Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa
File:                     32332e3134352e34382e302f32342d3234203d3e20323031313036.roa (raw, json)
Hash identifier:          ojNcaBH2X+jKeoOszfVZrIqoL30Iod7a9Y2kz09lt3s=
Subject key identifier:   1B:73:06:01:46:7B:FA:EA:43:2A:8F:B7:FB:75:AA:AA:74:8E:83:7C
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       3943B5DFB3197AA968F4A607A8792FFCDAB7EF87
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa
Signing time:             Wed 30 Aug 2023 15:13:05 +0000
ROA not before:           Wed 30 Aug 2023 15:08:05 +0000
ROA not after:            Wed 28 Aug 2024 15:13:05 +0000
asID:                     201106
IP address blocks:        23.145.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:b5:df:b3:19:7a:a9:68:f4:a6:07:a8:79:2f:fc:da:b7:ef:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Aug 30 15:08:05 2023 GMT
            Not After : Aug 28 15:13:05 2024 GMT
        Subject: CN=1B730601467BFAEA432A8FB7FB75AAAA748E837C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:82:07:8e:93:d1:18:e3:c7:00:d3:2e:d3:
                    7e:bd:4c:ed:2c:2f:ec:08:e6:9e:f9:dc:e5:19:00:
                    f1:08:49:40:3c:9b:39:04:34:81:56:8c:ed:cf:9c:
                    a5:cf:5e:92:77:bf:47:87:c3:9d:92:8c:53:ab:bb:
                    43:57:63:ec:65:03:80:29:ad:f9:1a:40:d0:6c:d7:
                    b2:ba:dd:bf:a5:33:47:07:c0:04:ea:ed:c8:15:85:
                    6f:3e:7b:b1:2f:00:d4:6f:c7:97:dd:f9:8f:d0:66:
                    e0:ce:c8:2b:e4:d5:a4:b1:a0:b5:b2:2a:4c:93:23:
                    31:88:53:a1:80:0e:e6:cc:2b:be:5b:e5:1b:f8:93:
                    53:16:7f:2b:fb:2e:af:85:91:33:5a:e8:80:2d:13:
                    b4:97:b5:62:ed:2f:5e:ef:42:f5:14:a1:be:46:3d:
                    43:65:02:81:8e:37:8d:19:de:f9:f5:2a:89:56:d6:
                    37:7e:0e:9c:52:d9:3c:fe:a8:b8:33:fa:db:a7:0e:
                    58:84:3e:59:39:db:da:2d:85:ed:bc:61:84:db:5c:
                    9f:20:0f:2b:f3:09:7c:66:c6:5c:df:4f:fa:7f:9a:
                    74:83:b1:ca:4e:f9:76:0d:d6:c2:f1:28:60:58:87:
                    ff:56:00:ae:ba:62:8e:e4:94:74:83:2f:94:eb:63:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:73:06:01:46:7B:FA:EA:43:2A:8F:B7:FB:75:AA:AA:74:8E:83:7C
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e0:fa:0f:ce:e6:cc:e3:93:57:9b:cc:dd:1b:d9:10:6e:6d:
         e5:35:c4:0e:b1:44:18:27:c2:ee:a5:03:e1:5d:1a:82:e1:9b:
         52:4f:33:39:ed:a7:ec:a2:2a:1c:74:9c:7a:f4:c8:62:be:7b:
         c2:eb:9e:af:4f:62:15:b6:ee:fc:30:a2:61:0c:7a:e6:a9:ae:
         fa:7b:dc:7b:d3:5c:ff:2c:fd:7f:71:5c:6e:50:67:54:00:b7:
         72:03:f4:cb:71:4f:93:a0:8b:b4:cb:be:02:5d:2c:d0:20:e2:
         7b:72:15:14:0f:42:df:12:8c:37:eb:15:b6:20:d9:f2:f8:fb:
         e5:af:4e:f6:a7:52:19:57:c2:31:9c:f8:8a:5d:b3:d8:f4:2e:
         74:71:e7:62:6b:a9:a8:f5:6e:52:08:06:dd:37:02:dd:b0:b9:
         3f:3e:7d:b1:b4:d1:7f:f1:dd:74:18:92:90:ea:05:24:8d:e6:
         97:c5:6e:fe:61:26:bb:67:e4:cf:02:31:17:67:65:2a:58:a9:
         4f:3c:e4:8b:e5:7e:7b:94:39:2c:7a:65:be:fc:67:a9:6f:44:
         dd:31:5e:b9:dc:68:ae:a6:52:e2:a1:81:9c:38:d9:f0:bb:84:
         92:66:75:53:3f:19:40:75:6c:6d:fc:cb:8a:b4:d1:4d:13:15:
         90:fa:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:06:51 2024 by rpki-client on console-fra.rpki-client.org