Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa
File:                     3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          cHYysMr7ODgGu1pCx/LeNrAhSc+kGqAnIVtfUXUm5sY=
Subject key identifier:   37:BF:47:F5:B7:11:6E:37:13:EE:D2:FC:95:C4:0B:E0:1D:FE:55:54
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       23CC334C398CB5640A910F150A80920C58F1376F
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa
Signing time:             Thu 12 Oct 2023 16:10:39 +0000
ROA not before:           Thu 12 Oct 2023 16:05:39 +0000
ROA not after:            Thu 10 Oct 2024 16:10:39 +0000
asID:                     6233
IP address blocks:        142.147.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 10:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cc:33:4c:39:8c:b5:64:0a:91:0f:15:0a:80:92:0c:58:f1:37:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:39 2023 GMT
            Not After : Oct 10 16:10:39 2024 GMT
        Subject: CN=37BF47F5B7116E3713EED2FC95C40BE01DFE5554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:84:41:8d:66:02:81:db:98:80:25:96:2d:76:
                    fb:90:af:2a:73:1e:29:03:0b:2e:22:8e:d0:f4:d3:
                    14:be:e1:4b:ad:39:12:8e:58:9e:fe:dd:10:2a:13:
                    db:2f:b7:c7:19:c6:9b:93:f3:78:dc:10:0b:52:f5:
                    b9:0a:22:ef:c2:42:39:e9:d2:a7:62:6d:75:1f:a8:
                    6b:ae:53:92:ed:fe:72:78:05:9e:06:60:e2:9a:5a:
                    7b:1b:78:db:a0:d9:79:e5:dd:47:7a:f6:ae:76:94:
                    43:52:7e:c1:f3:f5:20:24:97:0a:64:54:ef:67:c5:
                    c5:54:05:7f:73:1c:95:89:91:b6:bc:b7:20:b5:79:
                    ad:5f:ad:86:bf:3e:c1:56:81:6a:c9:4a:4e:42:4c:
                    84:43:76:7b:3b:f9:07:71:06:78:fb:2b:ae:a4:d5:
                    ae:a1:3d:9a:e2:15:cf:f6:d4:85:62:c7:d6:76:cd:
                    0d:72:12:f6:04:9d:62:88:7b:c9:57:a7:1f:10:14:
                    fe:d1:fb:b9:35:96:cf:54:a8:7f:20:fb:88:f9:d0:
                    dd:f7:47:70:f0:4f:aa:07:d6:ba:3c:d6:b0:ca:17:
                    23:8a:3e:4f:c5:2b:84:27:2c:a7:76:09:5e:d9:8a:
                    ba:2e:aa:10:3a:f2:91:13:35:36:12:aa:68:59:85:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BF:47:F5:B7:11:6E:37:13:EE:D2:FC:95:C4:0B:E0:1D:FE:55:54
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:24:ec:f1:46:47:d7:70:9c:a5:89:3c:c7:01:7b:7c:bc:7a:
         dd:b4:61:95:97:fc:0c:17:17:7c:df:7e:84:35:af:da:99:19:
         70:c6:78:ad:50:3b:6a:f5:a5:0d:6e:ea:61:67:24:1f:2f:e5:
         52:ff:cf:63:be:7f:a1:f2:55:88:b6:b2:0b:c2:ef:3b:01:65:
         1c:69:0f:a4:78:20:36:ab:b1:00:51:18:d0:8e:40:45:fc:ed:
         f5:e6:92:55:5e:24:d1:bf:ab:39:f5:09:51:56:43:4f:01:0e:
         54:4e:98:9a:95:12:da:7d:82:cc:d6:34:64:f7:df:21:1b:c0:
         c2:f1:d9:fa:33:77:4e:22:47:ce:8c:0b:fc:a6:f1:11:5f:21:
         60:84:88:77:15:dd:7e:82:2d:c9:52:31:33:3d:21:77:d0:88:
         56:4e:a0:fc:e4:a6:5b:46:6f:d9:1d:c7:9a:15:ea:8f:b8:d4:
         1e:85:10:28:f5:05:c2:3c:37:95:c5:4d:c0:8a:34:40:5f:65:
         cc:30:9a:e4:c8:8c:f0:a1:07:fd:c4:d1:96:10:67:ba:1c:46:
         2d:1e:74:c9:6e:ba:e7:d0:a9:b0:f9:3f:80:64:57:54:2a:50:
         85:31:2e:b4:1c:ad:95:2d:97:90:f8:1b:29:d4:47:b8:47:db:
         ae:c0:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:23:04 2024 by rpki-client on console-ams.rpki-client.org