Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa
File:                     32332e3134352e34382e302f32342d3234203d3e20323031313036.roa (raw, json)
Hash identifier:          nRYzLWzzk8nNSjWN8bDIjXX3qFmHzvMyeuYVjWInmhk=
Subject key identifier:   31:17:B4:93:07:B2:5D:2F:1D:1C:52:85:CC:8F:A5:AB:F7:89:7A:BC
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       3CF451E2687F544B81CE62A338079CFD79E091F6
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa
Signing time:             Wed 31 Jul 2024 15:38:37 +0000
ROA not before:           Wed 31 Jul 2024 15:33:37 +0000
ROA not after:            Wed 30 Jul 2025 15:38:37 +0000
asID:                     201106
IP address blocks:        23.145.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f4:51:e2:68:7f:54:4b:81:ce:62:a3:38:07:9c:fd:79:e0:91:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jul 31 15:33:37 2024 GMT
            Not After : Jul 30 15:38:37 2025 GMT
        Subject: CN=3117B49307B25D2F1D1C5285CC8FA5ABF7897ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:82:c5:39:d9:e8:a7:c0:6b:ea:47:c4:52:
                    ba:26:38:42:40:cc:4c:fd:2b:6b:d9:2c:d2:7f:37:
                    7a:3a:76:01:15:8d:0f:42:fb:88:fe:fa:98:43:af:
                    52:74:3d:80:e0:dc:f6:27:bc:9b:65:c0:0b:38:b3:
                    be:cb:d2:07:13:46:e2:c0:65:95:1a:7d:21:2b:4f:
                    9f:94:a3:5e:eb:99:6e:79:61:85:d7:0e:76:bc:c3:
                    c7:5e:08:c5:cd:a1:d6:54:74:06:46:24:97:21:e3:
                    90:29:08:80:54:2e:03:83:f4:46:e2:a7:ca:ed:fd:
                    0c:8d:db:64:64:ae:68:b3:df:9a:bc:1c:47:3c:09:
                    4b:5a:7f:18:32:b6:1e:2a:5d:a3:42:87:a8:02:43:
                    7e:3a:f5:e8:51:93:07:8d:5e:8b:76:6e:32:a6:7a:
                    f0:78:6b:4f:64:d3:bf:c6:a1:be:2d:61:61:bf:e3:
                    a4:75:16:e2:41:12:ba:3d:be:5a:e8:0e:ad:5f:a1:
                    2c:14:dd:0b:60:5b:a9:07:72:22:aa:9f:9e:26:51:
                    94:66:b6:90:36:26:c2:f0:01:af:69:03:80:78:74:
                    e3:37:40:3f:82:81:e1:92:3e:a0:f2:82:78:24:49:
                    16:92:1c:49:44:12:e9:ea:a7:cb:45:b5:4c:01:32:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:17:B4:93:07:B2:5D:2F:1D:1C:52:85:CC:8F:A5:AB:F7:89:7A:BC
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:81:8a:24:90:cf:f6:71:7c:0c:a7:83:46:a0:80:cb:fe:33:
         54:de:8f:76:13:da:53:d8:70:05:30:70:0d:3f:7e:3e:f9:d6:
         2f:70:9a:d1:cc:20:71:6a:2e:9a:e5:1e:66:31:02:8e:46:90:
         7f:f0:33:3c:9b:76:15:fc:1d:7d:1d:b8:b5:da:e4:b6:18:0b:
         a3:c4:fe:ab:28:0b:5a:34:ef:02:40:fb:b1:4e:b8:55:bc:23:
         32:ff:74:fe:f1:97:6d:02:ef:5e:0a:c3:fb:c0:50:f8:e5:0e:
         dc:bb:5c:28:ae:7b:73:ee:45:66:e6:1a:15:84:db:5f:81:17:
         54:18:40:08:f6:ec:cd:71:43:97:c0:7d:bf:0c:60:7d:c7:43:
         60:70:9c:50:d5:e6:c8:70:d7:09:4b:bb:92:1b:6b:cb:14:4e:
         9b:7e:a7:b7:7e:be:33:3f:62:7a:44:ec:af:f7:a3:34:cd:33:
         b7:28:ff:fb:78:24:78:1d:a1:36:aa:22:e9:c4:53:23:43:71:
         e6:6d:e3:a1:7f:59:4f:c7:2b:25:e8:b7:14:87:6a:6b:56:25:
         15:b3:49:a8:62:74:11:7d:fc:f1:eb:b5:34:d1:a8:ea:25:56:
         55:ab:81:75:20:94:d9:d1:f6:31:d9:0c:91:84:5e:5c:9a:d0:
         19:89:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org