Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa
File:                     326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (raw, json)
Hash identifier:          GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=
Subject key identifier:   E3:2E:1C:03:DF:1D:F9:DD:7C:5C:B8:17:20:28:E7:20:4E:80:6D:7E
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       F88C340E932A769075A513CC17D839F9C1CDAC
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa
Signing time:             Tue 03 Jun 2025 15:12:45 +0000
ROA not before:           Tue 03 Jun 2025 15:07:45 +0000
ROA not after:            Tue 02 Jun 2026 15:12:45 +0000
asID:                     197730
IP address blocks:        2a0b:2542:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 05:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f8:8c:34:0e:93:2a:76:90:75:a5:13:cc:17:d8:39:f9:c1:cd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jun  3 15:07:45 2025 GMT
            Not After : Jun  2 15:12:45 2026 GMT
        Subject: CN=E32E1C03DF1DF9DD7C5CB8172028E7204E806D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:8a:fe:3f:ec:81:2e:7d:8a:8a:7d:45:29:
                    cf:17:bd:5c:59:d7:0f:f4:48:a7:9d:52:95:09:fd:
                    fe:18:e7:52:82:6d:c8:57:d9:05:ba:a0:4d:98:15:
                    be:e3:b6:bd:49:2d:55:39:b9:59:60:96:bb:85:4b:
                    be:14:7e:70:6d:9d:39:9d:c2:df:bb:ec:98:5b:10:
                    fd:b6:c0:7e:14:d7:e2:5b:9e:01:59:f9:6c:0f:38:
                    a1:87:c4:e7:db:62:73:ec:ca:39:15:1c:bc:5e:8e:
                    86:57:d9:66:fe:f5:66:b5:bd:d0:0e:9c:77:f2:51:
                    e2:9a:21:36:e7:03:0f:4c:c9:80:1c:18:03:e7:ce:
                    55:99:fb:5a:57:a7:a1:35:a8:25:81:29:99:e2:ed:
                    e4:00:4d:e4:45:2b:eb:dd:eb:1f:7f:47:f2:40:71:
                    41:95:2c:1d:3d:3c:35:68:ff:2f:51:fb:08:19:01:
                    d8:fe:28:41:d3:d9:c6:3a:4f:ee:b5:3b:15:a8:9b:
                    97:a7:95:2c:a0:b5:86:a8:c6:63:31:fb:5d:49:c5:
                    bc:6b:d9:1f:92:7b:a8:eb:e9:c9:4e:6d:81:5e:66:
                    e9:74:93:8c:d4:93:9a:2d:6a:d3:fc:7d:7a:a3:e3:
                    3f:14:cf:a4:5c:87:01:ef:b5:b3:70:47:ea:ec:84:
                    04:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2E:1C:03:DF:1D:F9:DD:7C:5C:B8:17:20:28:E7:20:4E:80:6D:7E
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:2542:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:12:bc:75:71:f3:bb:ff:bb:e6:24:fa:c6:00:8e:c0:5a:25:
         db:41:e8:f2:2e:b6:e8:df:e8:b3:6d:06:2a:30:fe:7b:b4:59:
         6b:d0:ef:28:92:0c:eb:2d:e6:1c:5a:5b:17:76:05:37:1b:22:
         99:8e:2d:c4:d7:8a:5e:ea:f7:a8:45:1e:f7:a7:fc:80:7e:07:
         c3:f6:f0:38:e5:b4:08:f3:46:a9:1e:bf:f4:3f:16:45:16:73:
         36:48:37:e9:3a:83:86:26:9f:07:0f:e9:ed:39:64:6a:be:36:
         9e:18:00:17:85:97:e2:af:d7:cf:95:ee:fc:e2:e3:1c:06:ed:
         bc:46:5c:3d:a6:92:0b:b3:88:1f:fe:21:87:bf:50:9d:30:20:
         5a:c7:ff:86:e2:a2:6b:e7:ee:ee:b5:21:c5:27:f7:5a:56:05:
         ef:1e:a7:3e:db:6f:d3:54:ab:22:48:15:4e:01:de:ab:64:33:
         26:a6:5f:63:42:72:4a:71:cf:cd:19:ba:89:9f:f9:f6:21:4b:
         06:5f:f0:cb:2f:aa:47:01:dd:2b:60:68:ac:63:df:f0:74:72:
         63:f8:8d:f0:10:66:29:29:cf:7f:b0:38:c0:7a:e0:9c:64:f4:
         b9:5e:ad:06:52:94:b9:84:01:dc:d2:65:6d:74:c6:87:31:73:
         f3:b3:a1:29
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUAPiMNA6TKnaQdaUTzBfYOfnBzawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNTA2MDMxNTA3NDVaFw0yNjA2MDIxNTEyNDVaMDMxMTAvBgNV
BAMTKEUzMkUxQzAzREYxREY5REQ3QzVDQjgxNzIwMjhFNzIwNEU4MDZEN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3I4r+P+yBLn2Kin1FKc8XvVxZ
1w/0SKedUpUJ/f4Y51KCbchX2QW6oE2YFb7jtr1JLVU5uVlglruFS74UfnBtnTmd
wt+77JhbEP22wH4U1+JbngFZ+WwPOKGHxOfbYnPsyjkVHLxejoZX2Wb+9Wa1vdAO
nHfyUeKaITbnAw9MyYAcGAPnzlWZ+1pXp6E1qCWBKZni7eQATeRFK+vd6x9/R/JA
cUGVLB09PDVo/y9R+wgZAdj+KEHT2cY6T+61OxWom5enlSygtYaoxmMx+11Jxbxr
2R+Se6jr6clObYFeZul0k4zUk5otatP8fXqj4z8Uz6RchwHvtbNwR+rshATxAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQU4y4cA98d+d18XLgXICjnIE6AbX4wHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDEvMzI2MTMwNjIzYTMyMzUzNDMyM2EzNTMwMzAzYTNh
MmYzNDMwMmQzNDM4MjAzZDNlMjAzMTM5MzczNzMzMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCyVC
BTANBgkqhkiG9w0BAQsFAAOCAQEAExK8dXHzu/+75iT6xgCOwFol20Ho8i626N/o
s20GKjD+e7RZa9DvKJIM6y3mHFpbF3YFNxsimY4txNeKXur3qEUe96f8gH4Hw/bw
OOW0CPNGqR6/9D8WRRZzNkg36TqDhiafBw/p7Tlkar42nhgAF4WX4q/Xz5Xu/OLj
HAbtvEZcPaaSC7OIH/4hh79QnTAgWsf/huKia+fu7rUhxSf3WlYF7x6nPttv01Sr
IkgVTgHeq2QzJqZfY0JySnHPzRm6iZ/59iFLBl/wyy+qRwHdK2BorGPf8HRyY/iN
8BBmKSnPf7A4wHrgnGT0uV6tBlKUuYQB3NJlbXTGhzFz87OhKQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:36:07 2025 by rpki-client