Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa
File:                     36342e36392e33322e302f32302d3234203d3e203335393136.roa (raw, json)
Hash identifier:          K0HmS8hvs/1+qO1ytaSbKduAxqEjcVTIoghfryQmgow=
Subject key identifier:   5A:B1:9A:9C:37:9E:7C:1F:BE:CB:05:0D:C9:6C:5C:C5:8D:C1:25:4F
Certificate issuer:       /CN=e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583
Certificate serial:       0498321507DF5147458AF2555CB723A29E988340
Authority key identifier: DD:B0:7F:4A:AD:2F:23:75:00:3F:B6:03:F8:B3:31:09:BC:65:B1:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa
Signing time:             Thu 14 Dec 2023 18:00:17 +0000
ROA not before:           Thu 14 Dec 2023 17:55:17 +0000
ROA not after:            Thu 12 Dec 2024 18:00:17 +0000
asID:                     35916
IP address blocks:        64.69.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 10:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:98:32:15:07:df:51:47:45:8a:f2:55:5c:b7:23:a2:9e:98:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583
        Validity
            Not Before: Dec 14 17:55:17 2023 GMT
            Not After : Dec 12 18:00:17 2024 GMT
        Subject: CN=5AB19A9C379E7C1FBECB050DC96C5CC58DC1254F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:d7:88:2a:43:e7:5e:26:27:71:7b:06:f2:
                    97:ef:32:c5:df:ed:4c:6e:b0:b9:bc:d9:1e:96:84:
                    c2:8b:45:67:53:8a:b2:7f:00:11:e2:d6:e3:bb:cc:
                    c6:f8:91:f6:d2:3e:c6:e6:c6:e1:65:c4:31:76:f5:
                    eb:98:c3:e5:66:11:2c:25:b9:3d:e2:0a:bf:e9:8a:
                    29:cc:40:73:1e:b8:41:41:43:d5:82:c1:86:b2:d7:
                    a4:df:ab:83:98:58:bb:09:60:65:01:11:c6:76:8f:
                    84:de:af:ba:a4:db:2f:98:a7:eb:89:65:55:4e:9e:
                    f7:ab:a2:6e:e3:5c:2b:f4:0d:1f:1f:c6:fa:d5:2f:
                    93:77:94:74:46:25:58:70:26:9b:57:58:dc:8f:37:
                    42:fd:8c:44:5c:3b:4f:76:ec:10:ec:4c:5f:ec:d9:
                    72:72:b9:15:79:47:d3:58:de:7f:2f:46:ce:9a:be:
                    06:36:b8:7a:a8:34:20:0a:2d:04:d7:d4:06:75:ec:
                    97:af:a5:53:09:fc:6f:7e:25:19:23:a9:03:48:5e:
                    60:48:82:8c:29:30:49:fc:8d:27:86:62:d9:d9:10:
                    85:13:f6:da:d7:e6:5a:9c:ed:81:5d:a9:96:c8:6b:
                    cc:30:27:89:30:08:96:05:08:7e:7b:d0:dc:82:ea:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B1:9A:9C:37:9E:7C:1F:BE:CB:05:0D:C9:6C:5C:C5:8D:C1:25:4F
            X509v3 Authority Key Identifier:
                keyid:DD:B0:7F:4A:AD:2F:23:75:00:3F:B6:03:F8:B3:31:09:BC:65:B1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:13:09:84:04:c0:d4:25:24:4a:20:6d:2a:28:83:e5:f6:
         f4:34:cf:49:55:e5:f2:d4:7c:68:ca:da:07:f5:76:42:0b:8e:
         1e:f3:f7:73:d0:df:cf:db:f2:35:43:c2:5b:af:c9:69:d3:19:
         6e:03:4e:3d:e0:c5:f7:f3:03:f4:66:25:10:6d:31:bb:96:13:
         c4:19:96:31:a4:2b:f2:af:37:4d:62:fb:f6:28:08:c4:d3:a4:
         63:f5:48:a9:e2:65:5f:72:8f:1e:cd:5f:2c:22:33:46:54:96:
         58:60:1c:97:2a:76:88:5e:8d:93:ec:50:77:f3:cb:f7:cf:b2:
         2c:e4:94:9b:6e:66:5f:4c:18:ca:ad:74:19:d3:b8:b7:0d:34:
         a3:71:5e:a4:bb:59:a5:14:e1:d9:fb:f4:e6:d8:a4:0d:a1:0b:
         16:87:9d:e1:a4:3d:6d:9e:22:ad:df:b3:4d:7a:dc:cb:14:4c:
         30:da:e8:e2:fc:75:a2:1e:d2:f7:a1:dc:49:1d:38:5d:13:71:
         b7:1b:b5:2b:cb:c8:62:ba:17:eb:57:e8:3f:b8:7e:e3:66:6e:
         9e:53:3f:bc:bb:f3:46:fd:e1:ac:b8:e3:1a:45:04:41:de:83:
         a9:53:9d:f6:5b:2e:da:0f:6d:be:c1:68:ab:12:aa:5e:53:96:
         b9:0e:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 10:32:00 2024 by rpki-client on console-fra.rpki-client.org