Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa
File:                     323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa (raw, json)
Hash identifier:          VsjgbwbUjizEKEK/Cbm97cMHiMDkvMauS0L2ibeOovQ=
Subject key identifier:   CE:14:57:CF:F2:81:9B:A5:C4:9C:5C:32:FF:62:E3:10:EB:D4:40:18
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       30A56C31E251FAB1766B9592D133FC9489D5516F
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa
Signing time:             Wed 03 Jun 2026 16:56:14 +0000
ROA not before:           Wed 03 Jun 2026 16:51:14 +0000
ROA not after:            Wed 02 Jun 2027 16:56:14 +0000
asID:                     201106
IP address blocks:        2605:3a40:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a5:6c:31:e2:51:fa:b1:76:6b:95:92:d1:33:fc:94:89:d5:51:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jun  3 16:51:14 2026 GMT
            Not After : Jun  2 16:56:14 2027 GMT
        Subject: CN=CE1457CFF2819BA5C49C5C32FF62E310EBD44018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:29:3d:52:37:43:fe:af:bc:8b:a0:f7:9a:
                    48:7d:c6:76:f7:b3:9e:8b:a4:b2:16:e2:6a:09:16:
                    0c:d0:c6:29:11:16:fc:86:d7:90:f5:4f:a0:d5:6a:
                    51:3e:5e:8b:ac:80:08:55:26:95:20:7e:ab:78:8d:
                    8f:0a:fa:77:3b:74:3f:b7:bd:4f:ca:89:ed:45:91:
                    1e:25:81:42:00:04:25:dd:3b:a5:42:3e:86:cc:c2:
                    52:42:4d:04:c7:1f:1a:2b:0e:98:a8:96:32:66:ae:
                    e0:26:bb:66:e4:98:70:9a:97:bc:d7:2e:53:1a:17:
                    dd:e3:db:10:3d:4f:34:3e:b1:f5:6a:78:49:93:d1:
                    70:f8:c9:e7:67:06:25:0a:e0:1b:01:02:4a:2f:d1:
                    c0:26:8c:53:60:b4:6d:d3:23:30:fd:76:aa:75:f2:
                    d3:8c:e6:aa:99:83:9b:7f:04:c7:f6:d0:c0:b7:4f:
                    54:e5:3b:59:bf:4a:6a:b3:2a:cd:f1:ec:95:a8:99:
                    bc:b8:49:c1:2b:72:53:81:a0:30:4c:57:11:9c:85:
                    d7:4d:14:c3:c0:62:9e:da:c4:98:0d:62:b6:73:93:
                    b3:43:78:e0:9a:6b:1b:af:12:40:2b:b4:b0:6d:dd:
                    fb:5f:5c:fc:2e:b8:f9:87:48:f7:70:e4:19:9d:9d:
                    69:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:14:57:CF:F2:81:9B:A5:C4:9C:5C:32:FF:62:E3:10:EB:D4:40:18
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:8b:1c:7e:62:a2:58:db:5c:2b:ef:ff:0a:a1:0f:e1:99:
         1b:69:b2:ea:39:63:fc:c9:cd:39:09:46:f9:a9:f1:56:d1:e5:
         35:85:4a:a0:ad:aa:d0:8a:0e:47:75:1c:ef:ef:44:72:b7:a9:
         85:b3:7a:8f:98:86:fc:97:83:b2:9c:41:70:81:e9:cf:23:3b:
         a3:7a:f8:0f:2b:a1:f4:b6:00:ec:da:bd:7f:54:91:c2:db:31:
         23:84:43:4c:3b:e6:41:a2:b7:a3:1c:59:36:6e:d1:0c:6c:be:
         d0:b1:69:6e:2f:a7:2d:d0:c5:8c:3e:f4:6a:6c:42:09:b5:f2:
         b5:10:25:b6:d2:12:fd:b4:bc:7f:0a:ac:bf:7d:fc:f5:e8:2b:
         c0:67:26:a1:92:bc:f8:7f:ff:93:24:2b:f5:d1:16:2c:00:0c:
         fc:45:16:be:ba:51:50:d9:b3:34:9e:f3:cd:bb:06:2d:84:95:
         74:58:12:22:ce:60:04:e1:81:c8:c0:8d:d7:79:21:48:2f:c7:
         c6:b5:be:10:1e:2d:58:28:e6:f2:3f:4d:c6:5d:9a:c2:94:e0:
         b0:74:b7:cd:b9:e3:50:dd:45:68:c3:c3:44:fb:70:04:62:25:
         3d:51:29:3c:bc:bd:29:e2:43:63:d1:1a:ef:f0:28:ec:fc:1f:
         5b:0d:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:52 2026 by rpki-client