Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa
File:                     323630353a336134303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          iySuG4v1i4l/MQebn1huEgPNIy7iRM8k6eHqxThxTKI=
Subject key identifier:   89:83:2C:01:5A:FC:68:06:1B:F7:38:B4:83:FF:EA:C7:E7:D9:EE:E3
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       5E48119F46D216A1452A4F3BC83C2A1FDF0FAB5B
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa
Signing time:             Thu 12 Oct 2023 16:10:32 +0000
ROA not before:           Thu 12 Oct 2023 16:05:32 +0000
ROA not after:            Thu 10 Oct 2024 16:10:32 +0000
asID:                     949
IP address blocks:        2605:3a40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 09:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:48:11:9f:46:d2:16:a1:45:2a:4f:3b:c8:3c:2a:1f:df:0f:ab:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Oct 12 16:05:32 2023 GMT
            Not After : Oct 10 16:10:32 2024 GMT
        Subject: CN=89832C015AFC68061BF738B483FFEAC7E7D9EEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:31:0f:07:57:9b:45:90:73:eb:c1:6c:37:
                    78:1e:f1:a6:be:61:cf:c5:11:78:ce:6d:a4:3d:a5:
                    8d:28:2a:3c:30:db:e8:6a:f1:e1:95:12:3a:ba:93:
                    59:59:3c:e7:40:e8:9b:d4:0b:d4:cd:2b:df:82:6f:
                    ff:07:2c:8f:2a:bd:be:77:75:87:cf:59:79:a9:93:
                    5c:4f:db:fb:8c:d9:14:57:22:08:7d:ae:34:9b:f2:
                    9d:e6:a1:eb:02:47:6e:84:59:30:53:7f:54:95:51:
                    66:b0:f7:75:95:69:c5:b3:f5:ef:37:fb:97:be:f4:
                    66:41:41:fc:3f:75:f7:bc:9b:3f:23:52:aa:23:16:
                    16:0e:59:4e:47:bf:60:8c:c9:81:9b:2b:b8:ae:ac:
                    15:42:2b:88:78:f9:63:00:4c:28:e5:29:fb:1a:24:
                    c1:cb:bd:9f:bf:09:75:25:82:b5:f2:2f:6a:0c:ee:
                    65:59:5f:19:bf:ba:fe:fd:96:41:7f:f2:9d:76:9e:
                    93:b6:42:30:de:0b:11:5b:fb:98:30:2a:39:27:39:
                    eb:89:71:d5:58:c2:a9:4f:22:69:49:38:30:c2:c2:
                    d2:b9:82:96:3e:98:8b:24:db:c6:5b:0a:98:00:88:
                    25:e5:9c:3b:1e:27:27:5c:af:11:d7:fc:0a:42:5d:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:83:2C:01:5A:FC:68:06:1B:F7:38:B4:83:FF:EA:C7:E7:D9:EE:E3
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:a7:4f:dd:9b:6b:32:98:77:24:34:ed:9f:bc:7c:8d:c8:4a:
         aa:58:96:d6:29:fa:90:38:40:45:dc:07:cb:a7:e2:04:d4:84:
         86:11:02:67:2b:47:5e:82:7f:79:a0:e1:cd:c5:5a:2f:19:e3:
         c3:e3:d9:3e:ad:87:f7:da:74:d5:9f:58:d4:45:6a:d0:8c:5c:
         50:c2:d9:05:9b:78:51:a5:87:1a:10:93:e5:a6:09:55:62:ee:
         23:63:dc:b5:e7:98:18:93:06:b6:eb:b7:d8:d7:b6:18:b2:5a:
         65:9e:97:3a:5d:72:34:71:4a:6e:b1:85:37:27:00:f1:0e:d4:
         fe:ba:f7:88:19:b4:01:e6:ad:9c:f8:a5:8f:cd:e1:67:7f:81:
         94:85:17:60:65:e2:6f:33:0c:ab:2c:ac:5b:5f:5d:61:4a:b7:
         fb:c0:11:03:e9:5b:a8:46:3e:9a:f4:8a:8a:69:53:6d:73:44:
         ac:aa:83:6f:19:c8:5a:96:af:4d:ee:7f:5d:6e:05:02:82:19:
         d8:ef:8a:d1:8e:0b:80:b9:19:ae:e2:fd:f1:7f:98:47:5c:23:
         47:e2:31:1e:60:2d:dc:c7:b8:ad:91:39:9b:ad:ce:fc:c7:a0:
         67:bb:47:c3:9a:1f:fb:33:87:b0:97:9a:31:c2:b5:9f:2b:ab:
         6d:56:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:31:21 2024 by rpki-client on console-fra.rpki-client.org