Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa
File:                     323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa (raw, json)
Hash identifier:          E9/mIgxumlFy4A+RcsJpAcZk+5ubY085/yRBrILldf8=
Subject key identifier:   02:E7:56:49:88:4A:C6:E9:16:F7:E4:A9:2C:87:88:65:84:8C:45:3F
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       5D03FE57F3518D1D6E4E204561ABC29C4C84B534
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa
Signing time:             Wed 30 Aug 2023 15:13:16 +0000
ROA not before:           Wed 30 Aug 2023 15:08:16 +0000
ROA not after:            Wed 28 Aug 2024 15:13:16 +0000
asID:                     201106
IP address blocks:        2605:3a40:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:03:fe:57:f3:51:8d:1d:6e:4e:20:45:61:ab:c2:9c:4c:84:b5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Aug 30 15:08:16 2023 GMT
            Not After : Aug 28 15:13:16 2024 GMT
        Subject: CN=02E75649884AC6E916F7E4A92C878865848C453F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:2c:b4:57:c8:3c:06:60:8b:c0:7e:94:4a:
                    15:84:31:b7:df:2b:eb:78:96:cb:c1:10:21:45:08:
                    70:75:4f:39:82:72:5a:75:f5:8e:55:79:e7:6e:ba:
                    5d:cf:a3:d8:30:80:2f:b3:bd:0e:3f:a3:f1:6b:57:
                    70:64:b3:94:74:32:dc:d8:51:2e:06:dd:aa:50:32:
                    3c:67:7c:30:dc:77:e7:07:a8:35:22:85:8d:42:17:
                    e8:cc:07:8a:f0:28:fe:fa:31:b8:e2:f6:df:6a:8d:
                    06:4b:f0:ea:82:9a:2b:83:82:13:f6:6b:d1:d9:14:
                    d9:05:ef:fb:f6:eb:f9:a4:6a:2a:83:9b:f4:8e:dc:
                    1a:c3:8d:f7:8e:37:f7:2e:08:48:7a:c7:d6:82:21:
                    37:2e:59:0b:5a:0f:38:1e:2a:7e:b0:18:b4:1c:08:
                    0d:35:f0:70:99:c1:34:03:be:a0:bf:e9:79:e3:05:
                    a8:ee:5d:f8:b9:3c:39:68:13:53:80:1b:0b:8f:6a:
                    70:c5:2e:62:c3:66:66:17:2a:56:4d:2c:d6:91:44:
                    4e:5e:24:41:ef:5a:8d:87:cd:13:ff:c2:18:cf:05:
                    1f:3b:5d:6f:23:87:50:5b:50:c5:6e:6d:5f:4e:36:
                    33:9c:f5:6e:19:9c:08:3b:cf:1b:c5:26:e1:7e:6d:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:56:49:88:4A:C6:E9:16:F7:E4:A9:2C:87:88:65:84:8C:45:3F
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a343a3a2f34382d3438203d3e20323031313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:a9:64:95:f9:f2:e1:22:de:95:72:46:73:a0:2b:63:c6:
         f7:7e:9e:de:9b:c2:40:04:a0:d3:99:61:36:33:b8:ec:e9:ee:
         aa:c1:dd:44:12:ca:9c:51:e2:c2:5a:48:df:34:30:ae:a7:31:
         ba:48:ef:18:5d:62:f8:eb:23:ce:fe:bc:01:1a:d8:c6:37:30:
         12:ed:e8:82:d8:c3:86:74:b4:99:a4:38:09:fe:c0:b8:3a:72:
         cb:3a:b0:c6:cd:b8:e5:0b:2e:9f:fe:c1:a4:b8:b8:a8:09:00:
         4f:08:77:65:44:8c:df:15:ca:91:f4:c8:d5:f9:72:01:90:0b:
         ed:8d:ab:d5:be:84:d0:62:73:e2:94:aa:aa:69:d8:52:c5:c6:
         a1:80:18:99:30:16:fe:17:20:35:23:72:60:f7:d6:75:4e:74:
         b1:27:40:07:2b:d6:d3:2e:37:22:22:3b:6d:93:d7:f1:f6:83:
         f2:f8:63:98:c0:19:10:65:eb:a2:6f:ce:7a:d9:7c:9c:b8:ac:
         81:62:ad:4c:55:d7:18:76:a0:a3:7e:93:d4:da:5a:8c:6b:74:
         54:74:2e:26:12:44:bc:ba:be:b2:58:29:74:4d:64:cd:6e:8a:
         75:1e:a1:fa:0d:97:de:6b:a6:09:7d:e9:4c:c2:31:4e:1a:ed:
         ff:07:4d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:06:52 2024 by rpki-client on console-fra.rpki-client.org