Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa
File:                     326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (raw, json)
Hash identifier:          XhBYPIMF0KCZINN+xfNoJ0YBG583riDaKThFOmggprE=
Subject key identifier:   56:AA:70:38:A5:BE:78:2B:E8:65:30:F5:87:36:58:21:F3:40:D1:00
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       31558BC46F43D27E35FC6271698CCAE682D80B46
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa
Signing time:             Sat 25 Jul 2026 01:56:17 +0000
ROA not before:           Sat 25 Jul 2026 01:51:17 +0000
ROA not after:            Sat 24 Jul 2027 01:56:17 +0000
asID:                     197730
IP address blocks:        2a0b:2542:700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:55:8b:c4:6f:43:d2:7e:35:fc:62:71:69:8c:ca:e6:82:d8:0b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jul 25 01:51:17 2026 GMT
            Not After : Jul 24 01:56:17 2027 GMT
        Subject: CN=56AA7038A5BE782BE86530F587365821F340D100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:eb:9e:aa:a4:1f:57:e4:1d:27:02:9d:b9:
                    75:30:76:7d:3d:b7:3f:2b:0b:f5:44:09:8e:da:1f:
                    47:89:9d:91:18:85:2c:e6:8b:65:1f:bd:81:55:5f:
                    9a:28:fe:e2:68:61:a2:ec:0c:b7:f4:e1:af:43:22:
                    9d:0c:00:f7:70:9e:93:04:99:46:5d:3a:2d:f5:f2:
                    33:b4:75:d5:3e:df:42:cd:f6:3e:7d:dd:cd:c8:7b:
                    0e:7b:85:50:6d:9a:8b:04:3c:9e:4c:22:10:58:dd:
                    76:46:4d:87:ca:0a:81:5b:c9:54:bd:34:84:01:04:
                    41:f4:ca:cd:6e:36:ce:d9:95:df:8e:e1:4d:a8:06:
                    15:a7:13:9c:47:85:d7:85:74:9d:4b:7d:71:de:4c:
                    c1:25:cf:29:c8:9e:c0:fd:89:0b:c7:51:db:20:d0:
                    88:18:6f:7e:1d:6e:2b:f9:8b:b0:a4:76:5f:50:dc:
                    f4:1c:94:54:00:ba:69:49:2e:4d:5e:11:11:20:0c:
                    60:6f:6b:ba:e8:ba:02:a6:2c:1c:27:4a:d7:5e:4d:
                    69:66:b7:16:4c:45:2f:02:eb:1d:37:77:b2:1c:c5:
                    98:02:fa:09:4b:00:aa:73:57:ad:3d:12:52:80:90:
                    20:cc:3a:a9:a0:6d:60:9c:93:c9:cc:d0:69:97:b3:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AA:70:38:A5:BE:78:2B:E8:65:30:F5:87:36:58:21:F3:40:D1:00
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:2542:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:06:7e:7f:4a:42:d5:de:06:4a:bd:d1:9f:8e:cc:e7:1d:db:
         ba:76:a6:dd:6b:12:36:84:ca:ca:27:b4:76:b3:bc:1c:5f:b0:
         f0:31:bd:61:dd:7d:24:12:98:af:3b:1b:7f:c4:0c:80:5f:56:
         41:fd:bb:98:12:73:ba:bf:11:5d:ce:04:7a:c4:5c:75:36:bc:
         52:67:73:2a:00:c4:41:a9:c2:6e:1a:b3:1c:73:94:e7:37:98:
         2c:dd:55:1a:51:94:c4:30:a6:fd:8b:06:36:a3:ab:a3:0b:b3:
         b7:7a:ed:94:43:a7:93:67:b0:07:70:c2:6c:af:74:40:19:2a:
         bd:8a:dd:1c:95:75:84:ea:e1:2c:4f:29:ff:f2:1a:a9:03:52:
         be:0a:10:7d:64:2e:ca:7c:d3:9f:e4:c5:ec:30:f4:a0:60:c7:
         4c:c4:a9:fb:24:06:d4:ab:04:48:d8:78:d3:7d:13:db:7c:94:
         62:21:18:76:ad:83:65:5d:32:5f:10:ed:91:77:66:34:34:13:
         0a:21:7a:64:28:1e:be:8f:d3:a5:93:7b:cb:6d:6b:5b:7d:c2:
         b5:c1:b0:b1:a5:83:93:21:22:53:a1:51:44:7d:41:56:78:b6:
         b3:68:b8:13:39:7f:50:54:64:0e:2b:93:b8:0f:a9:e6:96:5f:
         4e:59:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----