Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e2036323333.roa
File:                     3130342e3234352e382e302f32312d3234203d3e2036323333.roa (raw, json)
Hash identifier:          4nNkLEEwcY4zN5lQD5QS1eQYQKvH1vC4tWSe76/ySGE=
Subject key identifier:   1B:88:A5:AD:32:CC:22:38:F5:E1:7E:9E:AE:58:F2:C0:F8:AA:FC:4B
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       31715038ADFD6BAEF7DA524A5067063DECA26122
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e2036323333.roa
Signing time:             Thu 12 Oct 2023 16:10:38 +0000
ROA not before:           Thu 12 Oct 2023 16:05:38 +0000
ROA not after:            Thu 10 Oct 2024 16:10:38 +0000
asID:                     6233
IP address blocks:        104.245.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 00:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:71:50:38:ad:fd:6b:ae:f7:da:52:4a:50:67:06:3d:ec:a2:61:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:38 2023 GMT
            Not After : Oct 10 16:10:38 2024 GMT
        Subject: CN=1B88A5AD32CC2238F5E17E9EAE58F2C0F8AAFC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:7c:df:ae:89:48:16:37:0f:c0:cf:c7:04:
                    48:25:f9:6a:07:22:ef:ba:2d:88:1f:bd:f8:c4:80:
                    b9:37:ad:96:fc:0a:cf:71:aa:8f:cf:65:52:4b:35:
                    69:a4:60:30:dc:55:d5:ac:18:14:e8:d7:2f:11:04:
                    30:5b:10:21:49:85:44:1e:36:ae:cc:d1:fc:e4:02:
                    c1:2b:46:d4:41:f0:75:11:cb:29:e8:2f:28:54:66:
                    53:fc:03:00:75:19:b1:4d:5c:f2:a9:08:b0:72:ef:
                    73:c3:6f:05:2c:dc:86:d4:74:0d:0f:9a:1c:b6:6d:
                    80:1f:d5:70:23:2e:78:9a:84:e2:68:19:5f:94:a7:
                    a0:06:f6:7c:ef:40:ad:de:f7:4c:cd:90:45:b2:a3:
                    05:16:74:32:05:db:01:f4:f1:c0:23:22:2e:4d:47:
                    b3:ad:61:a3:4e:72:3a:02:b8:fa:17:9c:74:b1:de:
                    da:ee:7e:24:f1:8f:5f:a1:d5:bb:ce:d6:44:79:19:
                    76:bb:80:55:c6:9e:59:fe:54:2b:1e:89:cc:e4:c0:
                    9b:70:b1:f6:bc:54:a5:24:e3:ba:da:a0:07:19:75:
                    3e:e3:ff:e8:2e:42:79:c2:51:da:00:38:c7:ce:d6:
                    10:27:67:a0:d6:fe:f1:88:76:cf:b2:d3:ce:73:c5:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:A5:AD:32:CC:22:38:F5:E1:7E:9E:AE:58:F2:C0:F8:AA:FC:4B
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:6c:ca:67:10:73:5f:3d:6f:76:a3:db:3c:16:ef:6b:3c:
         c8:59:bd:ea:6b:db:19:31:03:f7:b6:a3:9c:0f:d4:63:f8:24:
         f3:8f:9f:a5:4a:b8:e5:76:48:54:b9:5a:1e:5d:ad:ab:95:b9:
         a8:12:5c:44:3e:96:f8:41:db:a5:f0:02:b0:0a:f0:ce:a6:7b:
         94:bb:67:97:5a:6f:b0:5b:3a:ce:40:4c:b5:15:fa:7b:da:35:
         84:76:7d:86:01:a4:fe:3c:b2:2f:8d:f5:36:8b:ee:e4:7e:15:
         bf:55:c6:92:76:33:2a:87:db:bf:c0:e9:e4:56:b1:54:d3:e3:
         52:42:af:ca:21:e8:3e:a1:7f:72:c0:3b:d3:c4:cb:c4:b3:0e:
         19:0f:39:7f:3b:db:87:f4:61:fe:ac:ff:cf:ee:27:c2:a9:50:
         67:ad:ff:58:57:19:4c:06:66:47:37:db:cf:7f:ac:8a:a9:ef:
         44:54:4d:c1:50:aa:2e:a3:fd:4d:24:18:07:02:6a:a4:74:df:
         32:a5:e0:04:30:f1:25:95:40:b9:af:c0:2a:ff:4f:45:bc:20:
         47:d9:e1:60:98:c0:d6:b2:1e:11:d8:65:d6:e8:bb:3e:89:eb:
         6a:05:e0:7b:d7:81:cb:de:d8:a1:09:44:dc:8c:ed:eb:fd:fd:
         08:69:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:18:50 2024 by rpki-client on console-ams.rpki-client.org