Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/2/323630373a396130303a3a2f33322d3332203d3e203335393136.roa
File:                     323630373a396130303a3a2f33322d3332203d3e203335393136.roa (raw, json)
Hash identifier:          k0hwosRfhq966UL7pp40uopdlp1L+Xz4Uu3Rw444G2M=
Subject key identifier:   75:29:00:44:3F:01:89:F5:4B:E5:5A:94:8D:22:30:C1:AA:BF:A7:93
Certificate issuer:       /CN=cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d
Certificate serial:       301B888088F333B230C09177DC979DDFCB7D9E41
Authority key identifier: 54:63:A0:40:A4:DF:40:E0:D6:FA:4C:F7:D7:9B:C3:85:4E:70:5A:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/2/323630373a396130303a3a2f33322d3332203d3e203335393136.roa
Signing time:             Thu 14 Nov 2024 18:28:58 +0000
ROA not before:           Thu 14 Nov 2024 18:23:58 +0000
ROA not after:            Thu 13 Nov 2025 18:28:58 +0000
asID:                     35916
IP address blocks:        2607:9a00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/53f49dd6-d1b1-4de7-a156-d48977daeb43.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/53f49dd6-d1b1-4de7-a156-d48977daeb43.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1b:88:80:88:f3:33:b2:30:c0:91:77:dc:97:9d:df:cb:7d:9e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d
        Validity
            Not Before: Nov 14 18:23:58 2024 GMT
            Not After : Nov 13 18:28:58 2025 GMT
        Subject: CN=752900443F0189F54BE55A948D2230C1AABFA793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:c5:ef:a8:f3:da:31:c3:1d:f5:a9:4f:7b:
                    ef:74:3b:80:99:6f:03:0e:e1:97:e1:5b:d6:04:5f:
                    7f:c3:85:6c:86:cb:63:78:9e:2d:86:50:1d:a5:46:
                    a8:84:fc:c9:38:8c:d1:a9:b9:30:cd:e2:57:84:71:
                    57:ee:d1:ff:07:03:fe:85:fa:49:27:5f:1c:f8:6b:
                    a9:35:3b:f5:7f:be:eb:b7:bd:fe:c8:a7:a8:39:da:
                    97:56:9a:5a:12:d1:f1:3f:b0:e8:f0:28:64:ba:a6:
                    cd:70:89:ef:d5:47:68:8d:19:9d:42:96:ac:bd:9a:
                    d7:6f:0f:d1:3e:86:27:fa:43:b4:ff:d8:11:88:d6:
                    7b:6d:5b:fa:ff:9e:85:1b:dc:ef:e3:81:7f:02:41:
                    ce:ca:7c:6b:13:39:37:a1:49:d1:a4:5f:57:65:72:
                    48:9d:a6:61:26:c4:6f:5a:e0:9c:fa:fd:e5:29:b9:
                    42:85:0a:e5:cd:7d:10:c7:34:46:af:2b:cf:99:a4:
                    21:57:aa:a8:d0:9f:3f:ab:9d:85:e5:f0:24:cd:62:
                    86:1e:ef:9d:c2:b5:9a:2a:59:73:af:f4:ac:da:d3:
                    4c:cc:f2:54:38:6a:86:36:3e:4c:4f:85:91:30:3c:
                    d9:d8:04:8c:05:f1:7a:7d:97:82:6b:9f:a6:b8:6c:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:29:00:44:3F:01:89:F5:4B:E5:5A:94:8D:22:30:C1:AA:BF:A7:93
            X509v3 Authority Key Identifier:
                keyid:54:63:A0:40:A4:DF:40:E0:D6:FA:4C:F7:D7:9B:C3:85:4E:70:5A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/2/323630373a396130303a3a2f33322d3332203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:82:0c:35:dc:82:d0:74:d6:82:4c:73:ac:c2:5f:64:63:
         4e:81:ee:1a:5b:f5:06:7d:e4:fc:e2:1c:16:5d:23:0f:0c:25:
         e5:b1:3e:fb:79:c3:56:d1:49:90:c5:01:25:e5:91:da:3e:09:
         b0:dc:42:82:8b:96:3e:51:9e:c4:77:85:eb:b5:6f:84:82:5f:
         c8:e2:c6:b2:52:15:96:87:ba:4c:fd:76:d6:32:ed:98:71:4f:
         f3:46:84:92:a4:c3:e4:6f:8a:ec:97:fb:5d:6b:6e:cb:5d:65:
         69:71:a6:33:e9:36:13:f9:de:b5:5e:2f:ed:f4:60:3d:2c:e5:
         70:13:c5:af:ba:f1:be:d0:20:5a:79:1b:95:23:24:ca:cd:4d:
         1c:0a:64:59:2f:3f:9c:70:1f:4e:b7:65:d7:6d:a4:bc:7e:87:
         8e:77:b2:0f:eb:26:b7:fe:a0:3c:1c:a6:72:77:9f:81:f3:3d:
         d7:8b:50:bd:8d:cc:fd:1a:e5:2b:57:d3:68:29:d4:00:b3:d1:
         db:2b:13:5c:49:ef:be:d9:d6:b9:7c:b0:f8:37:58:cd:08:2d:
         28:75:ff:d8:ba:2c:8f:92:a8:9a:c5:8e:6a:88:e3:36:8d:65:
         52:42:43:14:0a:3e:4f:0d:36:e2:9a:d4:50:33:51:85:6f:ba:
         cf:d8:86:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:49 2024 by rpki-client on console-fra.rpki-client.org