Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa
File:                     323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa (raw, json)
Hash identifier:          ALT4KUSZOqyuEK9xUyl2ihNvbV9dQ72q8k9petDAm5I=
Subject key identifier:   7D:25:73:43:06:1B:05:C5:02:44:5E:DF:A6:F8:2F:56:82:75:B2:A0
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       260556775E7EFD9A1706F4BA949A24925414C00B
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa
Signing time:             Wed 31 Jul 2024 15:38:37 +0000
ROA not before:           Wed 31 Jul 2024 15:33:37 +0000
ROA not after:            Wed 30 Jul 2025 15:38:37 +0000
asID:                     47553
IP address blocks:        2605:3a40:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:05:56:77:5e:7e:fd:9a:17:06:f4:ba:94:9a:24:92:54:14:c0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jul 31 15:33:37 2024 GMT
            Not After : Jul 30 15:38:37 2025 GMT
        Subject: CN=7D257343061B05C502445EDFA6F82F568275B2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:39:4a:29:50:40:51:7c:88:b3:a7:39:ec:
                    06:2e:35:08:2b:9a:31:f7:af:9c:fc:cb:a7:d0:73:
                    18:a3:44:6f:e3:30:a7:3c:95:b6:2c:2d:a0:19:91:
                    93:42:6b:27:ca:ee:23:f1:4f:4e:07:57:26:cd:7d:
                    f9:9a:3d:39:f3:c5:c7:11:f6:7f:85:da:39:99:c3:
                    ef:41:dd:96:1f:14:78:71:76:cc:c6:bd:94:84:e9:
                    78:66:16:21:c5:a9:ce:2a:6e:17:8d:68:3e:d4:8c:
                    fa:cb:b4:c8:38:d5:d4:16:d0:39:77:c2:86:7c:0a:
                    1e:9b:91:3b:0d:79:ba:74:bd:2a:14:a3:7a:70:df:
                    f7:b6:21:a8:cd:55:80:d2:c6:7a:04:47:d6:f6:d0:
                    2e:5f:43:8e:40:8b:74:4b:19:28:a8:37:99:a8:11:
                    8a:22:f3:0e:87:fc:33:07:9d:2b:5a:c0:56:68:60:
                    e6:c4:4e:f0:f0:e0:9f:12:4f:3a:9d:0f:ee:c1:29:
                    c6:44:0e:30:02:e5:96:97:8a:21:20:49:cd:d8:10:
                    49:c5:a7:14:85:ad:d0:d4:41:76:99:90:bc:9c:bd:
                    d8:d3:40:c1:1a:9c:69:11:db:36:a5:bc:bb:ec:09:
                    45:22:77:ca:3f:18:a1:fc:b8:d9:2d:85:74:69:d2:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:73:43:06:1B:05:C5:02:44:5E:DF:A6:F8:2F:56:82:75:B2:A0
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:cf:fd:5e:08:43:7f:8b:cc:6a:28:1d:a6:70:63:8e:b1:
         66:60:24:d6:b0:d6:04:a8:7b:24:df:97:ec:b9:6c:de:1a:99:
         de:48:cd:de:4b:a2:d3:8f:ed:80:fa:81:48:ad:d7:c0:ca:d0:
         16:81:0f:bb:f6:d1:68:04:52:df:ff:e2:81:bf:42:b4:22:87:
         67:38:bf:15:28:cd:0c:8f:13:35:9c:41:45:39:9d:91:d7:30:
         dc:cb:f0:7c:76:5f:56:9f:17:76:29:dd:2f:90:05:8b:9c:c8:
         86:db:80:72:b0:ca:50:10:79:20:5c:70:09:1d:3c:ec:b3:5f:
         5c:51:b3:aa:f7:6f:30:a7:22:4a:b2:79:6c:a2:34:ca:88:c0:
         61:f1:34:46:62:a8:99:32:b9:6f:2a:d2:b1:e9:63:f9:15:c6:
         43:07:7b:ad:b8:bf:ac:0d:83:cd:b6:03:27:cc:eb:89:13:e6:
         07:ae:14:9b:4e:9b:af:b5:05:c6:5d:0f:fc:6d:d7:81:fb:31:
         39:08:66:4e:71:06:b7:e4:f7:f8:5d:11:83:62:af:eb:ab:b2:
         b9:c9:10:05:b3:54:2c:f9:3b:4c:53:fa:32:08:4e:df:67:b9:
         40:82:7d:77:ac:3d:79:d2:f5:e3:91:8d:d6:c3:a2:40:1a:89:
         2a:72:8d:a9
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUJgVWd15+/ZoXBvS6lJokklQUwAswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjQwNzMxMTUzMzM3WhcNMjUwNzMwMTUzODM3
WjAzMTEwLwYDVQQDEyg3RDI1NzM0MzA2MUIwNUM1MDI0NDVFREZBNkY4MkY1Njgy
NzVCMkEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWQ5SilQQFF8
iLOnOewGLjUIK5ox96+c/Mun0HMYo0Rv4zCnPJW2LC2gGZGTQmsnyu4j8U9OB1cm
zX35mj0588XHEfZ/hdo5mcPvQd2WHxR4cXbMxr2UhOl4ZhYhxanOKm4XjWg+1Iz6
y7TIONXUFtA5d8KGfAoem5E7DXm6dL0qFKN6cN/3tiGozVWA0sZ6BEfW9tAuX0OO
QIt0SxkoqDeZqBGKIvMOh/wzB50rWsBWaGDmxE7w8OCfEk86nQ/uwSnGRA4wAuWW
l4ohIEnN2BBJxacUha3Q1EF2mZC8nL3Y00DBGpxpEds2pby77AlFInfKPxih/LjZ
LYV0adJw9wIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFH0lc0MGGwXFAkRe36b4L1aC
dbKgMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez
NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczNTM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
BTpAAAUwDQYJKoZIhvcNAQELBQADggEBAGCqz/1eCEN/i8xqKB2mcGOOsWZgJNaw
1gSoeyTfl+y5bN4amd5Izd5LotOP7YD6gUit18DK0BaBD7v20WgEUt//4oG/QrQi
h2c4vxUozQyPEzWcQUU5nZHXMNzL8Hx2X1afF3Yp3S+QBYucyIbbgHKwylAQeSBc
cAkdPOyzX1xRs6r3bzCnIkqyeWyiNMqIwGHxNEZiqJkyuW8q0rHpY/kVxkMHe624
v6wNg822AyfM64kT5geuFJtOm6+1BcZdD/xt14H7MTkIZk5xBrfk9/hdEYNir+ur
srnJEAWzVCz5O0xT+jIITt9nuUCCfXesPXnS9eORjdbDokAaiSpyjak=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org