Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2039333132.roa
File:                     323630343a653034303a3a2f33322d3438203d3e2039333132.roa (raw, json)
Hash identifier:          6gMQI7BpnRyd0/m1TycxVyotoNd919bI5Lxa2anEH2Q=
Subject key identifier:   0A:A6:98:57:97:63:EB:A8:4E:3A:F4:D4:71:7B:42:7B:F1:00:B6:EC
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       63CD0BBEDD892A32835C7ECD5A6F42308EA34A66
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2039333132.roa
Signing time:             Thu 02 Jul 2026 10:35:47 +0000
ROA not before:           Thu 02 Jul 2026 10:30:47 +0000
ROA not after:            Thu 01 Jul 2027 10:35:47 +0000
asID:                     9312
IP address blocks:        2604:e040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
                          rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 03:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cd:0b:be:dd:89:2a:32:83:5c:7e:cd:5a:6f:42:30:8e:a3:4a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Jul  2 10:30:47 2026 GMT
            Not After : Jul  1 10:35:47 2027 GMT
        Subject: CN=0AA698579763EBA84E3AF4D4717B427BF100B6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:a7:b8:a6:ef:eb:be:18:11:02:de:08:7c:
                    77:40:4f:77:c8:7c:49:9d:99:f6:a4:ac:e1:8e:03:
                    10:9f:c7:bf:fd:06:0d:94:e3:6b:99:34:d8:ef:8b:
                    42:a0:82:7b:a7:6b:66:96:78:a0:d7:85:7f:47:1e:
                    f9:a1:28:f7:7c:c8:b4:33:f4:81:fe:9f:9c:bd:fc:
                    41:47:1a:24:bd:96:43:d7:b7:82:6d:a7:13:d4:fd:
                    0d:b2:6f:50:ea:9e:dd:e9:4a:24:ef:db:9d:d3:a0:
                    1b:ad:91:ea:75:19:dd:4a:24:14:c5:90:bc:0f:98:
                    20:1a:01:ae:99:fc:13:aa:80:b0:af:9d:42:3f:e1:
                    1c:9a:42:65:c6:c3:35:e9:7d:cc:b2:d5:fe:84:b5:
                    36:d3:00:82:20:ed:a8:53:01:13:03:c7:fe:04:94:
                    92:99:b2:d9:9f:d3:f8:c5:bb:de:2e:b8:c1:25:01:
                    de:7f:68:a4:b1:f4:b0:b8:ff:35:98:3b:90:59:e5:
                    21:c6:38:29:29:2c:64:7e:81:04:62:22:37:c4:af:
                    9c:07:ac:e2:ce:d9:cb:14:7c:d3:6d:86:68:c4:ce:
                    ed:b1:0b:63:f5:33:b5:bd:36:8c:5b:04:6b:ce:18:
                    fa:08:24:3f:c1:01:60:07:80:94:1d:3d:5a:c8:38:
                    03:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A6:98:57:97:63:EB:A8:4E:3A:F4:D4:71:7B:42:7B:F1:00:B6:EC
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2039333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e040::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:d3:cb:ec:92:2c:68:d2:94:a2:cf:e2:99:5c:52:d3:b2:90:
         88:e5:fa:f7:f8:30:eb:b3:88:6d:b6:2d:19:71:4d:7f:f3:1c:
         9b:dd:69:01:aa:81:ce:38:a8:d3:fb:ad:d1:57:2e:71:74:b8:
         f2:7b:a7:5d:4c:a6:ee:92:14:f1:38:f7:36:f1:bd:94:ce:9a:
         79:52:ff:9b:e4:17:25:bf:8d:07:fd:0b:04:ae:07:39:21:da:
         61:13:ec:f3:1f:c9:b3:ff:29:bb:07:2c:4d:4e:8c:be:e3:78:
         e2:e4:4c:56:1e:79:61:51:0a:66:f8:45:0a:14:0d:bd:49:c3:
         e5:52:93:9b:0f:6c:81:4b:da:78:ec:ee:d5:45:1f:cc:63:ed:
         77:70:98:73:e5:3b:17:4e:66:d3:e1:bf:c4:22:11:ba:43:08:
         22:bf:eb:d9:08:73:89:9e:da:41:ab:1f:6d:9b:be:b6:4f:f3:
         b9:e7:da:ed:e7:ac:33:95:ec:9a:59:b5:b5:bf:0e:22:c5:cd:
         50:51:0b:6f:11:95:df:1b:df:86:2f:1e:a4:07:cb:15:20:10:
         a8:e5:84:b8:2c:36:52:e6:4c:64:e5:1c:cd:4b:9f:6d:04:5b:
         a3:fe:5b:d2:da:19:be:80:38:f4:14:1f:1d:8a:e6:e9:1b:71:
         96:88:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:22 2026 by rpki-client