Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa
File:                     3130342e3234352e382e302f32312d3234203d3e20393439.roa (raw, json)
Hash identifier:          Y2G05ZpRZy+XHjY3+1HQbi6ierLHWuDYt+iwSA0RRCw=
Subject key identifier:   08:9B:DD:E5:9F:28:37:16:DB:E0:E1:E9:3F:DB:EF:B9:DF:30:DB:2B
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       29125252A4E83FF605466E399FCB5A3F5DA72A9B
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa
Signing time:             Thu 12 Oct 2023 16:10:39 +0000
ROA not before:           Thu 12 Oct 2023 16:05:39 +0000
ROA not after:            Thu 10 Oct 2024 16:10:39 +0000
asID:                     949
IP address blocks:        104.245.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 17:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:12:52:52:a4:e8:3f:f6:05:46:6e:39:9f:cb:5a:3f:5d:a7:2a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 12 16:05:39 2023 GMT
            Not After : Oct 10 16:10:39 2024 GMT
        Subject: CN=089BDDE59F283716DBE0E1E93FDBEFB9DF30DB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:fd:b9:56:e2:52:7c:9e:4d:d9:79:86:38:
                    6b:2e:9a:90:fc:ab:53:c7:eb:70:f3:d9:05:67:e9:
                    18:e1:03:3c:26:b8:84:bb:bf:82:c3:98:a0:5f:ba:
                    ab:88:61:e8:ab:f8:38:fc:82:fa:6d:fb:62:c6:41:
                    3a:26:64:37:c4:9e:c4:b8:d2:3c:46:32:de:79:5b:
                    e8:59:50:7e:36:ec:06:a4:a5:be:1a:27:38:58:5a:
                    b2:1b:76:e6:f1:be:a8:83:fa:6d:db:51:99:e1:06:
                    f1:8e:15:8e:7d:68:ac:6b:67:7b:a7:17:3c:97:2e:
                    f6:fd:f7:1e:a4:29:16:c2:91:35:b8:17:e9:fc:fe:
                    19:6f:d3:79:dd:10:48:10:73:e9:6e:90:0f:47:38:
                    1a:37:d2:b7:e1:2c:67:08:dc:fc:77:f0:09:bf:53:
                    38:7e:b4:c4:00:26:3f:d3:48:0c:da:98:8f:02:82:
                    83:bf:99:ff:f5:76:08:f7:af:33:a7:b5:22:c4:dc:
                    70:27:c6:ff:39:c4:9f:7f:2d:1f:10:28:4c:6a:cd:
                    67:06:72:20:07:8b:87:4e:78:f1:12:cc:44:7b:f6:
                    2e:ad:93:2e:0b:7b:b2:1b:82:44:d2:42:ec:cf:85:
                    8f:f8:34:ff:93:cc:41:60:cd:aa:04:82:72:73:93:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9B:DD:E5:9F:28:37:16:DB:E0:E1:E9:3F:DB:EF:B9:DF:30:DB:2B
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:04:40:2f:7a:ba:11:e0:71:69:0d:0d:63:f1:a2:e2:49:30:
         3b:6a:1c:74:60:55:a0:f3:f7:cf:75:25:18:5e:f0:0f:80:af:
         18:df:71:eb:00:01:8b:93:9b:a8:d6:2a:b0:be:2c:c3:8f:79:
         4d:a4:56:01:08:72:89:fc:4c:0c:cf:3d:c9:6e:ea:58:de:f7:
         3d:5e:18:e8:5d:a4:90:5c:f1:56:28:e1:bc:c4:8c:d2:95:4e:
         5e:32:d2:16:46:75:b5:be:6b:b7:3a:0f:39:93:0a:a0:ca:90:
         98:c4:ac:cb:38:1e:bd:b4:48:49:0f:66:c4:bf:64:77:ac:6a:
         6c:1f:78:dc:b3:3b:bb:5a:88:a7:53:07:87:50:3a:d1:a9:03:
         e9:dd:9b:9c:cc:d8:3c:5a:77:ac:70:9f:ba:96:00:30:77:5b:
         ed:9c:a6:84:4a:7e:b3:b4:2d:56:cc:0c:9c:ea:64:99:53:ea:
         cf:e0:dd:1d:d0:d0:5b:9a:48:ed:ea:67:e4:bb:82:55:ea:28:
         e3:f4:8d:58:97:dc:28:f8:e2:02:b6:43:e6:b7:a5:cc:db:b4:
         b3:01:4a:a5:fe:f7:c1:08:26:7a:39:9b:6c:4a:b9:e9:93:23:
         01:24:04:eb:4f:84:1d:99:d4:65:f9:3b:d7:2a:c7:ef:6b:45:
         c7:87:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:23:27 2024 by rpki-client on console-fra.rpki-client.org