Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa
File:                     323630353a336134303a3a2f33322d3438203d3e2036323333.roa (raw, json)
Hash identifier:          4g+6VO1Cd2gEN37w6RWPOxmdEghllFy5RcoM2rsoEYA=
Subject key identifier:   51:67:F4:FC:35:A5:76:69:54:A3:3B:6B:E1:46:91:F1:05:E4:52:AA
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       70A43513D56F33B01EA6144CC936B4FB5D100961
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:27 +0000
ROA not before:           Sat 14 Sep 2024 01:17:27 +0000
ROA not after:            Sat 13 Sep 2025 01:22:27 +0000
asID:                     6233
IP address blocks:        2605:3a40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a4:35:13:d5:6f:33:b0:1e:a6:14:4c:c9:36:b4:fb:5d:10:09:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Sep 14 01:17:27 2024 GMT
            Not After : Sep 13 01:22:27 2025 GMT
        Subject: CN=5167F4FC35A5766954A33B6BE14691F105E452AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:20:6f:f2:2f:60:4e:5b:a0:61:49:c0:09:
                    81:be:b4:b2:11:4d:8e:ae:a6:ea:9d:3f:66:93:cb:
                    f5:85:5f:35:77:33:0e:b1:ca:58:d8:41:d3:f9:b0:
                    b7:ba:e0:46:0c:2d:83:60:00:f0:70:f0:e3:09:bb:
                    ab:17:b3:f3:2c:14:13:64:9d:cc:97:67:14:83:5a:
                    b6:a8:a2:1d:62:59:a4:c0:9f:2c:4f:72:56:8b:ce:
                    18:1d:8d:65:13:fd:7a:7c:b2:ec:4f:09:52:0e:f7:
                    5d:c9:a3:a9:30:59:33:66:64:16:c7:e9:26:82:59:
                    05:a6:e6:fa:36:e0:d4:df:9f:58:71:c4:03:08:82:
                    b7:91:b6:92:cf:92:14:e2:e1:b2:59:90:79:b5:c2:
                    07:3f:07:ef:a2:3c:03:37:11:9b:63:e7:69:79:e2:
                    b6:a5:d5:8a:f4:53:03:ac:e0:ec:8f:8e:63:39:3b:
                    59:9a:30:a3:c0:7f:7e:e5:7f:ae:16:16:9a:7f:d7:
                    a1:af:da:20:9e:29:56:2b:67:db:04:13:24:74:91:
                    1e:fb:60:12:56:34:1e:8f:fd:a0:aa:57:dc:46:e4:
                    74:6b:5f:d7:b2:32:db:ed:5d:e3:68:39:dd:ac:27:
                    ba:63:49:85:f0:01:a3:7d:55:72:54:e0:35:3c:c3:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:F4:FC:35:A5:76:69:54:A3:3B:6B:E1:46:91:F1:05:E4:52:AA
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:fb:5e:f6:17:fa:99:b4:83:a6:1f:ba:86:f7:68:ee:b3:
         0c:13:cb:02:86:bc:c2:cb:2d:ed:3a:5d:42:99:7c:83:8c:95:
         7a:c1:a3:1c:58:13:b6:85:e1:33:f2:d4:77:9a:b4:cb:a9:de:
         9b:71:dc:b2:36:34:3e:ba:dd:aa:8d:c5:6b:79:a3:92:c2:39:
         6d:b4:d1:ff:cb:25:87:ac:ac:86:bf:6f:26:1a:2b:04:3a:55:
         5f:59:1b:a0:24:bb:30:fe:e0:cd:48:85:46:08:7f:08:df:b1:
         3c:c8:f6:d9:c5:ad:1f:ee:88:16:ae:b3:f0:7b:13:46:92:75:
         7e:69:cc:97:5a:4c:db:38:46:c7:2c:1e:72:dd:43:1b:51:d1:
         52:d1:f6:eb:5b:6d:35:b7:39:0d:2e:fd:f2:c4:1a:e8:4b:64:
         7e:65:ac:79:7c:80:3d:1f:31:20:01:a4:11:d3:d5:cf:8a:5b:
         3e:ea:41:ab:36:d1:27:74:7f:01:58:b3:ad:9b:d2:7f:3c:e3:
         8b:31:13:5c:c5:a3:d6:ab:1a:01:9f:04:2d:45:87:81:28:7e:
         1f:15:39:e3:c7:e1:5c:a8:de:d9:b0:61:e8:f7:d5:98:95:b0:
         f2:ab:98:fd:d2:64:c0:4d:7b:05:b8:34:65:77:fb:0e:4f:4a:
         22:63:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:00 2024 by rpki-client on console-ams.rpki-client.org