Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2034373835.roa
File:                     323630343a653463303a3a2f33322d3438203d3e2034373835.roa (raw, json)
Hash identifier:          y4RiOQzM1uKxAQVUyKhWl4gUKiMmLI1kitcmtQnK46s=
Subject key identifier:   EC:16:01:CD:61:E6:30:E6:28:6A:52:E5:72:8E:B1:AD:A6:3D:08:61
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       1FA62CD6675A47E7F2235AC1F39F3FB72DA832DB
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2034373835.roa
Signing time:             Thu 02 Jul 2026 11:29:53 +0000
ROA not before:           Thu 02 Jul 2026 11:24:53 +0000
ROA not after:            Thu 01 Jul 2027 11:29:53 +0000
asID:                     4785
IP address blocks:        2604:e4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 00:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a6:2c:d6:67:5a:47:e7:f2:23:5a:c1:f3:9f:3f:b7:2d:a8:32:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Jul  2 11:24:53 2026 GMT
            Not After : Jul  1 11:29:53 2027 GMT
        Subject: CN=EC1601CD61E630E6286A52E5728EB1ADA63D0861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:e0:08:c5:fa:15:e3:18:84:e1:ef:54:27:
                    b6:72:77:e8:9b:4a:7b:9f:a7:a9:0f:cf:80:6d:77:
                    0d:19:69:69:d8:13:9e:a5:85:80:64:2d:69:14:cc:
                    73:bb:80:a8:84:e7:7d:71:70:f2:24:3f:fd:78:ef:
                    8d:c9:0f:b1:5e:46:57:be:9d:12:26:de:85:39:4a:
                    22:9f:cc:33:31:8a:9d:85:14:84:cb:73:a8:85:49:
                    98:c0:8b:08:c3:d6:29:40:22:c4:b4:e4:d1:a4:9a:
                    33:52:b2:41:7b:bf:ab:32:c6:1b:6a:8d:1a:c9:fe:
                    d9:63:de:e6:67:69:5a:66:89:ec:f0:e7:c2:37:e7:
                    a0:04:9e:40:2d:44:bf:be:01:88:9d:a8:bd:3a:b3:
                    f1:95:b6:15:1c:3a:c1:52:89:4a:42:05:79:88:ab:
                    fd:9e:e5:fa:be:1d:8e:07:73:2e:ff:57:fc:e1:e0:
                    46:58:2c:71:5b:4d:14:a0:76:ed:7f:e7:31:b0:d7:
                    00:26:b0:f8:74:4a:95:c3:59:84:fc:7d:37:61:28:
                    aa:87:93:77:56:e1:08:71:cb:4a:dd:91:36:9a:fc:
                    15:da:ea:1d:39:f8:c2:67:14:9e:1d:1b:ea:fa:35:
                    64:92:6e:c9:ec:67:6f:ad:b2:f6:8a:1d:d7:09:4d:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:01:CD:61:E6:30:E6:28:6A:52:E5:72:8E:B1:AD:A6:3D:08:61
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2034373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:c4:13:a8:93:d7:36:97:44:10:e8:e4:0c:b5:cd:9d:f7:
         e9:ff:2e:a3:dc:a6:d3:37:ca:6f:c1:77:3d:33:d7:64:26:da:
         3a:f2:e1:35:9c:dc:3b:b2:13:ea:6f:68:3c:2b:07:4e:74:72:
         23:c0:5f:8a:bd:86:18:fe:9e:0d:1b:cd:e2:c8:e7:2e:f5:9d:
         44:7b:82:f8:2d:77:7a:2e:e5:71:90:9b:82:3a:90:14:dc:5d:
         e2:55:55:0b:9c:f4:41:b9:03:55:04:41:cb:b2:59:71:94:96:
         88:7e:2a:9c:43:dc:9e:47:d7:29:99:c4:5e:d4:2e:c2:ef:c4:
         68:e5:15:13:a4:4d:db:94:7f:6c:39:fa:64:73:c5:a6:62:8e:
         ab:3b:64:6b:c8:4e:82:8c:e6:78:7c:48:48:01:80:a5:fd:70:
         ea:74:11:3c:cb:ec:b6:fb:d5:bf:5d:47:df:31:f2:00:2f:6a:
         d8:e3:d2:b3:78:3f:35:6f:d7:9a:8d:71:14:23:45:8a:46:bb:
         90:8f:2c:6c:b8:b9:e2:9b:6a:6f:29:ff:ef:af:f8:1f:38:d3:
         d8:3a:57:be:aa:16:d7:db:f8:45:6e:a0:0c:a3:78:1c:e3:38:
         a1:fd:fe:bf:00:e3:1d:d2:99:54:a0:d1:19:1c:a9:ca:03:bf:
         e9:61:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:30:10 2026 by rpki-client