Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
File:                     32332e3134352e34382e302f32342d3234203d3e203530313331.roa (raw, json)
Hash identifier:          LRs/6tEY94XBeaKTjBcX72K/evkpmpY2wR1bJCBKDFM=
Subject key identifier:   89:87:A3:39:85:34:05:46:98:EF:F5:85:0A:E0:6A:1E:69:73:8F:31
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       7D1D0B2EBAB18F272E7AAEF637AA562F58DBBC48
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
Signing time:             Wed 03 Jun 2026 16:56:14 +0000
ROA not before:           Wed 03 Jun 2026 16:51:14 +0000
ROA not after:            Wed 02 Jun 2027 16:56:14 +0000
asID:                     50131
IP address blocks:        23.145.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1d:0b:2e:ba:b1:8f:27:2e:7a:ae:f6:37:aa:56:2f:58:db:bc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jun  3 16:51:14 2026 GMT
            Not After : Jun  2 16:56:14 2027 GMT
        Subject: CN=8987A3398534054698EFF5850AE06A1E69738F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:6d:78:4e:53:01:aa:64:66:3d:f8:7e:49:
                    2f:75:dc:91:c0:03:b5:df:ca:d0:26:e9:04:34:b3:
                    f0:83:32:29:40:15:e6:13:c4:c2:a2:32:34:ab:6f:
                    8f:b7:3d:18:98:5f:eb:33:a7:57:ff:a7:37:d9:3b:
                    06:3a:12:aa:c4:65:e3:bc:25:dc:4e:04:7c:0d:2d:
                    eb:b3:ad:ae:33:0b:b6:cf:9b:3e:28:80:b6:eb:65:
                    42:e3:c0:98:7a:49:cb:46:5a:00:a8:3a:5d:8f:38:
                    ac:f8:7a:a2:18:39:b6:96:2f:86:be:8e:c7:99:53:
                    b6:01:92:94:46:b6:72:f6:71:77:18:6e:df:88:f9:
                    3e:96:06:2c:19:27:55:fd:a6:cd:41:5a:1b:f7:f9:
                    5d:79:84:f1:96:c6:ea:35:5d:78:2e:b5:e9:cb:f4:
                    99:85:5b:21:49:cd:85:15:1d:7a:b4:02:ae:dc:72:
                    8e:a5:3e:78:eb:b3:1d:65:a2:1e:a8:92:99:95:95:
                    3a:7c:ec:42:8f:d6:67:ce:3a:3b:82:3b:97:70:92:
                    5d:32:14:d0:7a:5b:5d:74:d0:30:83:26:db:96:8a:
                    78:fb:16:5e:63:5f:b5:0c:25:d7:a3:60:97:f9:85:
                    e3:d1:08:7e:e3:29:d7:cf:12:fa:50:38:e4:41:39:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:87:A3:39:85:34:05:46:98:EF:F5:85:0A:E0:6A:1E:69:73:8F:31
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:1a:f1:2a:59:71:aa:7a:a0:30:3d:eb:14:c5:6c:fe:2f:
         36:01:06:16:41:ee:6c:3d:f0:ed:22:6b:97:89:db:34:2e:2a:
         96:a2:ee:00:0a:d9:b9:15:92:60:d9:69:9c:48:f7:b3:72:e6:
         0e:4f:eb:8f:bb:75:50:04:22:10:bd:92:2f:a6:3b:f5:dd:7e:
         45:40:9d:fa:7b:04:30:21:cc:4a:21:73:18:43:29:45:cf:45:
         36:5e:e2:8c:a9:da:c9:39:d8:a3:e1:26:fc:cf:e1:0c:c8:5e:
         50:49:9f:45:77:7f:07:20:e1:0e:18:33:51:b7:fe:5e:b0:7f:
         98:87:2d:d1:45:67:2d:7d:57:a6:5c:d0:fc:07:fe:ec:bf:c3:
         d2:d7:31:46:0c:10:d7:6a:1c:22:a4:d1:69:2b:a6:e3:cd:8a:
         3a:34:b9:66:73:4c:28:25:6a:82:85:1e:cb:74:a8:48:8c:f6:
         d2:ca:97:99:4d:d7:76:39:77:0e:bf:fd:95:7e:6f:17:f3:4d:
         c9:6f:68:b2:13:a7:76:b2:09:2c:90:2c:b2:02:d9:17:73:2c:
         76:de:b4:26:3a:08:99:9c:c7:18:cd:04:bd:9b:04:0e:25:55:
         3a:28:a1:94:9f:b8:4d:ed:56:e0:c1:47:2f:52:b0:cc:20:ec:
         76:e7:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:17:48 2026 by rpki-client