Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
File:                     3130342e3234352e382e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier:          niKHCKT3+0eojluMEYMib7dORsPEBt+4GknpJ4sHjp8=
Subject key identifier:   B0:1B:71:28:71:06:7B:68:66:5A:62:96:9D:4F:0B:FB:29:CF:21:BA
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       715C5D22E3858422FBC84DD5200502774ED09C33
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
Signing time:             Thu 12 Oct 2023 16:10:38 +0000
ROA not before:           Thu 12 Oct 2023 16:05:38 +0000
ROA not after:            Thu 10 Oct 2024 16:10:38 +0000
asID:                     36351
IP address blocks:        104.245.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 05:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5c:5d:22:e3:85:84:22:fb:c8:4d:d5:20:05:02:77:4e:d0:9c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:38 2023 GMT
            Not After : Oct 10 16:10:38 2024 GMT
        Subject: CN=B01B712871067B68665A62969D4F0BFB29CF21BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:6c:b1:f6:c9:3d:c9:89:10:e6:3e:0f:60:
                    d0:a9:78:13:16:85:af:53:df:65:98:5f:61:d1:80:
                    3c:c0:de:1c:41:d0:87:13:04:65:b9:10:85:c6:cd:
                    dc:8e:67:c5:4f:ab:19:e4:7f:69:af:de:27:c9:35:
                    c4:7a:d3:6d:17:14:70:d7:6c:48:2d:22:f6:46:30:
                    ed:d5:fc:ab:f2:37:92:ec:be:60:95:39:4b:00:cf:
                    0c:b7:e9:2c:f5:6d:ce:08:41:48:31:a2:22:d5:04:
                    e2:02:de:2c:8d:68:9b:ed:05:a7:b6:22:2c:cc:f2:
                    f4:55:f4:63:8c:0c:ea:7d:f0:f8:73:1e:78:bb:af:
                    9a:91:e6:2e:02:72:28:34:d1:d2:b2:1d:0c:51:9d:
                    45:cb:df:de:82:0e:e9:9c:cb:bf:d9:c8:72:1a:ef:
                    12:ab:b8:5c:b2:87:5e:14:85:c4:0a:0e:33:49:36:
                    3b:3a:25:e3:23:54:ad:c8:fd:a9:ac:29:66:fa:b7:
                    8e:64:f7:a8:d7:a9:eb:5b:90:b3:85:1d:55:16:1c:
                    31:69:19:3b:ea:95:7c:4b:2c:e7:fc:40:a7:40:58:
                    45:b4:ad:ab:4a:90:5d:2a:0f:3e:0a:1a:0e:0e:4a:
                    6a:cc:19:8e:21:1a:23:80:08:38:29:69:e7:ce:55:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:71:28:71:06:7B:68:66:5A:62:96:9D:4F:0B:FB:29:CF:21:BA
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:5b:6f:24:2c:8f:55:9d:aa:ed:5d:ad:43:40:77:64:ca:d7:
         86:11:0a:6a:f8:78:14:eb:3d:d0:e0:6a:00:23:40:64:8d:eb:
         ea:c4:95:0f:40:b3:8d:29:3e:79:d1:02:8d:96:cd:ba:53:97:
         bc:e3:ab:1e:f0:a0:72:27:8e:21:d4:8b:85:3f:59:6d:19:84:
         a9:79:6f:87:2b:c0:0a:1c:bb:32:a2:f8:e4:1e:f5:5c:91:23:
         f3:a6:1d:85:fa:fa:cc:a1:89:14:b4:57:c0:b4:7d:59:a0:0e:
         f1:4a:7a:0a:9e:47:b5:87:41:f0:9b:61:f5:17:1e:ae:26:16:
         ba:6f:38:5c:26:3f:1f:f1:6e:93:78:8d:7c:fb:d1:1d:8c:c6:
         17:71:6a:65:4a:2a:34:a8:1a:2e:cb:3c:9f:fc:d3:7c:a9:46:
         94:21:8c:8e:48:43:8f:da:93:68:60:3c:6b:1a:1f:3d:c9:13:
         cc:55:7e:58:f1:53:e7:bc:53:69:32:26:83:8f:b4:6b:cd:9d:
         fc:80:8a:a6:e1:9b:77:90:d2:aa:09:37:2b:2a:5c:7a:42:3a:
         b4:0e:d1:62:2d:0f:41:fc:38:a0:f7:88:25:b2:c6:fb:4e:df:
         ce:e5:54:54:fe:0a:79:61:dc:6c:59:19:a6:a6:5c:72:4c:4b:
         96:91:ea:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 12:04:50 2024 by rpki-client on console-ams.rpki-client.org