Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/32332e3134322e3232342e302f32342d3234203d3e2036323333.roa
File:                     32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          s3Qd6QYfZyPsKMKHxXE+bYRSLAPZDVcjPG+u+09d/7Q=
Subject key identifier:   1C:30:8D:AF:04:D6:21:CC:F6:DF:2C:E5:06:B8:56:3D:BE:EC:2C:00
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       4C41F34121DB6BE84ED887800BA47CE6530F4E4A
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/32332e3134322e3232342e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:34 +0000
ROA not before:           Sat 14 Sep 2024 01:17:34 +0000
ROA not after:            Sat 13 Sep 2025 01:22:34 +0000
asID:                     6233
IP address blocks:        23.142.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:41:f3:41:21:db:6b:e8:4e:d8:87:80:0b:a4:7c:e6:53:0f:4e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Sep 14 01:17:34 2024 GMT
            Not After : Sep 13 01:22:34 2025 GMT
        Subject: CN=1C308DAF04D621CCF6DF2CE506B8563DBEEC2C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f7:40:29:0d:22:cb:18:da:83:b0:bf:4b:c4:
                    8c:1d:f7:55:e4:47:70:a2:a9:e3:ff:c7:a6:35:b4:
                    fe:f1:1c:b1:61:5d:65:4d:38:4b:f9:a8:6c:58:f9:
                    ec:26:08:55:45:c4:b0:f7:db:fe:4b:2a:11:f4:13:
                    5c:de:e3:7b:67:dc:85:56:f8:0d:04:6b:7a:aa:42:
                    65:c7:e0:5f:ef:53:03:4f:b1:da:52:9b:46:ba:0c:
                    fb:96:e6:c7:e8:b3:ee:d5:eb:cb:b4:8a:ea:a1:47:
                    b5:da:26:ab:a4:46:f7:d0:a6:ba:78:2c:dc:0a:ba:
                    ac:e8:29:9a:b1:26:4a:50:23:49:04:f1:4a:ea:dc:
                    48:a5:4a:48:13:39:04:ce:bc:81:25:19:7c:23:fb:
                    ef:fa:5d:8d:15:76:9d:fc:26:21:48:bf:e7:74:e0:
                    95:13:5e:ff:ca:8f:33:41:01:d4:c3:22:1c:b3:7d:
                    df:48:29:77:3b:64:79:af:78:6a:02:fa:e6:ce:22:
                    eb:b4:c5:b4:79:48:2d:b4:4a:df:fb:01:b6:a4:1d:
                    f0:df:6a:de:15:e6:c0:95:4e:fa:77:3a:f8:6b:c0:
                    7d:5f:70:4b:e0:55:aa:1c:49:c4:49:2f:e2:0b:a4:
                    83:5e:05:99:a6:3c:a9:7d:5f:e5:93:6d:38:74:06:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:30:8D:AF:04:D6:21:CC:F6:DF:2C:E5:06:B8:56:3D:BE:EC:2C:00
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/32332e3134322e3232342e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:0b:c9:79:8e:97:9f:5f:b5:6d:82:5a:ff:43:d7:ea:54:
         b0:39:e4:10:9b:78:81:31:c1:9a:21:02:a2:ac:23:94:d1:06:
         d5:da:b3:f3:16:cd:45:fe:6a:b4:51:88:73:88:9a:aa:e0:45:
         01:fc:73:b6:2f:b7:71:e3:f1:10:56:c4:b0:7e:42:f4:b4:f6:
         96:c0:a2:92:d1:8e:4d:ac:56:5a:be:a7:a5:b4:1f:18:59:23:
         0d:d5:d0:b2:3c:b7:7c:38:0b:26:b0:c5:d1:7a:e6:98:44:b5:
         ab:f7:36:33:0c:ba:4f:61:42:0c:67:7f:99:f0:fe:c4:8c:48:
         27:9d:55:b6:c9:89:21:f4:bf:e5:98:0c:c2:fe:93:4f:ae:13:
         8d:c2:eb:ca:89:4a:44:36:3e:af:9d:07:cb:ca:83:4c:22:35:
         95:32:a7:8b:e0:4a:bd:49:e0:8f:81:77:19:24:03:c5:fc:ca:
         7c:69:ca:08:53:21:19:af:17:ea:15:f4:ad:ea:2a:d9:06:68:
         a7:b7:c5:49:c2:19:c1:7e:20:ab:2c:08:a8:65:68:7d:03:d1:
         b8:c8:8f:8c:a7:24:b3:3b:a9:ba:5a:bd:11:bd:5e:db:fa:d8:
         c6:7a:d8:4c:e4:55:d8:90:ac:35:a9:c3:1c:dd:03:78:a9:fd:
         ba:7b:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:48 2024 by rpki-client on console-fra.rpki-client.org