Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2036323333.roa
File:                     323630343a653863303a3a2f33322d3438203d3e2036323333.roa (raw, json)
Hash identifier:          QrnHZykAkLaEYzc9j8o4DQEPsMhsr4WPYjqADvWGf40=
Subject key identifier:   49:B7:42:29:01:31:98:47:FC:F2:DD:DB:53:E5:C8:79:09:5A:1A:24
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       10BDC62403785A3348285745BB1D7B158EF94174
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:34 +0000
ROA not before:           Sat 14 Sep 2024 01:17:34 +0000
ROA not after:            Sat 13 Sep 2025 01:22:34 +0000
asID:                     6233
IP address blocks:        2604:e8c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bd:c6:24:03:78:5a:33:48:28:57:45:bb:1d:7b:15:8e:f9:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Sep 14 01:17:34 2024 GMT
            Not After : Sep 13 01:22:34 2025 GMT
        Subject: CN=49B7422901319847FCF2DDDB53E5C879095A1A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:4c:49:66:57:b1:e3:bb:23:c8:3a:0a:cb:
                    38:fe:8f:f9:8b:32:75:f3:eb:14:35:9e:b4:77:41:
                    6b:f5:ac:00:d1:61:12:00:5d:17:c6:33:b0:56:63:
                    de:04:0b:b7:43:f1:a9:99:c5:4e:5b:75:e4:3f:af:
                    94:15:32:2f:9e:84:19:f8:01:52:e0:48:47:ea:70:
                    25:f5:9a:4b:e7:11:0f:7a:d7:fc:98:77:d6:7d:68:
                    cb:25:df:76:d8:e0:0c:cf:49:f7:0c:bb:b8:5e:22:
                    62:4e:65:e4:9b:aa:de:3f:5c:7c:a9:ff:8a:4f:2e:
                    84:6a:96:c0:f9:66:15:b5:cc:08:fb:63:2e:c4:64:
                    20:f8:33:92:a6:ec:46:db:36:13:f9:43:0d:06:06:
                    3c:4c:81:5c:cd:7f:f5:50:e1:67:7d:da:34:21:1d:
                    f6:7c:17:ee:20:e6:23:f8:3e:f0:11:17:ff:87:9f:
                    55:f7:3f:e9:e2:c5:12:b3:2b:5e:e0:71:ce:db:6f:
                    4e:2f:33:4e:9c:79:fc:0e:15:c0:c3:1d:66:3e:3c:
                    76:01:ec:00:d5:73:24:8e:9e:60:41:75:49:6f:aa:
                    f8:01:d9:0e:7c:ca:59:a5:89:03:ee:fd:e6:07:eb:
                    2f:04:17:83:d1:a2:b5:a3:4e:de:12:d7:a1:25:ca:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B7:42:29:01:31:98:47:FC:F2:DD:DB:53:E5:C8:79:09:5A:1A:24
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:71:76:4a:7c:07:e4:4b:88:5d:f1:ce:7f:0a:da:34:b0:a6:
         12:3b:5d:55:a6:76:8a:24:53:ae:7c:ea:5c:12:c9:25:a9:de:
         69:ea:9a:f1:35:d2:c3:35:ac:d4:8f:74:0f:11:e1:06:2b:0a:
         20:f4:0d:de:a1:c0:6c:63:18:e5:d9:f3:d8:cd:33:93:57:7b:
         1f:c9:32:3f:bb:d5:74:08:66:a3:5c:81:f7:09:5c:87:23:b9:
         e0:11:09:c6:24:9b:61:29:47:47:5a:ff:36:8e:93:5d:1b:48:
         94:fe:45:e0:bc:ae:4a:24:3d:94:7e:b1:fa:e5:d1:e6:22:61:
         91:07:7f:ac:e0:12:47:a1:67:0b:9d:a5:11:e4:48:cd:c8:48:
         4d:f5:12:41:61:80:8c:3a:61:f4:f2:82:7b:94:ae:a1:d6:cc:
         69:20:0d:f2:2b:7e:c0:46:b1:83:c5:48:1e:27:f5:44:39:93:
         11:6c:7f:78:f2:03:0e:c9:95:f5:55:f1:61:92:ed:69:e9:b4:
         02:92:4a:d9:39:91:3b:40:5b:65:b5:a4:f8:47:ed:fa:40:b6:
         96:af:59:1d:b8:b7:0f:42:ca:a2:6a:52:24:d2:cb:6b:9d:99:
         cd:48:b5:68:c3:08:f2:73:5a:71:e5:25:88:9d:8e:da:98:38:
         94:3c:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:28 2024 by rpki-client on console-ams.rpki-client.org