Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa
File:                     3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (raw, json)
Hash identifier:          yYxya7NTAJ+kn4XpBHPXzRxZeNTYjD6LMFTX+keNt9A=
Subject key identifier:   E6:00:A7:05:B7:00:2D:43:1E:53:3B:F6:49:32:FE:68:64:D3:A4:AA
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       23651AB2EAF2A6DA13728A30A4FC6261B857F7CE
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa
Signing time:             Thu 12 Oct 2023 16:10:38 +0000
ROA not before:           Thu 12 Oct 2023 16:05:38 +0000
ROA not after:            Thu 10 Oct 2024 16:10:38 +0000
asID:                     32727
IP address blocks:        142.147.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:65:1a:b2:ea:f2:a6:da:13:72:8a:30:a4:fc:62:61:b8:57:f7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:38 2023 GMT
            Not After : Oct 10 16:10:38 2024 GMT
        Subject: CN=E600A705B7002D431E533BF64932FE6864D3A4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:b3:0a:7f:30:cd:82:f6:1e:af:02:7c:c9:
                    f0:8d:fa:fb:56:16:d1:d1:af:b2:cc:97:1b:49:c9:
                    6b:2d:40:03:9c:dd:b9:a4:79:18:32:27:fa:b0:b7:
                    ef:e7:13:87:e8:ec:40:50:9b:c2:3b:4b:34:62:1e:
                    c4:ff:6b:72:a8:b8:6a:8b:d7:04:92:d3:bf:6d:b9:
                    3a:50:17:af:51:5d:7d:12:63:57:04:29:ea:e7:8e:
                    3c:c8:7c:8b:8b:c6:81:eb:08:d3:f3:94:de:8f:f1:
                    b0:3a:90:2e:48:2f:71:55:12:ec:fa:bf:bb:9c:a0:
                    d8:fa:3b:d1:81:b1:23:ef:93:67:c7:12:96:fc:f3:
                    2d:df:49:fd:0f:f5:bc:85:8d:65:2d:48:b5:41:d3:
                    a9:d9:76:80:4e:34:09:52:48:75:fd:6f:47:ab:7f:
                    02:22:a5:4f:e2:69:1d:9a:e4:1a:89:66:5f:80:5e:
                    af:6e:6a:82:83:53:45:a9:33:ea:8a:78:2a:66:04:
                    63:cb:e8:f9:b2:31:45:53:22:33:4e:14:0f:5c:fa:
                    be:89:07:01:90:ff:77:5e:37:8c:ba:f4:b8:ad:06:
                    cd:c3:26:c1:15:d6:8c:b8:c1:c3:10:de:ab:b6:58:
                    f0:90:e6:83:a8:59:2b:2f:1d:54:4c:dc:64:28:ee:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:00:A7:05:B7:00:2D:43:1E:53:3B:F6:49:32:FE:68:64:D3:A4:AA
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:12:70:a6:39:d8:2c:d5:4b:9d:0c:d7:3f:0d:23:6d:4b:98:
         a0:ee:e2:b4:aa:06:9d:7e:09:d1:7b:66:86:2e:f5:12:fb:2c:
         12:bc:8b:af:14:72:3a:66:fc:ad:e3:8e:9a:44:cb:e1:e6:c3:
         a5:41:97:db:2d:ee:f4:8f:37:b1:8a:1e:ce:94:bf:31:4d:85:
         ba:4c:7f:66:55:6e:b7:0a:16:45:2b:07:4d:58:a8:c9:8f:15:
         a5:fe:9c:d2:00:2d:f3:1d:af:d0:6e:0d:b4:86:90:1d:79:bb:
         1e:8c:4d:a8:df:bb:8c:97:86:4f:7e:19:a2:27:bf:78:d6:f2:
         80:c3:a6:14:95:b8:33:1b:70:00:d1:5a:d3:34:09:76:a0:c9:
         16:06:29:55:12:d9:c0:67:1a:c7:23:95:b7:68:c6:fe:e9:8d:
         01:88:20:8d:73:2a:29:25:67:b0:38:56:c8:63:2b:25:a9:c8:
         42:d6:df:e8:cf:1d:69:dc:d1:69:1f:79:0c:5e:0c:c7:7e:36:
         e0:ed:70:2d:65:08:41:f1:f3:13:49:9e:3a:1e:05:dc:cb:73:
         2f:24:d3:da:33:19:b1:10:be:ef:5e:4f:1d:97:a4:23:95:6e:
         b2:1a:38:c6:7f:3d:e9:d8:d9:5d:b5:92:3b:97:d3:61:3e:5e:
         99:10:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:36:29 2024 by rpki-client on console-fra.rpki-client.org