Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a3a2f33322d3332203d3e203335393136.roa
File:                     323630373a663133303a3a2f33322d3332203d3e203335393136.roa (raw, json)
Hash identifier:          wmMJ9EtntaTdGTTzjzd0D90XvO27ZbBXr6GeUPrm5wk=
Subject key identifier:   BE:30:1B:4F:BA:CE:C4:CE:74:24:94:AF:B4:33:B4:04:71:FB:8F:41
Certificate issuer:       /CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Certificate serial:       3A2B6C7256E0807327BF231EF4D5FBFD51246C50
Authority key identifier: DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a3a2f33322d3332203d3e203335393136.roa
Signing time:             Thu 14 Nov 2024 18:28:58 +0000
ROA not before:           Thu 14 Nov 2024 18:23:58 +0000
ROA not after:            Thu 13 Nov 2025 18:28:58 +0000
asID:                     35916
IP address blocks:        2607:f130::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2b:6c:72:56:e0:80:73:27:bf:23:1e:f4:d5:fb:fd:51:24:6c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
        Validity
            Not Before: Nov 14 18:23:58 2024 GMT
            Not After : Nov 13 18:28:58 2025 GMT
        Subject: CN=BE301B4FBACEC4CE742494AFB433B40471FB8F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:f2:91:df:ce:b9:23:59:ec:dd:23:e4:44:
                    10:06:6c:67:c1:d6:77:b0:e0:a1:28:54:b5:ef:26:
                    63:50:e5:98:6f:10:3e:54:e6:92:ac:b7:92:f0:c4:
                    d7:18:5e:fa:a8:c3:8f:75:3f:f4:4c:a7:54:85:a6:
                    32:54:01:39:8e:47:2c:53:75:b3:fa:35:9a:ed:29:
                    de:7c:85:ed:dc:10:f5:f1:e3:de:a5:78:9c:5d:c6:
                    07:02:d5:78:cc:7c:4d:4f:4d:82:44:59:50:be:25:
                    eb:a1:a4:43:be:14:88:aa:cb:8e:c0:e6:fa:86:11:
                    81:55:56:ca:0a:f8:72:fb:f9:f4:42:09:16:e5:58:
                    2f:36:bb:83:dd:0c:e9:09:88:e0:1d:84:9a:1f:41:
                    86:a5:6b:33:50:9a:f3:4b:6e:27:51:f7:c1:a0:a9:
                    2b:40:8a:e5:33:86:65:61:90:3c:dd:f9:b5:3c:a2:
                    c3:aa:25:fa:17:4c:be:96:e1:2b:25:99:bc:26:0b:
                    75:57:46:90:53:da:16:70:6d:0d:9a:cf:e3:a9:21:
                    5b:32:9c:28:57:cc:bb:30:37:6d:24:40:1d:71:be:
                    5c:19:d1:43:3f:9a:d6:d8:ee:80:98:42:4a:6a:44:
                    00:9c:35:5a:d8:89:3f:55:fa:71:e0:ef:34:52:33:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:1B:4F:BA:CE:C4:CE:74:24:94:AF:B4:33:B4:04:71:FB:8F:41
            X509v3 Authority Key Identifier:
                keyid:DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a3a2f33322d3332203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f130::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:30:57:54:73:bd:19:2c:ac:29:86:54:ad:06:85:56:f7:84:
         c8:bf:77:6f:76:70:3f:f6:fe:7b:84:35:86:6c:18:2b:bd:6a:
