Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a3a2f33322d3332203d3e203335393136.roa
File:                     323630373a663133303a3a2f33322d3332203d3e203335393136.roa (raw, json)
Hash identifier:          8SUbhTcXWalMYB5+JjeodOQiNBhE2Dz/LFJooyxqvmE=
Subject key identifier:   5C:DF:D6:CF:E7:B3:75:35:E1:8A:07:E5:90:02:69:0B:55:8C:8E:76
Certificate issuer:       /CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Certificate serial:       5858DC521CF17E0343F3DA0A03C90A0A65064251
Authority key identifier: DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a3a2f33322d3332203d3e203335393136.roa
Signing time:             Thu 14 Dec 2023 18:00:17 +0000
ROA not before:           Thu 14 Dec 2023 17:55:17 +0000
ROA not after:            Thu 12 Dec 2024 18:00:17 +0000
asID:                     35916
IP address blocks:        2607:f130::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 06:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:58:dc:52:1c:f1:7e:03:43:f3:da:0a:03:c9:0a:0a:65:06:42:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
        Validity
            Not Before: Dec 14 17:55:17 2023 GMT
            Not After : Dec 12 18:00:17 2024 GMT
        Subject: CN=5CDFD6CFE7B37535E18A07E59002690B558C8E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:f7:c9:fc:23:d7:36:88:5a:62:97:f2:18:
                    39:e4:74:30:ee:64:62:ea:29:9c:4e:95:b9:0b:e6:
                    99:25:05:5e:87:76:63:23:74:49:75:a1:e1:00:91:
                    d6:fa:9a:98:81:09:82:b9:05:84:ae:84:57:9e:d5:
                    29:2a:b0:5c:53:14:64:db:f3:60:fc:54:6e:a8:15:
                    16:4d:e1:9d:78:2e:98:31:3c:9a:d4:a4:94:da:3c:
                    ea:bb:ab:39:7c:1d:58:c3:49:88:c6:93:a3:58:1f:
                    ea:07:55:d0:a8:3e:49:94:e0:fe:18:9f:fd:7c:e1:
                    98:96:da:38:95:60:c3:c0:9c:c9:68:fd:63:4f:ff:
                    cb:f5:d9:8c:a5:c0:d0:49:ec:90:7a:6b:bc:87:2e:
                    56:40:1e:ca:4c:66:19:00:d7:af:45:10:0d:15:13:
                    09:11:55:05:a2:1c:32:95:1a:76:77:f5:d3:03:ff:
                    2e:f9:1b:ae:f0:34:45:66:10:7d:b1:14:f3:7e:42:
                    24:b9:1f:21:76:4f:08:95:5c:8a:e6:85:24:6c:6a:
                    da:c7:a6:e3:51:d7:15:80:f8:ed:33:78:5d:cb:4d:
                    c9:48:01:78:4f:7b:76:9d:2b:ba:62:c5:64:67:35:
                    2a:57:82:f9:f9:2f:d5:c4:a2:84:d4:51:a0:7a:41:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:D6:CF:E7:B3:75:35:E1:8A:07:E5:90:02:69:0B:55:8C:8E:76
            X509v3 Authority Key Identifier:
                keyid:DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a3a2f33322d3332203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f130::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:14:59:09:3d:da:f2:32:96:8b:8b:08:5c:1b:25:0e:68:28:
         46:04:04:ee:d0:cf:37:3e:f4:a3:7a:68:47:0f:92:84:e1:a3:
         8c:3a:15:5a:56:08:ce:c6:7c:20:45:a1:78:d7:cd:16:21:17:
         28:f6:fb:28:ab:09:18:03:5b:85:15:01:7c:eb:86:b9:1b:0e:
         43:6e:6e:d4:88:2c:16:1f:92:61:18:76:07:62:98:2e:06:d0:
         b1:e0:64:0a:76:66:e3:9d:c1:27:87:97:39:9e:01:5b:63:8a:
         52:b0:4a:f0:5b:40:08:67:88:72:e8:09:ff:90:dd:a5:80:90:
         57:df:ff:2c:76:9d:b1:b9:ce:30:34:e2:27:90:c3:43:73:02:
         d0:1a:63:bc:fa:b6:9b:de:a9:ad:c3:fa:a4:61:94:96:6c:16:
         e3:08:ec:0b:2d:0f:90:1c:35:3f:b1:8e:a6:f1:63:96:e8:0b:
         a5:b8:44:21:e0:79:9b:23:f8:f3:9f:fe:ed:66:38:03:cf:9b:
         52:ee:6f:73:07:58:23:dc:f8:29:c8:21:ce:8d:66:ce:cc:2f:
         f3:12:eb:b6:8d:71:b1:39:41:09:84:de:8f:93:dc:e5:fd:df:
         3b:00:20:07:d0:a6:08:06:05:5b:6c:df:0c:ea:ba:66:48:12:
         c6:7a:3c:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 28 03:55:00 2024 by rpki-client on console-fra.rpki-client.org