                    9b:a9:42:a7:d8:e0:e0:81:98:30:57:cd:81:dc:35:
                    e6:b2:6f:2b:94:cd:2b:d4:27:e6:98:3b:17:1a:30:
                    55:e8:ef:90:f7:53:b3:d6:5e:b7:9c:fc:1e:4f:54:
                    b6:68:89:d4:b7:6b:94:05:8c:58:d2:48:e1:f2:c2:
                    cb:77:13:d4:4a:71:0e:d1:c1:8e:21:08:0e:5f:ac:
                    46:9f:67:8e:f7:d5:06:23:65:d2:bb:9b:0d:5c:31:
                    2c:f0:82:a4:4e:ef:c9:43:34:a3:aa:08:de:3f:b3:
                    63:05:ba:83:0d:b1:d9:5d:d3:77:43:39:1a:6d:77:
                    b3:98:4c:22:99:6f:03:71:66:1f:d9:0c:e2:b7:3c:
                    c2:cf:ed:24:cd:f0:fe:ed:a7:89:4a:c0:27:70:2a:
                    02:fc:60:5b:fa:72:9e:76:8d:df:1c:43:a2:d5:7a:
                    e7:a9:95:f5:16:68:b7:a4:8f:20:43:e1:69:b0:cf:
                    de:ae:8d:7b:02:c8:7a:34:df:35:70:95:52:6f:4f:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6A:3D:4C:20:97:03:A7:16:45:92:50:02:48:7E:8D:28:7B:75:65
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:88:10:21:ed:97:ee:b1:eb:f0:40:81:de:6d:b0:ad:cf:ef:
         4d:45:35:29:dc:f8:4e:39:02:86:17:ee:27:90:74:c7:9f:08:
         9a:12:74:79:af:fd:fd:0b:b7:49:c6:2f:dc:80:3a:17:71:b5:
         f0:82:15:7a:63:92:21:d9:18:73:16:71:d2:28:94:d1:ee:84:
         13:82:19:83:3b:f6:b1:29:43:27:2c:27:9e:30:7b:16:25:5f:
         46:b4:f3:47:ad:a1:ba:45:b3:81:56:aa:8e:f2:69:bf:26:d9:
         8a:ca:2e:9f:40:ee:91:de:37:74:e1:f4:85:81:80:91:bc:c9:
         93:2b:c8:41:04:35:d6:8c:3b:32:0b:43:2d:70:67:08:80:a2:
         7e:76:dc:f7:de:ed:3b:65:fc:3f:51:fc:fc:99:f7:c0:0c:9f:
         64:29:8e:ec:4c:b1:b7:a4:c6:47:0b:e2:bd:a0:9c:50:5e:34:
         9c:2b:6d:b4:9d:50:c4:cb:84:1a:0a:4b:a7:73:23:c2:1c:03:
         e1:54:af:85:42:57:53:6a:7c:0c:48:a7:a9:9d:8f:3b:f7:e8:
         0a:04:50:9e:05:ec:f2:96:82:c1:12:a8:4a:89:dc:45:0c:f0:
         1e:c9:a3:4d:14:62:85:8f:11:04:37:40:17:2b:e4:6c:ff:50:
         b2:7b:5d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:23:04 2024 by rpki-client on console-ams.rpki-client.org