Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa
File:                     3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (raw, json)
Hash identifier:          ld15tcUdTHRhLhPDsDweWteqx2C9rpdnLm90hB4Esmk=
Subject key identifier:   EB:21:C3:BD:90:64:D7:E0:E8:F2:7C:09:55:54:F4:84:67:72:CF:09
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       2071BB7131909ECFA6EC6EEEA5CE8B67FB37AB23
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa
Signing time:             Thu 12 Oct 2023 16:10:38 +0000
ROA not before:           Thu 12 Oct 2023 16:05:38 +0000
ROA not after:            Thu 10 Oct 2024 16:10:38 +0000
asID:                     62805
IP address blocks:        142.147.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:71:bb:71:31:90:9e:cf:a6:ec:6e:ee:a5:ce:8b:67:fb:37:ab:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:38 2023 GMT
            Not After : Oct 10 16:10:38 2024 GMT
        Subject: CN=EB21C3BD9064D7E0E8F27C095554F4846772CF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b6:a0:b6:68:d9:7d:9c:e5:0a:71:f7:89:78:
                    d4:0a:0e:00:42:55:fe:92:e3:8d:7a:aa:30:ca:ee:
                    51:bd:76:92:39:e3:62:59:82:3b:98:ec:fe:54:b5:
                    a8:cd:34:6f:13:3a:33:45:b5:70:63:a9:7a:1d:1b:
                    9f:57:e0:45:5a:25:bf:74:f3:42:69:5e:50:22:a7:
                    da:30:b5:7f:76:d7:17:b1:8c:47:f0:f3:ce:a7:d7:
                    2e:09:54:b0:6f:9a:86:2d:34:0e:1c:03:5d:02:46:
                    77:3a:1f:6a:56:a9:73:87:2e:48:2f:7d:71:78:96:
                    d1:82:99:ae:e6:05:4c:77:d3:be:2a:71:1a:e7:94:
                    d1:4a:9b:26:97:83:12:f3:3a:83:c0:59:7a:fb:f3:
                    e2:c4:92:14:e5:98:02:6b:b7:88:a7:d3:82:91:1f:
                    c2:77:59:b5:7d:17:fc:d0:bb:f7:0d:98:f9:6b:ff:
                    36:40:22:fc:ff:3c:e1:44:cb:d4:1a:e3:7c:c4:c0:
                    60:4a:0c:46:93:99:e9:cc:7d:08:01:9d:6e:69:17:
                    28:23:9f:db:bf:6f:27:fa:4b:8f:24:1e:d9:bc:d2:
                    19:b1:c9:c7:7b:ff:6b:e9:da:a6:41:85:7e:95:e5:
                    e6:76:bc:b3:af:c5:f0:d3:25:73:96:5f:13:16:16:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:21:C3:BD:90:64:D7:E0:E8:F2:7C:09:55:54:F4:84:67:72:CF:09
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:35:df:de:58:3f:b7:cf:89:11:ec:73:ed:d2:c6:1f:47:
         6f:66:7b:24:c6:29:4d:57:3b:60:01:ac:98:d9:25:4e:52:29:
         59:e8:f9:32:18:1a:f8:61:7a:98:94:74:18:a3:67:ab:a7:e2:
         44:ff:1e:93:f2:29:83:76:cc:b9:8e:da:0a:9e:0b:92:41:d9:
         b0:4b:46:50:3a:1e:7d:59:44:1f:5b:6a:83:1a:af:e1:cd:67:
         ad:7b:fb:d4:e1:58:ba:2d:91:35:e8:c5:a9:81:28:82:54:0c:
         02:97:8c:d7:72:11:54:00:cc:28:ad:12:d6:5d:83:a8:e8:60:
         69:6a:4b:d6:62:c4:fa:bc:91:09:63:70:ba:f5:81:06:1d:e0:
         1d:74:60:2e:f7:73:8c:00:64:7a:a6:48:72:fc:5f:b8:fd:48:
         43:60:bd:e2:e4:84:c5:e4:b4:d5:fc:24:46:89:7b:56:7e:bc:
         08:48:3b:7f:31:b7:31:c2:ae:00:7e:74:c6:70:4e:b1:85:0d:
         7c:20:f7:6c:f5:2a:d8:87:e7:e0:9d:f8:ac:36:a0:4a:65:77:
         bd:bf:9e:e6:89:03:63:7b:cd:8c:d7:9c:47:47:ee:fa:bf:8c:
         17:e3:df:29:f0:73:af:c8:79:80:3b:3a:59:86:70:3d:68:72:
         67:8e:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:36:29 2024 by rpki-client on console-fra.rpki-client.org