Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa
File:                     3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          yUjowipLdR/V7N+vSXXD0CuEkef2O3sgjqfiLZ/XdCA=
Subject key identifier:   D7:3C:44:B7:7F:01:3E:77:A2:E1:C4:DB:E0:E9:DF:F1:DC:8A:7C:0C
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       3BB9D6D5C299F6717AEC6C0ADB37EE11E6DB6914
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa
Signing time:             Thu 12 Oct 2023 16:10:38 +0000
ROA not before:           Thu 12 Oct 2023 16:05:38 +0000
ROA not after:            Thu 10 Oct 2024 16:10:38 +0000
asID:                     6233
IP address blocks:        142.147.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 17:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b9:d6:d5:c2:99:f6:71:7a:ec:6c:0a:db:37:ee:11:e6:db:69:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:38 2023 GMT
            Not After : Oct 10 16:10:38 2024 GMT
        Subject: CN=D73C44B77F013E77A2E1C4DBE0E9DFF1DC8A7C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:bb:03:7f:92:c1:5c:76:06:af:c8:e9:49:
                    0c:c9:3a:17:53:43:aa:c0:80:4d:8d:c7:26:ed:c0:
                    e9:e4:b5:38:cd:b7:bd:e2:2b:d1:38:ee:28:2b:cc:
                    5c:95:14:f5:48:0a:00:80:52:45:bd:ba:e1:73:a8:
                    ab:8d:58:35:87:38:9d:a7:e4:99:94:d3:70:30:89:
                    03:70:2c:09:fd:6b:ca:ae:31:47:4d:77:74:b9:df:
                    38:e1:5e:7e:b5:e9:b2:4c:b8:33:42:10:ef:96:dc:
                    35:3f:cf:fc:a7:98:b9:57:5b:a1:71:a9:69:7d:c4:
                    1a:b3:98:1b:e9:28:1e:2d:ac:01:5e:b4:e9:e3:4b:
                    3f:9e:c2:00:1d:03:a4:04:0e:fe:92:a8:54:2d:ff:
                    f1:aa:f4:ea:42:53:78:bc:bb:72:f7:e0:3c:1b:02:
                    c2:63:6f:81:d2:80:14:89:2a:cc:4d:21:26:9f:3d:
                    20:cf:1e:26:d8:bd:3c:c1:12:12:15:99:9e:2c:e2:
                    fe:b8:88:6a:a7:ae:2f:83:51:ac:7c:f4:47:91:27:
                    ff:1e:88:ef:b4:5c:ea:23:9a:cc:e3:1b:19:81:4c:
                    75:67:e7:a2:37:5b:61:9a:40:14:5f:3a:a1:b6:37:
                    b8:ce:63:e7:ff:8f:a3:72:68:8f:4c:49:b7:e0:3a:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3C:44:B7:7F:01:3E:77:A2:E1:C4:DB:E0:E9:DF:F1:DC:8A:7C:0C
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:cb:86:8d:dc:eb:d3:6f:1b:b7:fb:db:f4:24:f0:c5:cb:eb:
         7a:6b:db:fd:9d:97:5a:79:ae:05:02:22:bb:b4:46:28:ea:29:
         92:d0:f7:cf:f2:d6:3e:b2:72:6b:81:77:72:d6:2d:15:1d:60:
         ae:6e:f9:54:56:45:1c:d0:16:38:29:ce:ae:2b:ef:8b:75:7e:
         88:1e:62:44:4d:2b:1b:5b:24:bd:a9:98:16:ee:66:8d:03:5d:
         d9:d8:b1:35:f2:ad:19:b8:fb:5f:44:67:ba:95:fd:9a:f2:23:
         cd:21:4f:7d:8c:12:54:41:9a:76:c7:9c:d1:e3:76:39:c9:2c:
         36:c7:c0:d9:9b:ba:b6:00:e3:b5:fb:f1:9f:64:35:1b:b8:69:
         96:0e:6e:12:a5:bc:b7:02:20:38:11:a3:b2:34:66:d1:9a:5e:
         7d:fc:44:b1:f5:f9:2b:de:f3:55:45:d2:26:a2:86:45:29:e6:
         53:0d:26:2f:21:48:97:ed:9f:70:6d:84:c2:33:20:cd:73:2a:
         d6:9d:d7:1b:99:7c:68:11:9f:a6:ac:2e:07:2d:03:7e:e0:23:
         1c:f4:52:1f:3b:89:24:e0:de:ed:8d:93:29:e7:30:29:9b:6c:
         66:0d:e9:f5:2f:42:bb:c2:f6:12:c1:ca:27:c3:21:31:fb:43:
         7f:07:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:40:29 2024 by rpki-client on console-ams.rpki-client.org