Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa
File:                     3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          8QFGxo0ziOX84hkhYcQL2uBAbpvLPoPY71QwOCLSfSQ=
Subject key identifier:   23:BF:DA:56:CC:56:0C:8B:FC:2F:2B:CF:0F:C8:D7:00:A6:74:9E:48
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       704A56B06FCCEF946414DF923FBDE0D92956CC92
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:25 +0000
ROA not before:           Sat 14 Sep 2024 01:17:25 +0000
ROA not after:            Sat 13 Sep 2025 01:22:25 +0000
asID:                     6233
IP address blocks:        104.245.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4a:56:b0:6f:cc:ef:94:64:14:df:92:3f:bd:e0:d9:29:56:cc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:25 2024 GMT
            Not After : Sep 13 01:22:25 2025 GMT
        Subject: CN=23BFDA56CC560C8BFC2F2BCF0FC8D700A6749E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:d0:47:ca:d2:d6:91:eb:34:b0:28:8e:d3:
                    bf:38:71:5d:1a:84:73:44:cb:83:73:0c:9c:e6:a8:
                    dd:e8:6d:58:86:e3:2e:ac:b3:67:47:f2:37:9a:e0:
                    61:01:7a:b5:08:85:4e:6b:03:b8:7f:76:b9:ab:31:
                    24:76:8e:5d:f8:2d:f9:87:86:d4:18:53:ea:c6:fe:
                    af:3f:08:67:e0:24:88:5a:6b:13:fd:6f:a6:3c:11:
                    bc:31:2f:aa:79:00:b1:95:11:6c:cd:17:dd:26:b1:
                    92:68:e4:2b:e8:0b:02:df:02:22:d4:6e:4b:63:4f:
                    7a:55:53:73:93:cf:47:0c:6e:6b:e1:54:83:c8:63:
                    52:c7:1e:ad:c8:e5:59:bc:e1:1a:00:76:be:ed:d9:
                    5f:77:8f:97:07:a5:e5:1a:e4:fa:91:9c:a6:25:f4:
                    d8:a5:24:f0:b0:1b:bc:2a:00:18:99:f0:db:82:2e:
                    79:a2:b6:30:22:fe:74:5e:d3:88:89:d7:92:fa:f8:
                    8d:95:49:1e:dd:57:01:d3:a1:21:0c:ed:ff:e1:98:
                    1e:ae:13:0e:ed:01:6f:cf:7d:f2:86:3c:20:40:11:
                    fc:48:28:62:4b:7c:be:df:23:9d:86:04:bc:0e:95:
                    a7:72:1b:3f:d1:e8:f2:63:55:ed:1a:2d:1f:5f:56:
                    df:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BF:DA:56:CC:56:0C:8B:FC:2F:2B:CF:0F:C8:D7:00:A6:74:9E:48
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:81:12:58:32:bb:8b:00:8e:4d:7f:7b:88:ed:f7:39:f7:72:
         9c:cb:db:28:f9:73:49:9c:c8:a2:b0:77:fd:55:3e:46:9f:23:
         ba:5c:0c:37:05:55:4b:a2:7b:1d:04:88:6e:1b:58:8a:d1:29:
         45:15:8d:bb:88:d5:23:91:25:d5:41:35:ac:59:68:09:f6:b5:
         ea:66:56:c0:68:dd:1d:bf:d8:68:b4:d3:84:5d:7b:e5:5f:54:
         06:70:88:bf:79:a5:a2:f9:94:89:ef:a1:50:a0:74:c0:2d:74:
         75:1b:70:59:10:6a:68:15:08:db:de:4b:cc:78:e7:2e:e8:7a:
         39:b9:2f:27:a5:a8:ac:bc:35:a6:ef:05:e2:4c:01:b4:3f:af:
         41:76:ba:36:a5:ad:7c:a6:3d:1a:08:40:27:22:db:35:e0:49:
         24:88:b4:75:da:4d:44:42:5a:bf:4b:cb:3a:ae:a0:1f:c4:5d:
         ec:ad:a0:35:11:93:9a:25:d0:90:a9:e6:e2:56:17:18:cd:82:
         02:b4:40:4a:51:17:6f:a7:3d:07:1d:d2:d9:a7:80:1f:85:16:
         e9:60:30:d4:c2:3c:fb:0c:15:c4:83:48:46:86:95:be:5e:57:
         1d:50:76:2a:63:5b:2c:fb:08:9a:06:0a:a4:df:c1:56:81:51:
         e8:28:98:f0
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUcEpWsG/M75RkFN+SP73g2SlWzJIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjQwOTE0MDExNzI1WhcNMjUwOTEzMDEyMjI1
WjAzMTEwLwYDVQQDEygyM0JGREE1NkNDNTYwQzhCRkMyRjJCQ0YwRkM4RDcwMEE2
NzQ5RTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp77QR8rS1pHr
NLAojtO/OHFdGoRzRMuDcwyc5qjd6G1YhuMurLNnR/I3muBhAXq1CIVOawO4f3a5
qzEkdo5d+C35h4bUGFPqxv6vPwhn4CSIWmsT/W+mPBG8MS+qeQCxlRFszRfdJrGS
aOQr6AsC3wIi1G5LY096VVNzk89HDG5r4VSDyGNSxx6tyOVZvOEaAHa+7dlfd4+X
B6XlGuT6kZymJfTYpSTwsBu8KgAYmfDbgi55orYwIv50XtOIideS+viNlUke3VcB
06EhDO3/4ZgerhMO7QFvz33yhjwgQBH8SChiS3y+3yOdhgS8DpWnchs/0ejyY1Xt
Gi0fX1bfAQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFCO/2lbMVgyL/C8rzw/I1wCm
dJ5IMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTMxMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGj1CzAN
BgkqhkiG9w0BAQsFAAOCAQEAaYESWDK7iwCOTX97iO33OfdynMvbKPlzSZzIorB3
/VU+Rp8julwMNwVVS6J7HQSIbhtYitEpRRWNu4jVI5El1UE1rFloCfa16mZWwGjd
Hb/YaLTThF175V9UBnCIv3mlovmUie+hUKB0wC10dRtwWRBqaBUI295LzHjnLuh6
ObkvJ6WorLw1pu8F4kwBtD+vQXa6NqWtfKY9GghAJyLbNeBJJIi0ddpNREJav0vL
Oq6gH8Rd7K2gNRGTmiXQkKnm4lYXGM2CArRASlEXb6c9Bx3S2aeAH4UW6WAw1MI8
+wwVxINIRoaVvl5XHVB2KmNbLPsImgYKpN/BVoFR6CiY8A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org