Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323034.roa
File:                     323630343a653034303a3a2f33322d3438203d3e2033323034.roa (raw, json)
Hash identifier:          nSVK20wcmpgNVFNxj748tJWHfPBtAkxrpSWqw8COHLo=
Subject key identifier:   E2:6B:13:E5:77:62:F9:A3:F7:89:C1:F2:5C:34:AC:80:B6:A9:AB:9E
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       250EA1B7A5DCD7D044CFBFE5F0E2CB72D747B677
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323034.roa
Signing time:             Thu 02 Jul 2026 10:35:47 +0000
ROA not before:           Thu 02 Jul 2026 10:30:47 +0000
ROA not after:            Thu 01 Jul 2027 10:35:47 +0000
asID:                     3204
IP address blocks:        2604:e040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
                          rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 03:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0e:a1:b7:a5:dc:d7:d0:44:cf:bf:e5:f0:e2:cb:72:d7:47:b6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Jul  2 10:30:47 2026 GMT
            Not After : Jul  1 10:35:47 2027 GMT
        Subject: CN=E26B13E57762F9A3F789C1F25C34AC80B6A9AB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:b7:2c:cd:57:69:ab:8b:b5:1e:1d:4f:33:
                    cf:69:25:c6:43:27:fc:e1:31:d2:f9:f7:e3:66:ae:
                    ec:8c:10:df:f0:48:3b:0c:85:67:86:3d:7c:7a:fa:
                    38:d8:8c:dd:6a:2f:d8:c8:43:d8:ca:63:cf:fa:aa:
                    9b:be:bd:cd:35:72:ba:cf:5e:7c:a1:64:c5:86:2c:
                    82:9f:bc:68:70:ab:64:d7:bb:27:11:da:33:df:48:
                    4e:a6:40:76:4f:a5:14:c7:5f:9e:a1:37:34:d1:98:
                    d5:a0:2a:7b:40:1b:0f:64:ce:df:9c:da:ac:82:85:
                    67:76:d1:75:96:76:5a:b6:9d:a3:64:a8:c5:47:f6:
                    7b:93:2d:e4:33:f9:94:6d:3f:54:ac:0c:ed:60:18:
                    84:0e:b7:a3:06:0d:aa:8d:1d:59:a0:0b:5a:0c:de:
                    6b:b2:d7:aa:b3:77:ce:4c:c7:c5:20:f3:09:64:ec:
                    0d:22:93:a2:15:dd:82:e7:51:e8:42:3b:b3:2a:c3:
                    b5:69:6f:27:2f:9a:a2:46:d1:34:7b:78:4b:c9:a4:
                    76:c0:38:99:a4:2f:32:e2:04:88:35:95:49:72:db:
                    a9:34:1b:2b:d7:a7:4f:54:2b:ea:05:7f:56:09:29:
                    f8:80:50:94:6e:20:97:ce:72:97:b4:57:c4:8e:2b:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:13:E5:77:62:F9:A3:F7:89:C1:F2:5C:34:AC:80:B6:A9:AB:9E
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e040::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:dc:1e:c2:23:aa:22:60:68:0c:d4:1f:19:37:22:21:90:be:
         72:b3:d4:78:96:65:13:67:18:93:4b:5f:2a:01:53:88:20:2a:
         76:fd:33:bf:b4:09:31:7a:62:bc:b9:18:c0:1a:3b:c5:f1:9b:
         e8:e8:08:67:af:bf:21:34:1a:fb:1c:6d:59:ec:26:7b:6b:f5:
         bd:ac:bf:18:36:6e:af:c4:68:ec:8d:e2:42:f6:0f:d7:d6:5a:
         4f:45:c1:21:ea:07:5e:71:d6:54:26:a3:d6:5d:ac:f9:1c:14:
         3a:3a:51:67:6e:c0:69:74:62:1e:fe:5b:92:4d:8b:8f:c9:3b:
         0a:7d:31:67:aa:3f:ba:d4:cc:ea:85:7f:8d:5a:9d:f4:6e:48:
         63:71:59:40:94:f9:f1:28:4a:f7:c4:e4:9a:85:ba:e6:d6:a0:
         c2:d9:d9:8f:bc:e6:f0:17:16:2b:0c:53:9c:8d:d7:84:38:02:
         fe:ef:c7:69:9c:d1:b9:c4:c8:05:07:9c:79:b0:fb:58:36:41:
         c8:c8:21:51:7b:4b:74:e5:8b:6c:e3:6a:90:41:0e:78:68:a8:
         e3:dd:fd:28:8b:a8:5a:96:a0:07:ec:dc:ff:4f:c6:03:cb:bb:
         a6:35:ce:4b:0a:37:ec:42:8f:a4:7d:4d:a3:cc:b6:5d:94:55:
         1d:27:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:02 2026 by rpki-client