Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323134.roa
File:                     323630343a653463303a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier:          ahUMMv4wKzPDojrVxUQNmD0GnTqW7TZBE0UMexj8kxs=
Subject key identifier:   5D:7A:0C:10:68:11:56:0A:6C:5A:A1:E7:B6:F9:39:70:D9:0C:A5:1E
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       307F815347B40B8A61D1FF3B81A85CB2C94B2676
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323134.roa
Signing time:             Thu 02 Jul 2026 10:35:49 +0000
ROA not before:           Thu 02 Jul 2026 10:30:49 +0000
ROA not after:            Thu 01 Jul 2027 10:35:49 +0000
asID:                     3214
IP address blocks:        2604:e4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 00:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7f:81:53:47:b4:0b:8a:61:d1:ff:3b:81:a8:5c:b2:c9:4b:26:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Jul  2 10:30:49 2026 GMT
            Not After : Jul  1 10:35:49 2027 GMT
        Subject: CN=5D7A0C106811560A6C5AA1E7B6F93970D90CA51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:76:e4:95:88:3b:9e:9f:ae:a6:c5:04:5b:
                    9d:33:3a:f6:cc:c9:d0:7e:cd:fa:7f:42:df:58:cf:
                    b4:ec:6f:4f:a4:ab:6a:b9:68:9b:5f:f4:fe:24:b5:
                    9d:04:4d:43:c7:5d:a5:db:ac:16:17:8c:27:d2:fa:
                    d7:90:e3:02:d6:04:59:4b:7c:89:c8:9b:8a:87:c6:
                    c3:b6:27:61:15:82:ca:19:cf:cc:99:c3:a7:04:50:
                    c6:8b:27:6b:3a:63:bf:69:bd:98:da:61:f7:b7:ef:
                    d0:5a:07:bd:b2:38:3e:8a:34:81:11:c2:bb:12:ae:
                    44:e7:61:26:83:6d:0d:3a:0a:0a:b9:3f:b3:b6:ee:
                    69:50:fa:5d:63:53:69:c5:1f:b4:ed:4d:8b:e1:3a:
                    77:79:88:6b:b2:f2:f6:62:49:61:a9:be:72:5d:8e:
                    20:17:ff:cc:d9:84:df:4c:3e:31:8a:75:82:0a:59:
                    50:30:5f:95:5f:51:dd:f0:b2:f1:80:08:2b:b0:0c:
                    17:ba:dd:4e:4a:59:95:c6:fe:11:08:a1:31:6d:4a:
                    bc:11:b4:d4:e1:de:8c:1f:a2:de:b1:ea:65:22:48:
                    d2:78:61:40:87:c1:05:e5:6e:40:8f:12:d4:1f:ef:
                    49:54:e2:f5:c2:50:1d:f8:5c:a4:a4:14:d0:43:99:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7A:0C:10:68:11:56:0A:6C:5A:A1:E7:B6:F9:39:70:D9:0C:A5:1E
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:93:45:46:38:5d:00:1b:40:0f:48:f0:35:a9:5e:fc:21:
         4a:8d:1a:96:67:78:52:bd:73:3d:9d:cc:e9:cb:a3:07:1b:79:
         8d:f8:93:66:d1:a3:2c:c0:77:35:04:72:4e:1c:8d:0f:e1:de:
         9a:1e:bd:8d:1d:73:5b:50:84:11:99:a6:70:2d:fd:53:da:d7:
         cd:d5:9a:94:1a:2a:4e:b9:e7:04:c0:f7:59:dd:43:5f:bd:3f:
         96:b9:04:e3:74:e7:2d:d7:50:4b:9b:fa:37:76:43:c7:78:e0:
         af:30:b7:9b:e4:06:96:df:2c:8b:eb:32:77:c8:dd:e2:3d:72:
         d6:8b:9b:64:ef:56:11:a2:ca:84:61:1c:9d:8a:f8:08:df:2e:
         55:ba:bc:f2:d7:86:5b:a7:13:fd:5e:4a:5e:28:8d:9f:58:ad:
         fe:9f:c3:fa:21:e1:df:0d:9f:08:b6:4a:fd:9d:75:f5:ab:65:
         4c:52:da:8f:53:85:78:6a:e8:10:bd:97:e4:bb:18:f5:d8:29:
         e4:0a:bc:b9:c6:7c:65:c8:2a:71:e8:50:df:13:b5:4b:2a:f4:
         28:30:92:0a:4d:2c:5f:98:c5:3c:73:b1:e1:a4:2f:66:47:ca:
         4c:8d:82:83:cf:e2:7b:77:05:c9:9e:95:49:7d:fe:eb:42:8d:
         4e:2d:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:15 2026 by rpki-client