Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f33322d3438203d3e203537383438.roa
File:                     326130623a323534303a3a2f33322d3438203d3e203537383438.roa (raw, json)
Hash identifier:          kUWCQeGdEATArFIUPjDPxNUCAadLKRdXfp9LN5p7yis=
Subject key identifier:   E5:B2:23:A6:7A:13:19:FB:EE:99:3F:AA:F4:5F:EA:37:28:BD:3E:68
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       09651AE29D01180C60DC6DF63DDE274952CE3FCB
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f33322d3438203d3e203537383438.roa
Signing time:             Sat 18 Jul 2026 01:56:16 +0000
ROA not before:           Sat 18 Jul 2026 01:51:16 +0000
ROA not after:            Sat 17 Jul 2027 01:56:16 +0000
asID:                     57848
IP address blocks:        2a0b:2540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 04:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:65:1a:e2:9d:01:18:0c:60:dc:6d:f6:3d:de:27:49:52:ce:3f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jul 18 01:51:16 2026 GMT
            Not After : Jul 17 01:56:16 2027 GMT
        Subject: CN=E5B223A67A1319FBEE993FAAF45FEA3728BD3E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:45:d3:11:b6:1a:4d:4e:2b:69:6d:61:94:
                    41:9e:c6:27:6d:a6:41:c6:e9:2f:da:41:2e:6e:5f:
                    ff:17:c5:b2:f3:ad:90:a4:68:8b:41:1b:96:11:12:
                    55:31:3d:bb:9f:d9:de:82:ce:30:c1:4d:5a:e1:6b:
                    f2:b5:5a:65:af:25:69:31:b5:f7:e1:ca:db:52:66:
                    b7:5d:00:54:c7:10:b8:c7:e3:74:89:9b:28:77:c8:
                    0c:5d:2b:0e:00:85:57:18:8e:99:c4:00:9f:54:90:
                    b3:3f:b1:da:f3:7e:6b:6b:2f:01:60:04:bd:7e:62:
                    6b:e0:e4:9f:c7:10:25:c7:56:1d:15:d2:e9:e3:f0:
                    71:de:13:7d:d9:9c:34:29:61:c1:d9:a8:66:3d:11:
                    a9:eb:7f:b5:45:5b:d4:14:a9:db:b6:cd:bb:a2:2d:
                    d7:ac:b5:90:be:2a:9e:59:0b:be:65:f8:e0:1a:f6:
                    f5:bb:9c:0e:bf:4d:14:48:9e:40:f1:f2:6a:2d:4c:
                    8e:57:a6:66:9b:f2:6d:8f:49:a1:cf:0a:29:10:05:
                    15:f4:cc:b5:fb:39:68:e2:dd:07:21:25:5a:b8:6e:
                    d6:91:83:88:c5:6e:2e:21:3c:a5:83:9d:ff:fd:79:
                    67:49:eb:7a:38:a9:d5:e1:d6:e4:31:09:e7:44:d0:
                    f3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:23:A6:7A:13:19:FB:EE:99:3F:AA:F4:5F:EA:37:28:BD:3E:68
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534303a3a2f33322d3438203d3e203537383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:2540::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:10:be:1e:a2:74:b4:e6:96:eb:58:70:60:82:c0:e8:b9:
         e2:59:ae:b1:34:dd:d6:69:cf:58:7c:33:f1:3e:3e:04:d1:bd:
         ff:38:a4:85:ae:91:32:0a:69:ce:61:7a:79:35:cb:b7:17:d8:
         6b:3e:e3:21:a4:7e:78:75:02:51:1d:cc:ee:4f:83:34:91:61:
         7d:18:c2:01:43:d8:2a:cf:3b:31:6d:28:b7:80:dd:62:a3:06:
         8f:99:c6:a9:51:3b:be:9f:a8:8d:7b:f6:3f:0b:fc:76:a2:ce:
         22:d8:77:cf:e3:cd:f4:45:1e:ce:7c:bb:95:31:01:dc:d5:8c:
         68:67:0c:da:26:23:fc:8a:58:ba:05:35:3f:0f:17:8e:6e:46:
         5a:67:32:74:84:41:f8:ab:a5:e6:26:46:72:99:7d:91:fb:c4:
         25:e4:31:8a:49:b8:1b:04:c3:f3:93:d8:1c:4e:13:84:41:b8:
         e6:65:dd:cd:19:01:7b:5f:53:b5:39:02:8f:d9:8f:e3:ab:e7:
         97:40:fa:13:26:b3:c3:c4:7b:77:c3:a3:c7:de:f8:d5:d0:80:
         fd:05:55:fb:83:d3:b4:d0:9f:f3:15:43:d6:13:83:a2:4e:f4:
         2c:fc:bf:9a:e1:0d:d8:d3:69:d4:a6:4f:ab:c7:c5:1c:c5:e2:
         ba:3f:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----