Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2034373835.roa
File:                     323630343a613834303a3a2f33322d3438203d3e2034373835.roa (raw, json)
Hash identifier:          jPuGyjuyvhWiwl6HouHpsEp6ylfxeJqFOYdGwqeK764=
Subject key identifier:   31:12:5C:5E:96:02:A3:5E:E8:A3:78:B9:89:EA:BC:68:25:5C:E2:77
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       73553605D1413A14EBA9EF3E1F769C4EBAC26882
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2034373835.roa
Signing time:             Thu 02 Jul 2026 11:29:53 +0000
ROA not before:           Thu 02 Jul 2026 11:24:53 +0000
ROA not after:            Thu 01 Jul 2027 11:29:53 +0000
asID:                     4785
IP address blocks:        2604:a840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 02:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:55:36:05:d1:41:3a:14:eb:a9:ef:3e:1f:76:9c:4e:ba:c2:68:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul  2 11:24:53 2026 GMT
            Not After : Jul  1 11:29:53 2027 GMT
        Subject: CN=31125C5E9602A35EE8A378B989EABC68255CE277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:bc:fb:38:62:f4:2d:fd:5c:75:77:49:cc:
                    28:92:de:2f:63:2d:d9:2d:b2:02:be:53:81:d4:8e:
                    ed:a9:68:da:8b:06:55:65:00:97:34:18:82:74:d7:
                    1e:1a:ff:2d:f9:ae:59:f2:e3:99:42:2d:96:6d:4f:
                    74:7f:f0:40:d0:3d:95:69:1b:98:18:17:65:41:0b:
                    61:70:4d:9f:ce:47:f0:ef:b6:d3:15:0a:26:42:9f:
                    6b:d2:bc:b8:2d:17:12:b8:6b:10:58:25:6b:0f:40:
                    59:69:f6:b6:19:14:99:62:cf:86:09:87:1f:9c:8c:
                    98:05:97:bc:bd:f7:d9:99:0a:cf:ad:89:e2:69:76:
                    ab:65:c2:32:62:55:f4:f0:b2:f8:ac:cd:da:8a:32:
                    0e:f5:eb:83:4f:97:e1:f3:88:94:f1:f1:63:0e:3e:
                    4c:2f:77:8f:3f:c6:53:09:c3:cf:79:15:e5:bc:32:
                    ab:90:82:a2:b8:62:8f:fd:b9:d6:2c:1b:9a:4f:51:
                    7f:3e:56:44:bf:58:61:77:6f:e7:74:85:46:23:dc:
                    cf:3b:63:be:03:ef:20:3e:c3:a5:ae:f5:5c:1a:d8:
                    3a:4b:83:79:cf:8b:a6:83:f8:38:0f:21:b4:63:d2:
                    15:4a:fc:e9:17:d7:ed:74:a4:d0:98:b2:c6:19:91:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:12:5C:5E:96:02:A3:5E:E8:A3:78:B9:89:EA:BC:68:25:5C:E2:77
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2034373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a840::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:08:87:92:28:81:6c:28:25:13:71:f8:d7:86:96:86:e9:0b:
         af:e0:9e:0a:e8:df:6c:13:63:09:e2:e2:9a:da:63:3e:40:61:
         c2:2d:7c:84:ac:78:52:cf:b0:08:47:a4:b5:12:6d:03:95:76:
         f0:ef:c2:c9:01:68:7a:c6:e8:2f:6b:e0:81:ce:dd:58:18:2c:
         64:cb:f7:b5:10:3c:85:60:f3:a3:7e:a3:cc:e4:15:a7:07:d5:
         06:53:a3:b7:21:c9:66:8a:be:99:4d:01:f4:7a:d2:80:28:1f:
         11:ea:7c:65:6f:1f:cc:4a:32:83:b9:85:30:5d:0d:e4:2c:65:
         e8:43:05:11:9f:ba:af:c7:b3:fd:7a:12:ec:82:9f:9b:02:7b:
         80:46:58:45:ce:25:8f:6e:c7:c2:5b:92:8e:2b:59:4e:99:02:
         4b:cd:30:de:4d:63:29:09:df:7a:20:a8:3f:82:37:54:5d:26:
         a9:fc:fa:4c:7d:0c:78:ff:a4:23:d0:f0:44:5c:3b:13:7d:3e:
         ff:36:24:10:8e:25:45:78:b0:b9:3b:0b:52:b4:6f:d5:b7:ff:
         d9:6b:6c:62:82:e8:af:34:22:94:f0:e6:a5:41:1c:b3:5d:89:
         fb:7d:4b:fa:74:17:32:2a:d2:77:7c:76:70:8d:f2:05:d4:fb:
         29:c2:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 04:16:12 2026 by rpki-client