Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa
File:                     3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (raw, json)
Hash identifier:          4foPgvDt2RV28VTiKi7ILY6OPQFXKn1uhdKjL1i8KmY=
Subject key identifier:   E7:A7:4B:C3:B2:E0:EE:24:09:76:10:BF:C6:32:65:A9:9E:76:68:DF
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       4D45221518B48BA028F00813B6A8308019B030C4
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa
Signing time:             Wed 30 Aug 2023 14:58:33 +0000
ROA not before:           Wed 30 Aug 2023 14:53:33 +0000
ROA not after:            Wed 28 Aug 2024 14:58:33 +0000
asID:                     47553
IP address blocks:        142.147.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:45:22:15:18:b4:8b:a0:28:f0:08:13:b6:a8:30:80:19:b0:30:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Aug 30 14:53:33 2023 GMT
            Not After : Aug 28 14:58:33 2024 GMT
        Subject: CN=E7A74BC3B2E0EE24097610BFC63265A99E7668DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:68:22:a2:c1:88:f0:68:fa:34:eb:4e:22:
                    47:22:94:9f:aa:71:81:f0:98:c2:12:00:39:6c:cc:
                    0c:10:0c:3b:c6:30:e5:1e:4b:fd:69:b9:2a:43:cc:
                    8b:d1:1f:da:25:a6:df:54:a7:cf:2f:fc:8e:33:7c:
                    8d:0b:2c:3f:76:44:27:d2:19:e9:f4:9b:2f:dd:d1:
                    36:24:5a:1a:19:c4:c2:e6:54:68:4e:30:4b:c5:00:
                    d8:a2:57:57:2c:58:14:c9:f2:d2:2b:62:34:97:b4:
                    17:c7:e3:53:5d:8e:79:a0:6d:18:b4:88:ea:2b:2e:
                    4d:49:86:93:65:bf:a6:67:a1:9e:74:63:b9:d1:c1:
                    fe:ad:16:87:bb:b6:33:63:03:62:c6:4c:6c:60:b6:
                    06:b6:b9:34:fe:32:a1:63:0d:cb:59:be:8c:f4:89:
                    c1:86:d7:47:1b:db:4d:64:fd:2d:aa:2d:d7:a5:9e:
                    f5:57:56:5a:3e:ab:8f:85:11:80:e4:1e:39:13:a7:
                    b0:18:70:15:91:78:81:cf:a6:e3:8c:f8:f4:9f:89:
                    a1:c2:12:91:c2:a9:a6:3d:5e:d8:67:28:b9:78:13:
                    0e:f2:ba:95:a0:e4:48:df:cd:e3:b1:6f:e1:71:c3:
                    e2:35:02:3b:3c:29:47:3b:76:3c:98:19:19:5e:50:
                    e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A7:4B:C3:B2:E0:EE:24:09:76:10:BF:C6:32:65:A9:9E:76:68:DF
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:40:89:d5:a7:52:16:b4:2b:84:c7:0c:fd:4b:4c:2b:42:4a:
         fb:bc:c1:aa:4d:d1:69:0d:cf:35:3f:d4:3f:a0:d7:5c:70:de:
         d6:01:03:2a:a9:fb:71:6e:e3:6a:38:95:7f:16:20:94:bc:fa:
         fb:3b:56:d0:67:d2:b5:03:7c:da:81:b4:66:c3:aa:f7:aa:7c:
         c7:bc:05:fd:9d:dd:a2:39:91:0f:84:36:47:8f:e9:ff:22:0a:
         c3:2a:0b:e0:a8:9b:96:07:60:26:d7:5e:b6:fa:8e:c8:25:5c:
         fd:94:22:9a:8e:4b:19:8c:0b:20:d4:6e:4b:93:99:3c:af:e7:
         82:4c:dd:0e:3f:2e:68:d3:f5:2f:56:42:2d:94:6f:74:1b:75:
         1e:12:7a:7e:0a:35:e7:c6:a6:9e:09:9c:93:c2:b0:e1:95:b9:
         28:6c:dd:f8:ec:6b:f7:c3:3f:c7:75:42:0b:26:4b:55:a4:b3:
         af:63:6a:2c:fa:b2:2b:95:ef:10:49:74:55:61:8f:78:12:48:
         6b:00:22:df:2f:25:af:e8:2c:c2:00:41:cc:33:41:e7:13:e9:
         76:c7:b9:f4:85:80:6c:c0:8d:46:79:bb:bb:26:c8:8b:65:98:
         fc:b5:dc:fd:bf:2a:b9:74:6e:59:61:df:fb:43:42:10:84:32:
         ec:6c:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:14:58 2024 by rpki-client on console-ams.rpki-client.org