Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323538.roa
File:                     323630343a653463303a3a2f33322d3438203d3e2033323538.roa (raw, json)
Hash identifier:          KIFqq7pIhJ88M5DSzrKnFwxkuT1tBuMTH9eSWRRJSlo=
Subject key identifier:   74:7A:A8:04:48:E5:C8:D2:BD:EC:62:CD:E1:38:32:BE:62:3A:F6:46
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       36205C8894884ECCAB939D7D13566A9B1DFDE689
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323538.roa
Signing time:             Thu 02 Jul 2026 10:35:49 +0000
ROA not before:           Thu 02 Jul 2026 10:30:49 +0000
ROA not after:            Thu 01 Jul 2027 10:35:49 +0000
asID:                     3258
IP address blocks:        2604:e4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 00:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:20:5c:88:94:88:4e:cc:ab:93:9d:7d:13:56:6a:9b:1d:fd:e6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Jul  2 10:30:49 2026 GMT
            Not After : Jul  1 10:35:49 2027 GMT
        Subject: CN=747AA80448E5C8D2BDEC62CDE13832BE623AF646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:75:e8:f3:91:8c:3a:62:f2:a2:30:eb:a4:
                    9c:57:25:95:77:ea:ac:d9:49:f6:7d:74:98:ad:e8:
                    49:2d:c7:63:78:f3:9c:d4:71:a3:ed:58:18:6c:4d:
                    ed:63:68:2c:6c:5e:db:bb:eb:8b:a0:b9:11:c9:35:
                    5d:29:44:00:fd:61:f8:ca:ee:c9:57:05:45:de:63:
                    47:69:37:f4:47:e5:97:63:c2:29:e5:2a:95:75:9f:
                    4c:3d:05:ee:31:29:06:1a:d1:27:85:5c:bc:c8:2b:
                    91:ff:fd:5e:e7:b3:dd:29:cb:09:2e:a3:e5:83:aa:
                    f3:b9:12:3a:78:30:0c:2c:dc:45:4c:e2:82:3f:5b:
                    1c:4f:61:ac:95:80:54:40:f2:d2:cd:d8:f6:79:c1:
                    08:a3:69:55:31:bc:27:af:66:f1:70:35:45:ba:67:
                    69:c0:b5:8b:21:85:76:d1:9e:a3:9c:5f:4a:6e:2d:
                    e0:5a:0b:4d:e7:27:68:95:af:9d:09:5a:f0:51:3e:
                    0b:c7:69:9d:d2:f4:79:fb:3e:7f:49:d7:d4:ed:c8:
                    90:28:92:e5:29:46:05:95:07:29:56:ec:38:8e:7d:
                    81:75:5e:8f:51:05:24:15:bc:7d:95:bc:c0:ca:d7:
                    8a:82:c7:f7:54:27:f7:03:9a:5c:42:cd:db:b9:ad:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7A:A8:04:48:E5:C8:D2:BD:EC:62:CD:E1:38:32:BE:62:3A:F6:46
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:03:72:b5:1d:24:8c:4a:3d:36:51:71:74:ae:c0:d0:97:
         e0:46:19:e4:a0:de:f4:8c:af:30:e2:85:37:7d:58:9b:e3:4e:
         c9:05:43:88:b7:32:5e:3e:a6:7b:ec:60:c8:77:1d:7a:02:c1:
         2f:2e:4a:09:2e:dc:f3:38:2b:6e:6e:ec:53:76:bd:fd:27:1c:
         ee:57:31:ef:67:80:39:9e:65:f1:30:ed:9a:2a:d3:ca:b2:f8:
         9a:c5:8c:be:b1:3d:d1:61:3e:84:3b:9f:10:de:0e:f6:7b:4f:
         68:4c:e1:c9:86:f0:ba:eb:a2:6f:a1:7a:80:77:d8:a1:51:92:
         77:8d:72:3c:56:ce:c1:52:d0:f0:d6:9a:37:33:42:ed:87:bc:
         f0:b3:15:f4:20:a3:d9:af:19:17:ef:8d:91:c6:df:f3:fd:4f:
         1c:9b:0e:37:a3:e5:01:45:6f:cd:6f:cf:d2:54:b3:4a:d3:db:
         f1:3e:54:27:02:34:50:81:0f:f8:95:40:3b:9a:f4:54:73:e2:
         f7:cc:08:ee:8f:83:53:4f:b5:c1:bb:92:df:18:a1:18:5f:31:
         94:f3:fd:61:39:7c:b3:c5:b4:0e:97:12:e1:7a:71:ce:c4:21:
         25:78:eb:56:61:f7:03:ba:14:e8:47:53:c1:cb:f9:f0:1b:4f:
         50:a2:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:21 2026 by rpki-client