Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa
File:                     323630343a613834303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          E0R013tUZ7Ka/ira9zT9JjSCFD3WflGwu8XcqhdTO9I=
Subject key identifier:   90:FF:04:A2:94:F3:DF:0B:8E:11:7B:F6:06:76:F9:25:F9:36:21:D2
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       509C32685EC664C55897C77F86CF146F46C1C154
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa
Signing time:             Thu 12 Oct 2023 16:10:37 +0000
ROA not before:           Thu 12 Oct 2023 16:05:37 +0000
ROA not after:            Thu 10 Oct 2024 16:10:37 +0000
asID:                     949
IP address blocks:        2604:a840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 10:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:32:68:5e:c6:64:c5:58:97:c7:7f:86:cf:14:6f:46:c1:c1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:37 2023 GMT
            Not After : Oct 10 16:10:37 2024 GMT
        Subject: CN=90FF04A294F3DF0B8E117BF60676F925F93621D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:24:d7:61:f4:ac:9d:15:42:05:d3:c7:64:
                    7a:df:ca:86:90:09:db:c2:c4:c1:22:c0:fe:72:46:
                    f0:c0:af:b5:9e:b1:61:e7:89:c6:e7:5c:c4:e4:9c:
                    95:51:a5:46:f3:ee:f8:df:95:5b:d6:37:1c:0d:d3:
                    36:88:cb:23:55:7c:95:7f:70:e8:db:49:78:d1:b9:
                    d1:b9:0d:c4:9d:94:68:67:86:07:86:23:f0:f1:b9:
                    97:e5:2f:ff:06:4d:72:7f:a6:76:0f:19:9a:49:87:
                    fd:23:29:68:dc:60:53:8b:b3:03:4d:75:f6:29:1e:
                    ba:9c:26:bb:bd:b5:e8:87:e7:82:67:8f:9e:33:8f:
                    3b:af:aa:30:0f:08:c8:b2:c3:93:94:6e:28:62:82:
                    8e:93:51:8d:85:ba:6b:d2:aa:d1:27:72:ae:b3:49:
                    5a:a7:f4:21:a2:b1:96:42:8b:2b:1c:58:ed:f0:23:
                    0e:f9:cb:0b:c3:7c:05:18:bf:fa:a7:bf:12:37:a3:
                    74:7c:9b:ee:f7:26:15:03:7f:c7:b8:4c:ea:07:39:
                    07:e9:82:8c:ed:46:09:64:08:b4:f6:37:8d:e2:08:
                    63:1d:f6:10:b0:ce:55:d9:16:61:f5:f5:e4:0b:ba:
                    b6:1a:73:af:96:89:14:13:fb:3e:1f:a5:98:53:15:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FF:04:A2:94:F3:DF:0B:8E:11:7B:F6:06:76:F9:25:F9:36:21:D2
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a840::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:80:ae:f2:62:b2:2e:bf:ca:15:d8:03:ca:4e:ac:2f:32:
         fc:ae:5d:26:19:36:71:22:05:f3:af:60:47:92:3c:af:c3:63:
         0e:c7:5a:2d:6c:4b:98:72:80:15:29:72:ab:ea:b1:2a:af:9f:
         90:a7:77:63:d9:cf:86:ed:3b:82:2b:3d:cb:47:b0:aa:bf:89:
         00:e3:e5:f5:1d:14:43:76:3d:0d:4e:22:44:96:69:18:18:cf:
         e3:c7:cd:f0:cd:31:cb:c8:7c:a8:26:83:76:75:22:45:44:3e:
         d7:ae:b0:35:36:c0:be:79:fb:f2:50:90:dd:8a:c8:f6:4f:78:
         67:34:ed:18:ac:de:90:ca:ad:e3:8b:de:71:52:f2:da:e0:c9:
         54:f7:45:2a:7d:7d:c8:5b:85:21:b4:0c:ef:79:7b:53:54:2a:
         43:6d:7c:7d:d5:38:bf:38:96:5a:22:81:4c:d7:be:40:85:82:
         b4:ff:95:f3:b4:57:73:5b:e6:a3:df:d4:f5:0b:63:c0:ca:2f:
         18:7d:07:95:8b:85:d0:f0:7c:d4:33:5e:1d:e0:c9:a0:ac:22:
         92:44:47:48:38:da:6f:a4:73:33:25:6c:f8:0a:12:61:5d:11:
         a7:a5:7b:9c:e6:1b:46:3f:c2:bc:f7:05:4d:ea:6d:e8:f9:22:
         33:92:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:23:04 2024 by rpki-client on console-ams.rpki-client.org