Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2039333132.roa
File:                     323630343a653463303a3a2f33322d3438203d3e2039333132.roa (raw, json)
Hash identifier:          wmMHWFq24ogcUSGsmjQ1/YNAIClYjcZjZ/rFF/eOwJU=
Subject key identifier:   A9:EC:41:20:F3:08:0B:4B:DC:5C:FE:A2:B2:52:45:0E:CC:C6:28:74
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       05C839C5627A62DFE3B48D9409D2E97DE20F0C29
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2039333132.roa
Signing time:             Thu 02 Jul 2026 10:35:49 +0000
ROA not before:           Thu 02 Jul 2026 10:30:49 +0000
ROA not after:            Thu 01 Jul 2027 10:35:49 +0000
asID:                     9312
IP address blocks:        2604:e4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 00:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c8:39:c5:62:7a:62:df:e3:b4:8d:94:09:d2:e9:7d:e2:0f:0c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Jul  2 10:30:49 2026 GMT
            Not After : Jul  1 10:35:49 2027 GMT
        Subject: CN=A9EC4120F3080B4BDC5CFEA2B252450ECCC62874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:95:97:ba:06:35:fc:05:cf:d4:27:6f:d7:
                    6d:7e:58:b4:34:c7:15:2a:85:06:7f:f6:04:d9:b9:
                    d1:01:65:4a:93:63:48:eb:23:d3:ff:23:6d:54:96:
                    4a:99:be:11:79:8d:a8:b8:34:ea:f7:0d:01:79:f0:
                    5f:a8:02:ff:5d:58:d9:23:e4:9c:7e:8f:85:15:96:
                    85:01:b3:aa:2e:54:43:35:c1:9a:51:99:6d:aa:93:
                    b9:da:09:b9:2b:af:04:a2:51:02:57:9a:fe:a6:c8:
                    7c:5c:72:68:41:1c:de:f6:30:8d:35:67:2d:6c:92:
                    1b:f5:8b:95:49:55:e3:e3:91:6a:40:77:f4:50:2a:
                    b0:f7:fe:3f:e2:a6:51:b8:c4:37:c6:f0:80:47:91:
                    54:54:ef:0d:ec:dc:32:be:33:4f:6f:43:2f:4e:0b:
                    7a:07:88:11:18:d6:ad:b9:18:72:30:c1:1a:32:9a:
                    56:95:45:49:4a:af:22:05:20:5c:c5:0b:2c:cb:d3:
                    fc:ce:f7:49:af:5d:bb:e5:95:a9:f5:19:68:cf:cf:
                    44:99:36:78:70:41:ee:b0:a0:7d:73:3a:72:5b:fd:
                    51:f8:12:3a:39:3c:30:62:c5:1b:82:ba:de:42:6c:
                    59:89:46:b7:74:ab:9f:fc:dd:f9:a5:8e:bb:5f:40:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EC:41:20:F3:08:0B:4B:DC:5C:FE:A2:B2:52:45:0E:CC:C6:28:74
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2039333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:d2:ac:43:b1:09:91:6a:94:e3:40:f9:22:71:51:c5:1c:86:
         f1:35:2b:c3:46:6a:78:3c:63:92:c4:d2:77:c0:32:fe:a4:4d:
         46:c4:32:01:59:d2:3f:52:47:f9:49:12:20:73:59:60:57:27:
         6c:60:cb:1f:68:1e:74:62:a9:95:78:30:d6:73:9c:6d:37:59:
         72:d5:2c:b3:7f:84:ca:33:c7:0a:b6:ff:fc:ed:f2:0a:93:39:
         c8:af:73:65:bc:7f:36:f4:61:9a:a6:a4:d8:7e:e5:e7:be:2a:
         54:fd:d7:ec:19:ba:2d:43:24:90:81:a6:c8:52:06:e9:69:e4:
         71:63:af:d8:d0:00:ab:e8:b6:a6:53:9f:72:5c:e7:42:ca:df:
         3c:87:49:1a:ea:c7:80:75:fd:06:ea:b2:3f:52:b8:74:11:8e:
         1a:37:5b:d3:04:3f:21:e2:25:be:b2:3b:2b:45:c3:f3:a0:6b:
         1e:71:20:51:78:4c:b5:87:a1:85:7d:03:18:bd:7f:fe:1b:58:
         53:ce:06:c8:35:28:66:86:d8:15:59:ad:2e:a7:52:51:1c:84:
         28:0e:45:98:c9:15:51:66:ab:a6:54:bb:c8:99:e6:4e:96:1e:
         8d:84:5c:90:c8:d7:a3:35:f7:3f:c6:cc:b6:de:ed:9f:ce:08:
         50:cb:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:14 2026 by rpki-client