Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e2036323333.roa
File:                     32332e3134352e34382e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          gs1cAOkUvP061bexMP4ZN4bNZJDFAwHa0C+jcJP4lJo=
Subject key identifier:   D5:B7:D8:DA:34:31:3D:2E:C4:2D:BA:51:BE:84:87:71:61:F4:8C:A0
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       571AE3A73A19B184ABEEF9E172E49689E6A4C5D7
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:27 +0000
ROA not before:           Sat 14 Sep 2024 01:17:27 +0000
ROA not after:            Sat 13 Sep 2025 01:22:27 +0000
asID:                     6233
IP address blocks:        23.145.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1a:e3:a7:3a:19:b1:84:ab:ee:f9:e1:72:e4:96:89:e6:a4:c5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Sep 14 01:17:27 2024 GMT
            Not After : Sep 13 01:22:27 2025 GMT
        Subject: CN=D5B7D8DA34313D2EC42DBA51BE84877161F48CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:cf:30:13:e9:49:88:d7:b2:64:94:2c:3a:
                    19:dc:ff:41:92:d5:51:81:bb:63:77:ce:9a:da:d4:
                    ed:ba:12:52:ac:79:89:d1:21:12:43:68:4a:1f:0b:
                    0a:31:85:57:cd:de:07:91:4d:d0:09:e2:6a:09:de:
                    89:dd:fe:7a:71:28:7d:15:3c:11:4b:ae:0a:f9:75:
                    7c:15:0c:59:a2:96:39:44:ab:01:e5:cd:13:19:c4:
                    d2:4f:5a:f5:44:9c:f2:85:ed:6f:8e:8c:48:01:23:
                    0a:72:45:a5:40:24:41:66:f1:e3:c5:4f:a2:ab:7b:
                    53:48:4e:81:7e:0b:66:69:f0:63:ee:fd:3e:5a:84:
                    1a:38:dd:66:e8:6a:26:80:fc:81:84:9d:cf:13:d2:
                    7a:3d:60:56:6f:89:e3:77:76:e1:a6:c9:1d:d7:1c:
                    63:3f:8f:ff:c6:32:51:bb:d7:20:61:09:86:95:7b:
                    69:b7:e5:26:74:58:c1:a1:08:54:d2:a6:f1:7f:e9:
                    c6:29:c5:2e:a1:2a:ad:7f:7b:08:d4:87:f0:65:c6:
                    f8:25:11:6a:fa:95:1f:d9:05:1f:b1:2a:65:34:de:
                    b4:a8:1a:92:26:c3:ee:ce:d5:10:6f:97:0b:1c:7b:
                    7b:6d:e2:3a:fb:dc:8a:2a:a6:ab:ad:b6:37:53:ed:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B7:D8:DA:34:31:3D:2E:C4:2D:BA:51:BE:84:87:71:61:F4:8C:A0
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:65:36:8a:b2:c5:96:ab:9b:28:7c:65:18:f0:25:70:73:b2:
         36:5c:eb:87:20:e7:02:7e:a3:3c:38:9d:bb:bc:ee:87:75:21:
         26:39:74:6a:24:02:f3:99:69:36:e9:a2:73:e5:73:8e:1a:3c:
         3e:69:d8:40:69:9c:ae:41:57:55:eb:a2:7c:24:e0:82:ec:53:
         42:6f:ca:4b:b0:44:c7:2b:3c:e0:f4:57:40:01:2a:c9:4a:4f:
         20:13:ce:58:37:15:a7:d2:f7:cf:c8:f7:57:ab:91:94:a4:77:
         5a:98:ca:87:82:40:fb:5e:f6:f2:e3:8b:e0:8b:bd:f5:8c:27:
         0b:8f:12:6e:db:42:87:af:a0:9a:43:00:fa:2a:06:f0:41:f8:
         3e:7a:49:f9:e4:3b:dc:f2:dd:3c:d4:07:a3:47:52:fd:dd:7a:
         21:29:fc:26:3e:a1:fa:a3:e5:fa:1d:4f:c5:f3:a8:7c:7c:ad:
         db:43:7a:19:30:e9:3f:82:a4:58:0d:38:c3:d2:a6:93:91:04:
         88:77:f2:c6:ef:f8:a7:c5:2f:2d:40:b1:cd:a3:d0:7e:56:6c:
         98:ed:be:b3:69:f6:fb:8f:48:b7:fa:10:ea:e8:36:66:a0:46:
         af:76:8d:e7:8a:34:53:a8:50:03:c9:60:db:1d:f5:3b:9a:15:
         d7:e9:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:00 2024 by rpki-client on console-ams.rpki-client.org