Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
File:                     32332e3134352e34382e302f32342d3234203d3e203530313331.roa (raw, json)
Hash identifier:          XJ0u9rMfxGKJy31mVQKPCwETXpK7CM9U8zfpNgRYJ8I=
Subject key identifier:   43:62:70:48:3B:F1:F6:98:05:EC:31:03:E7:D7:50:3E:9E:2A:38:B7
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       1DC4A830901F74AAFEE12C8966141A14770E3E94
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
Signing time:             Wed 31 Jul 2024 15:38:37 +0000
ROA not before:           Wed 31 Jul 2024 15:33:37 +0000
ROA not after:            Wed 30 Jul 2025 15:38:37 +0000
asID:                     50131
IP address blocks:        23.145.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c4:a8:30:90:1f:74:aa:fe:e1:2c:89:66:14:1a:14:77:0e:3e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jul 31 15:33:37 2024 GMT
            Not After : Jul 30 15:38:37 2025 GMT
        Subject: CN=436270483BF1F69805EC3103E7D7503E9E2A38B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:84:88:bd:de:36:ff:4a:0d:50:4b:30:b6:
                    b3:4b:e4:f3:31:f0:a4:e2:31:08:52:8a:36:18:ef:
                    64:2d:c9:45:8d:73:3a:8b:19:b7:d4:b4:75:30:12:
                    d3:db:f9:ec:57:9d:8e:e3:b2:73:70:9e:37:b8:c3:
                    5b:37:56:9f:cb:96:95:2b:4e:cc:1b:7f:cd:2d:5d:
                    70:42:12:08:f4:c7:bd:44:6d:a2:dd:ef:51:f0:a3:
                    22:2a:34:d9:24:e4:d8:84:17:0a:1d:39:4e:0f:8d:
                    1b:77:e3:ee:d5:ba:d0:6c:fb:ff:ca:5b:20:be:12:
                    b2:d5:fb:84:5d:3b:7b:85:93:3c:7e:2c:6e:37:5c:
                    b3:57:c7:3d:88:2d:49:b0:d8:0e:88:ff:54:69:2b:
                    f0:51:5d:83:5d:30:55:0a:3f:64:25:b1:d1:ad:a2:
                    94:37:15:5a:ff:6f:9d:51:ee:34:02:cf:da:7e:70:
                    65:61:3b:ae:96:fc:6b:bf:7a:1f:05:1c:40:9e:f9:
                    df:74:76:10:8b:73:c9:31:eb:35:37:8d:e9:32:64:
                    35:83:1b:44:5a:4b:78:b5:57:6f:5e:e7:b9:26:a7:
                    13:f5:76:eb:1f:60:21:98:56:bf:57:0c:b6:42:be:
                    0b:6d:71:43:bc:9f:9b:a8:fd:1b:26:07:b8:b0:ae:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:62:70:48:3B:F1:F6:98:05:EC:31:03:E7:D7:50:3E:9E:2A:38:B7
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:79:f0:1f:a1:2d:27:18:0d:b7:73:fd:9e:0f:31:0c:51:68:
         54:31:23:e8:af:1c:8f:44:7f:70:4a:62:38:ce:8d:25:e4:d4:
         11:fa:11:af:c7:5f:3e:bc:19:e5:76:3c:cb:96:17:d9:8a:18:
         f6:fd:93:96:3a:29:17:1a:cc:d4:5f:61:77:2b:ba:b3:b1:c3:
         74:07:b7:75:b6:c2:34:ed:0b:34:d7:c6:ab:b2:00:f1:65:0c:
         15:94:0d:a5:c2:9a:97:af:64:91:4e:66:74:db:18:e7:2d:c9:
         14:d7:b2:3b:72:c0:3b:6d:56:25:d4:ee:76:4e:80:83:8d:38:
         76:84:0c:57:6b:db:b1:98:5f:e5:75:1c:34:6f:e4:87:62:10:
         04:5f:b9:7c:60:6b:e3:75:91:dd:7f:08:58:11:87:dc:47:79:
         2e:85:7d:f3:90:fe:02:32:4d:86:ae:03:4d:d0:ae:5a:8a:ae:
         38:7e:c5:27:fc:04:4d:69:dd:2f:25:9f:bc:b5:ab:04:87:d7:
         2e:fb:8c:60:2f:a3:33:b5:85:f8:b1:a9:20:80:f1:c8:99:2c:
         51:84:c0:aa:4a:76:f3:38:62:34:16:33:5d:3c:dc:66:95:ac:
         39:45:11:71:5a:7f:ab:b1:48:fa:c8:58:25:df:ab:f9:f0:26:
         fd:40:dd:dd
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUHcSoMJAfdKr+4SyJZhQaFHcOPpQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjQwNzMxMTUzMzM3WhcNMjUwNzMwMTUzODM3
WjAzMTEwLwYDVQQDEyg0MzYyNzA0ODNCRjFGNjk4MDVFQzMxMDNFN0Q3NTAzRTlF
MkEzOEI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5KEiL3eNv9K
DVBLMLazS+TzMfCk4jEIUoo2GO9kLclFjXM6ixm31LR1MBLT2/nsV52O47JzcJ43
uMNbN1afy5aVK07MG3/NLV1wQhII9Me9RG2i3e9R8KMiKjTZJOTYhBcKHTlOD40b
d+Pu1brQbPv/ylsgvhKy1fuEXTt7hZM8fixuN1yzV8c9iC1JsNgOiP9UaSvwUV2D
XTBVCj9kJbHRraKUNxVa/2+dUe40As/afnBlYTuulvxrv3ofBRxAnvnfdHYQi3PJ
Mes1N43pMmQ1gxtEWkt4tVdvXue5JqcT9XbrH2AhmFa/Vwy2Qr4LbXFDvJ+bqP0b
Jge4sK6gowIDAQABo4ICXjCCAlowHQYDVR0OBBYEFENicEg78faYBewxA+fXUD6e
Kji3MB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzMzJlMzEzNDM1MmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMDMxMzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeRMDAN
BgkqhkiG9w0BAQsFAAOCAQEAknnwH6EtJxgNt3P9ng8xDFFoVDEj6K8cj0R/cEpi
OM6NJeTUEfoRr8dfPrwZ5XY8y5YX2YoY9v2TljopFxrM1F9hdyu6s7HDdAe3dbbC
NO0LNNfGq7IA8WUMFZQNpcKal69kkU5mdNsY5y3JFNeyO3LAO21WJdTudk6Ag404
doQMV2vbsZhf5XUcNG/kh2IQBF+5fGBr43WR3X8IWBGH3Ed5LoV985D+AjJNhq4D
TdCuWoquOH7FJ/wETWndLyWfvLWrBIfXLvuMYC+jM7WF+LGpIIDxyJksUYTAqkp2
8zhiNBYzXTzcZpWsOUURcVp/q7FI+shYJd+r+fAm/UDd3Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org