         f7:05:d6:e3:b8:55:39:a1:cf:c3:0d:64:70:d3:9a:a6:5c:98:
         d7:5e:e4:77:03:d8:2a:06:e8:84:bf:dc:1b:d1:e5:0e:78:34:
         15:89:25:a7:1f:5c:31:b1:31:7e:9f:74:70:26:39:95:0e:2e:
         68:28:cf:7c:14:77:11:c2:81:ca:fe:99:37:73:d1:2e:cf:8b:
         80:3b:09:97:6d:a5:44:1a:65:b8:c6:92:73:63:2b:35:b3:a5:
         4b:ed:0c:44:c6:bb:eb:61:27:b7:43:2c:c7:52:17:36:16:0d:
         6c:c5:a3:83:4a:dd:af:61:9d:01:70:a4:b2:e9:be:45:8b:fd:
         c2:4a:df:a5:ca:63:a7:c2:4a:11:21:1c:91:27:a8:95:13:4a:
         e2:02:db:bf:5d:45:2c:f9:16:a5:40:0a:b9:f0:73:89:31:51:
         3f:b2:bb:89:34:eb:d8:ee:9e:fe:0f:57:a4:9d:88:a0:0b:0f:
         8d:7c:18:0b:dd:7c:22:4e:ad:53:1b:47:ef:f6:62:de:80:18:
         04:f4:47:93:f4:50:50:07:6f:55:e3:05:83:07:17:22:d5:1d:
         ce:7c:e3:48
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUOitsclbggHMnvyMe9NX7/VEkbFAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODkwMTk0MDU5N2M0OGY3ODVhOTFkNzIxMmI5Y2E3MWIx
ZjFmMjBhZGU2ODU2OGU1YjEwHhcNMjQxMTE0MTgyMzU4WhcNMjUxMTEzMTgyODU4
WjAzMTEwLwYDVQQDEyhCRTMwMUI0RkJBQ0VDNENFNzQyNDk0QUZCNDMzQjQwNDcx
RkI4RjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup7ykd/OuSNZ
7N0j5EQQBmxnwdZ3sOChKFS17yZjUOWYbxA+VOaSrLeS8MTXGF76qMOPdT/0TKdU
haYyVAE5jkcsU3Wz+jWa7SnefIXt3BD18ePepXicXcYHAtV4zHxNT02CRFlQviXr
oaRDvhSIqsuOwOb6hhGBVVbKCvhy+/n0QgkW5VgvNruD3QzpCYjgHYSaH0GGpWsz
UJrzS24nUffBoKkrQIrlM4ZlYZA83fm1PKLDqiX6F0y+luErJZm8Jgt1V0aQU9oW
cG0Nms/jqSFbMpwoV8y7MDdtJEAdcb5cGdFDP5rW2O6AmEJKakQAnDVa2Ik/Vfpx
4O80UjOXVwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFL4wG0+6zsTOdCSUr7QztARx
+49BMB8GA1UdIwQYMBaAFNxidogwsbEgFxZRjV5qZSWwI1k6MA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kubXVsdGFjb20uY29t
L3JlcG8vTUNPTUNBLzAvREM2Mjc2ODgzMEIxQjEyMDE3MTY1MThENUU2QTY1MjVC
MDIzNTkzQS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00
MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzRkYzA3YmE2LWQzNjAtNGNhNS1hODYwLTYy
ZTRlNTQ3NmY4NC84OTAxOTQwNTk3YzQ4Zjc4NWE5MWQ3MjEyYjljYTcxYjFmMWYy
MGFkZTY4NTY4ZTViMS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmBy
c3luYzovL3Jwa2kubXVsdGFjb20uY29tL3JlcG8vTUNPTUNBLzAvMzIzNjMwMzcz
YTY2MzEzMzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzMzNTM5MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACYH8TAwDQYJKoZIhvcNAQELBQADggEBAFEwV1RzvRksrCmGVK0GhVb3
hMi/d292cD/2/nuENYZsGCu9avcF1uO4VTmhz8MNZHDTmqZcmNde5HcD2CoG6IS/
3BvR5Q54NBWJJacfXDGxMX6fdHAmOZUOLmgoz3wUdxHCgcr+mTdz0S7Pi4A7CZdt
pUQaZbjGknNjKzWzpUvtDETGu+thJ7dDLMdSFzYWDWzFo4NK3a9hnQFwpLLpvkWL
/cJK36XKY6fCShEhHJEnqJUTSuIC279dRSz5FqVACrnwc4kxUT+yu4k069junv4P
V6SdiKALD418GAvdfCJOrVMbR+/2Yt6AGAT0R5P0UFAHb1XjBYMHFyLVHc5840g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:52:59 2024 by rpki-client on console-ams.rpki-client.org