Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa
File:                     323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa (raw, json)
Hash identifier:          G8GKUdFxaN4Wynqn45gIbz3u39r3wfNTDdtgwJX2hZ4=
Subject key identifier:   A1:24:DF:B3:B0:D7:89:02:90:A2:8D:F7:E6:D4:19:2F:F8:6E:23:2C
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       707D9A964E8324B7F2B4EC70102E5A980364C3FC
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa
Signing time:             Wed 03 Jun 2026 16:56:14 +0000
ROA not before:           Wed 03 Jun 2026 16:51:14 +0000
ROA not after:            Wed 02 Jun 2027 16:56:14 +0000
asID:                     47553
IP address blocks:        2605:3a40:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7d:9a:96:4e:83:24:b7:f2:b4:ec:70:10:2e:5a:98:03:64:c3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jun  3 16:51:14 2026 GMT
            Not After : Jun  2 16:56:14 2027 GMT
        Subject: CN=A124DFB3B0D7890290A28DF7E6D4192FF86E232C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:39:1b:6e:5e:82:31:7b:5a:be:dd:47:38:c5:
                    ff:5a:4c:90:c8:c5:24:58:e9:24:58:e3:7b:04:73:
                    3d:57:16:4d:d2:7e:21:ab:48:2e:da:dd:b5:3f:c4:
                    59:3a:5f:be:c4:eb:dd:14:c9:8e:7d:e0:95:d0:5a:
                    e0:10:bb:b4:d7:8a:56:2b:8f:6e:89:ad:36:5b:79:
                    b9:26:e2:0d:2d:25:9a:be:aa:93:23:20:ad:63:5e:
                    4f:0a:fa:cc:f8:18:1e:5f:5d:a9:b0:94:71:9d:a7:
                    19:a7:d1:0e:52:96:ad:4b:7b:01:58:77:d5:40:62:
                    60:74:d7:64:b7:27:e7:87:cf:f4:39:80:34:f8:c3:
                    b7:03:8e:d6:1c:89:b5:11:f3:3a:12:02:5f:12:38:
                    0c:0d:4c:8d:f3:1a:94:e9:5c:07:b3:3c:9d:67:7d:
                    14:1f:0c:a6:17:4a:43:c3:6d:9c:a1:fb:42:73:d3:
                    9d:93:47:22:ad:07:5a:47:9e:85:18:5e:ed:53:46:
                    b2:73:1f:1e:39:3c:6e:b7:d0:2a:b7:1f:7b:09:f3:
                    36:13:41:56:21:fb:84:b8:c1:39:37:98:bc:db:99:
                    cc:3b:b8:2e:4b:ef:65:c0:a6:5b:a0:2e:e1:db:6e:
                    c4:b3:7e:93:a0:1f:28:e9:44:4b:4d:da:2f:98:4f:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:24:DF:B3:B0:D7:89:02:90:A2:8D:F7:E6:D4:19:2F:F8:6E:23:2C
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:14:c1:19:d0:22:13:1f:3d:b4:75:57:b7:9c:72:1e:c7:24:
         8f:ff:b7:51:c8:56:c3:29:f6:83:55:18:16:7a:dd:ed:9e:e4:
         7b:fa:12:69:6e:68:17:27:5b:c5:75:58:38:e3:47:ab:5a:b1:
         5f:1e:f3:a6:67:a2:ac:3c:37:b6:5d:e7:37:b8:19:54:7f:58:
         67:53:1a:cf:f6:d0:41:16:7f:ff:c9:cb:f7:38:18:a8:4a:6e:
         8c:22:7e:0f:64:b0:8d:a9:2e:c8:7c:f6:29:b3:e8:d5:bd:55:
         21:24:b6:81:4a:fc:d5:63:54:d9:2b:53:ab:2d:5a:d3:e7:07:
         15:89:70:ba:a2:c2:a8:3b:74:23:f9:06:02:7c:41:da:89:b5:
         53:55:25:ad:04:45:33:13:c3:74:68:dc:2a:bb:96:e8:4a:57:
         27:98:04:ae:19:ce:c5:6f:30:1d:2e:25:83:85:9b:96:71:43:
         10:92:f7:31:d6:3c:f9:d6:12:0b:dc:76:f0:5c:11:03:2f:c2:
         71:f3:2b:16:2a:36:db:9f:0b:09:91:cd:ad:c5:2b:4c:30:17:
         d7:c9:bb:fd:34:3b:8a:30:da:df:98:f4:ef:87:e4:25:b1:2d:
         f3:50:68:18:1f:69:b1:05:56:5d:81:e1:fc:ee:31:98:3d:fe:
         57:6d:03:f1
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUcH2alk6DJLfytOxwEC5amANkw/wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjYwNjAzMTY1MTE0WhcNMjcwNjAyMTY1NjE0
WjAzMTEwLwYDVQQDEyhBMTI0REZCM0IwRDc4OTAyOTBBMjhERjdFNkQ0MTkyRkY4
NkUyMzJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzkbbl6CMXta
vt1HOMX/WkyQyMUkWOkkWON7BHM9VxZN0n4hq0gu2t21P8RZOl++xOvdFMmOfeCV
0FrgELu014pWK49uia02W3m5JuINLSWavqqTIyCtY15PCvrM+BgeX12psJRxnacZ
p9EOUpatS3sBWHfVQGJgdNdktyfnh8/0OYA0+MO3A47WHIm1EfM6EgJfEjgMDUyN
8xqU6VwHszydZ30UHwymF0pDw22coftCc9Odk0cirQdaR56FGF7tU0aycx8eOTxu
t9Aqtx97CfM2E0FWIfuEuME5N5i825nMO7guS+9lwKZboC7h227Es36ToB8o6URL
TdovmE8n8QIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFKEk37Ow14kCkKKN9+bUGS/4
biMsMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez
NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczNTM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
BTpAAAUwDQYJKoZIhvcNAQELBQADggEBAIMUwRnQIhMfPbR1V7ecch7HJI//t1HI
VsMp9oNVGBZ63e2e5Hv6EmluaBcnW8V1WDjjR6tasV8e86Znoqw8N7Zd5ze4GVR/
WGdTGs/20EEWf//Jy/c4GKhKbowifg9ksI2pLsh89imz6NW9VSEktoFK/NVjVNkr
U6stWtPnBxWJcLqiwqg7dCP5BgJ8QdqJtVNVJa0ERTMTw3Ro3Cq7luhKVyeYBK4Z
zsVvMB0uJYOFm5ZxQxCS9zHWPPnWEgvcdvBcEQMvwnHzKxYqNtufCwmRza3FK0ww
F9fJu/00O4ow2t+Y9O+H5CWxLfNQaBgfabEFVl2B4fzuMZg9/ldtA/E=
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:22:28 2026 by rpki-client