Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31342e302f32342d3234203d3e2036323333.roa
File:                     3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          wBOqtkvpiOecj4e9IalrDt/1tgnOJOarTPyacCkkRqQ=
Subject key identifier:   51:B7:BA:D6:BA:0F:1B:A7:6F:22:BE:70:66:49:72:63:18:E2:81:99
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       5B17C68C23025366A82EBE1D0F0F26CAA3F0A521
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31342e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:26 +0000
ROA not before:           Sat 14 Sep 2024 01:17:26 +0000
ROA not after:            Sat 13 Sep 2025 01:22:26 +0000
asID:                     6233
IP address blocks:        104.245.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:17:c6:8c:23:02:53:66:a8:2e:be:1d:0f:0f:26:ca:a3:f0:a5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:26 2024 GMT
            Not After : Sep 13 01:22:26 2025 GMT
        Subject: CN=51B7BAD6BA0F1BA76F22BE706649726318E28199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:87:87:9d:ea:12:b9:d7:0c:5f:25:4f:f0:
                    e2:d6:b9:32:78:e4:fa:cd:35:9e:6a:fa:f7:51:08:
                    93:0b:58:e8:df:be:da:f7:90:5d:7a:97:f2:7f:14:
                    18:5e:9b:ff:9e:2c:3e:c4:e0:ff:37:3e:58:ba:13:
                    63:88:41:50:80:5d:f8:86:f1:e3:0b:de:21:31:19:
                    33:33:f6:28:6c:f9:02:4d:9c:78:81:72:22:47:02:
                    25:3b:9c:1d:b4:25:71:e0:6e:4d:a7:ce:f8:bc:08:
                    26:4a:ef:e6:51:33:72:d5:59:aa:e3:a7:b9:e2:ef:
                    07:9e:ac:96:5d:f3:18:81:d3:b8:98:37:6a:00:3e:
                    de:c1:42:0c:b4:c8:31:36:09:38:08:16:96:53:13:
                    f9:c5:8f:67:ad:1b:ff:4f:8a:13:d3:fe:cf:1c:3d:
                    16:b6:4d:58:29:14:81:71:a2:23:8d:13:1b:34:19:
                    4c:b5:0d:e5:a8:c0:e1:5e:85:d5:28:eb:a5:c9:26:
                    08:67:62:71:d7:85:eb:47:30:10:ef:ba:fa:8c:c0:
                    bc:ba:80:1a:b1:cf:6a:f2:86:70:d1:a1:cd:c8:5a:
                    f0:a8:b2:64:c3:62:8a:17:d3:24:84:2a:f0:a3:ba:
                    c9:32:5c:91:73:f7:51:fa:78:0b:3b:07:68:e6:87:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B7:BA:D6:BA:0F:1B:A7:6F:22:BE:70:66:49:72:63:18:E2:81:99
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31342e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:d5:bb:5b:c3:1c:35:fa:00:73:7c:7d:40:13:4e:fb:ff:
         83:d5:50:fc:69:39:14:73:e1:0c:bb:b4:e1:62:3f:33:d4:6e:
         a8:f9:ab:4b:c8:4d:8a:fa:8a:e0:35:6d:a4:cf:7f:6e:7d:a7:
         d3:03:8e:b2:03:a9:fd:3a:0f:c2:dd:a2:6c:0e:62:56:fc:6c:
         f0:ec:1a:39:13:9c:3e:27:ee:d2:b4:19:f8:78:28:b7:ca:67:
         3c:7c:31:5d:6f:4d:2e:f2:be:f8:3f:1c:97:15:ee:d2:f2:49:
         8b:42:94:d8:19:c9:8f:79:9c:47:87:e6:eb:cb:b1:e3:b3:10:
         f0:f7:48:1a:ff:0f:98:42:fe:ab:99:44:89:2e:33:65:84:5c:
         38:eb:6a:79:e0:44:e6:00:4d:3d:e6:a1:13:fd:9e:65:10:51:
         1c:69:3b:d5:5a:e6:fa:d7:49:5f:2e:be:8f:77:c7:cb:bd:ce:
         d4:d1:2c:e4:c0:5e:6c:a3:93:0f:d1:e7:c7:21:6b:2f:57:3b:
         2d:ab:e7:5d:c3:66:9e:ed:1e:a2:7e:0d:0a:24:47:01:de:4f:
         b0:b0:a8:d5:ff:b5:24:cf:c8:a5:29:6e:5c:aa:d6:5e:61:7e:
         ab:e2:a0:a2:b1:f3:72:ef:b4:91:9a:db:56:37:f7:30:26:d1:
         b6:86:d8:13
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUWxfGjCMCU2aoLr4dDw8myqPwpSEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjQwOTE0MDExNzI2WhcNMjUwOTEzMDEyMjI2
WjAzMTEwLwYDVQQDEyg1MUI3QkFENkJBMEYxQkE3NkYyMkJFNzA2NjQ5NzI2MzE4
RTI4MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/WHh53qErnX
DF8lT/Di1rkyeOT6zTWeavr3UQiTC1jo377a95BdepfyfxQYXpv/niw+xOD/Nz5Y
uhNjiEFQgF34hvHjC94hMRkzM/YobPkCTZx4gXIiRwIlO5wdtCVx4G5Np874vAgm
Su/mUTNy1Vmq46e54u8HnqyWXfMYgdO4mDdqAD7ewUIMtMgxNgk4CBaWUxP5xY9n
rRv/T4oT0/7PHD0Wtk1YKRSBcaIjjRMbNBlMtQ3lqMDhXoXVKOulySYIZ2Jx14Xr
RzAQ77r6jMC8uoAasc9q8oZw0aHNyFrwqLJkw2KKF9MkhCrwo7rJMlyRc/dR+ngL
Owdo5ocFOQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFFG3uta6DxunbyK+cGZJcmMY
4oGZMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTMxMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGj1DjAN
BgkqhkiG9w0BAQsFAAOCAQEAo//Vu1vDHDX6AHN8fUATTvv/g9VQ/Gk5FHPhDLu0
4WI/M9RuqPmrS8hNivqK4DVtpM9/bn2n0wOOsgOp/ToPwt2ibA5iVvxs8OwaOROc
Pifu0rQZ+Hgot8pnPHwxXW9NLvK++D8clxXu0vJJi0KU2BnJj3mcR4fm68ux47MQ
8PdIGv8PmEL+q5lEiS4zZYRcOOtqeeBE5gBNPeahE/2eZRBRHGk71Vrm+tdJXy6+
j3fHy73O1NEs5MBebKOTD9HnxyFrL1c7LavnXcNmnu0eon4NCiRHAd5PsLCo1f+1
JM/IpSluXKrWXmF+q+KgorHzcu+0kZrbVjf3MCbRtobYEw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org