Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e2036323333.roa
File:                     3130342e3234352e382e302f32312d3234203d3e2036323333.roa (raw, json)
Hash identifier:          LWed9Rzs/E3FpbUuUHuGcznFEfyy/hMHuF8qh8yj/Jk=
Subject key identifier:   3E:FA:F9:CE:33:3D:7E:4B:69:48:C9:AF:33:F0:12:D9:98:D9:B5:DB
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       1567F2A3E210AF56DB106983EF569F50F958D61F
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:24 +0000
ROA not before:           Sat 14 Sep 2024 01:17:24 +0000
ROA not after:            Sat 13 Sep 2025 01:22:24 +0000
asID:                     6233
IP address blocks:        104.245.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:67:f2:a3:e2:10:af:56:db:10:69:83:ef:56:9f:50:f9:58:d6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:24 2024 GMT
            Not After : Sep 13 01:22:24 2025 GMT
        Subject: CN=3EFAF9CE333D7E4B6948C9AF33F012D998D9B5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:a0:1e:48:5e:94:00:3a:d6:56:25:9c:15:
                    64:fb:fc:8c:24:80:68:13:d3:0a:e1:4c:9f:86:a6:
                    15:54:c1:e3:62:e2:57:1a:99:38:37:22:7e:79:f1:
                    0e:9b:70:e1:b5:5b:22:74:a2:68:82:42:35:5f:ed:
                    a8:e3:20:0e:b0:be:8d:a4:03:42:e9:fa:fc:47:d1:
                    76:38:9e:27:3e:28:75:a6:d0:2a:f7:f4:66:7b:1e:
                    3a:19:02:76:4c:f5:dd:a0:e8:e3:c8:cb:c8:aa:4a:
                    15:b6:f5:8e:ef:55:16:50:f0:a5:84:e2:f3:17:51:
                    57:fd:e5:f7:ad:9a:b9:05:0f:ac:35:37:5f:30:79:
                    c4:b3:d8:70:5b:e6:c9:30:29:fd:8c:bc:1f:33:3f:
                    41:94:76:e8:d8:10:70:41:16:97:1a:b8:22:a7:35:
                    ea:b0:68:98:4e:08:ff:7a:f5:82:98:be:0b:f3:1e:
                    45:b2:1d:02:b6:b5:8d:f1:cc:e1:2d:c5:e1:32:46:
                    4e:63:36:75:0f:ef:5e:33:47:54:07:5d:90:c7:82:
                    fd:16:c9:33:2c:d0:12:c9:88:9b:21:75:9f:27:62:
                    0b:9d:fe:3f:bc:83:61:6a:3f:c2:ca:87:bb:a9:6a:
                    e4:9d:51:f8:fe:2b:bb:62:ed:2f:83:47:0f:3b:23:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FA:F9:CE:33:3D:7E:4B:69:48:C9:AF:33:F0:12:D9:98:D9:B5:DB
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:26:7f:10:5d:1a:46:53:d8:66:4f:aa:f2:22:14:24:98:d8:
         32:e1:a4:61:9b:ae:7b:94:08:65:d3:26:12:40:e8:14:44:ed:
         de:74:e2:79:95:ab:0f:80:dc:ea:06:ad:53:73:f4:9c:17:46:
         90:49:4a:24:0b:92:88:13:45:6f:55:06:2b:d7:73:2a:a3:9d:
         4d:12:7e:b4:03:48:08:11:9c:a4:5c:d6:6e:4d:9f:fa:fc:1b:
         e7:88:42:a8:91:17:f2:81:49:09:a6:86:8d:04:1a:36:ec:2e:
         f8:94:c3:05:0d:0e:f0:6b:01:48:e8:73:c0:1c:4b:fe:ca:69:
         21:2f:af:2c:01:24:78:62:c3:d5:da:d3:1a:e2:e3:6e:3c:d3:
         89:f3:e6:6e:21:62:a3:72:ff:c1:22:7a:c2:a4:58:db:6a:56:
         7d:77:7d:da:6d:e0:a4:24:de:99:32:aa:c0:fb:ee:94:e9:ca:
         5c:81:28:d2:e7:fe:65:4b:38:bb:b2:96:6b:5e:9c:f5:4c:67:
         1e:5f:66:c4:73:03:6c:3e:5d:7e:14:a4:39:55:a9:a7:9e:09:
         af:1c:55:24:3a:e1:cb:ce:2e:43:de:5c:da:78:39:74:db:90:
         fe:dc:34:ea:d0:0f:b0:a8:10:02:9f:bc:65:98:bb:4d:df:ad:
         3f:85:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:23 2024 by rpki-client on console-ams.rpki-client.org