Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa
File:                     36342e36392e33322e302f32302d3234203d3e203335393136.roa (raw, json)
Hash identifier:          2mcVL/ej0QVLyYooOW8OpZMKwby7NywfIUEYbUrozrs=
Subject key identifier:   22:36:36:93:DC:5C:03:3A:47:C0:AE:8A:69:55:3E:92:09:46:B7:7C
Certificate issuer:       /CN=e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583
Certificate serial:       4909FD310E05381CAB42701D077AAD8E46EF2911
Authority key identifier: DD:B0:7F:4A:AD:2F:23:75:00:3F:B6:03:F8:B3:31:09:BC:65:B1:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa
Signing time:             Thu 14 Nov 2024 18:28:58 +0000
ROA not before:           Thu 14 Nov 2024 18:23:58 +0000
ROA not after:            Thu 13 Nov 2025 18:28:58 +0000
asID:                     35916
IP address blocks:        64.69.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:09:fd:31:0e:05:38:1c:ab:42:70:1d:07:7a:ad:8e:46:ef:29:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583
        Validity
            Not Before: Nov 14 18:23:58 2024 GMT
            Not After : Nov 13 18:28:58 2025 GMT
        Subject: CN=22363693DC5C033A47C0AE8A69553E920946B77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:f5:47:9e:10:64:75:86:da:5b:a2:2a:2e:
                    a9:59:a3:49:3b:2d:22:6c:63:e7:4e:56:29:0d:49:
                    d2:1d:dc:0d:21:cd:9a:99:aa:84:af:db:ce:19:8f:
                    3b:1c:b4:c2:dc:5a:53:bd:9e:e5:1f:4c:0c:3c:45:
                    3e:a6:49:43:4f:ab:51:a5:00:17:ad:ec:09:dd:8d:
                    76:36:4e:fe:70:8a:09:6c:6d:ac:fe:35:64:74:78:
                    a1:0d:e2:11:0f:02:e7:66:44:8b:e9:48:df:b2:1f:
                    fc:58:21:a8:9e:4e:7d:b0:d7:cc:b6:32:0c:86:91:
                    e8:c9:85:96:7b:2c:67:cb:c1:76:93:c1:e0:5d:59:
                    c5:f4:82:7b:89:04:6a:13:88:34:42:66:25:02:25:
                    71:05:74:dd:67:b1:7d:2a:df:42:b5:c5:69:af:a6:
                    da:34:23:d2:36:b9:df:57:d7:20:c8:8c:73:c2:bc:
                    75:4d:8a:f3:21:80:c5:fa:71:7e:e5:10:48:20:f8:
                    be:fe:7c:f8:71:ec:aa:2e:1e:2a:9f:22:28:0c:5f:
                    33:d9:a7:29:21:b4:a6:b4:95:1d:6a:9e:e0:9c:9f:
                    8b:9a:42:46:b6:5f:9d:2e:99:4c:d8:5d:f6:7f:b3:
                    7a:90:ab:1b:72:78:bd:a5:78:50:6d:1b:26:0c:48:
                    00:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:36:36:93:DC:5C:03:3A:47:C0:AE:8A:69:55:3E:92:09:46:B7:7C
            X509v3 Authority Key Identifier:
                keyid:DD:B0:7F:4A:AD:2F:23:75:00:3F:B6:03:F8:B3:31:09:BC:65:B1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:10:8e:5a:f2:48:10:40:ee:77:ce:52:2a:0d:64:fd:48:a2:
         a4:97:42:69:75:c3:9a:5c:75:51:57:50:e1:42:f1:b0:ce:04:
         4f:9a:82:96:08:f4:c2:f7:20:57:57:c8:c7:c2:6e:80:fd:a7:
         8d:e1:47:d1:35:4a:d8:11:d3:83:2d:97:06:22:45:8b:33:7a:
         06:86:ac:9d:2a:a6:da:69:1a:b6:d8:e2:be:39:bd:65:d5:02:
         b3:38:f3:c2:3f:42:81:59:d0:30:4f:9c:7e:21:40:ae:e5:6c:
         f7:21:08:fd:f2:60:bd:47:e2:0e:b4:23:37:79:4b:af:dd:1b:
         37:df:77:60:6e:cd:6c:e0:50:07:09:8a:74:1f:4e:19:48:d6:
         cf:5d:8f:6d:98:e5:3a:d5:7d:95:ae:78:56:9d:5c:bc:2a:82:
         4a:ee:5e:ee:79:ab:cf:9d:57:23:82:b3:c1:9d:3d:16:d1:0c:
         79:9d:a3:bc:78:98:a1:36:ee:dd:0a:b0:6d:2f:3c:4a:c1:bb:
         af:61:e1:43:c8:27:55:9e:b2:c6:63:70:a1:0f:5a:ef:65:3c:
         48:6e:e5:41:f4:bf:e2:fe:c2:cc:86:3a:e6:f3:da:ac:e8:d1:
         4c:4c:2b:1a:7f:7d:1a:58:33:47:29:23:5e:4b:2d:83:81:fa:
         eb:e9:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:18 2024 by rpki-client on console-ams.rpki-client.org