Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
File:                     3130342e3234352e382e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier:          5bRZUpWmhIQUAhiN95HpRdn7fSN+Ft8oNPypKcjOs0Q=
Subject key identifier:   B1:55:83:50:60:D7:82:6A:FA:9B:C5:96:43:CB:23:DB:1A:6F:F5:F5
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       0EB35C2443B64FD9F9760567E0DEB4CBD575C08A
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
Signing time:             Sat 14 Sep 2024 01:22:25 +0000
ROA not before:           Sat 14 Sep 2024 01:17:25 +0000
ROA not after:            Sat 13 Sep 2025 01:22:25 +0000
asID:                     36351
IP address blocks:        104.245.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 03:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b3:5c:24:43:b6:4f:d9:f9:76:05:67:e0:de:b4:cb:d5:75:c0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:25 2024 GMT
            Not After : Sep 13 01:22:25 2025 GMT
        Subject: CN=B155835060D7826AFA9BC59643CB23DB1A6FF5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d7:8b:0c:f2:92:6c:36:bf:05:50:de:68:ea:
                    7d:56:7e:ee:62:d5:5b:78:ce:5a:ee:27:80:e4:7b:
                    23:e0:97:ae:cb:91:f5:b3:d7:32:06:ef:f4:eb:b8:
                    c4:2a:c1:94:c8:a3:17:ea:82:5f:89:44:1a:92:44:
                    96:8f:0c:78:9d:f4:9e:d1:66:94:f2:4c:1f:9d:02:
                    59:1f:2c:2e:fe:3e:bf:c0:b2:c6:a7:d1:28:87:be:
                    09:7f:36:a3:93:14:54:28:49:c4:b8:21:fe:d9:6f:
                    bd:f4:21:c5:45:db:5e:0d:a1:6d:5c:66:2f:bb:f2:
                    12:55:20:52:10:da:6a:6a:1c:e7:b9:78:8d:be:2e:
                    6d:8b:fe:df:76:72:56:61:31:db:f8:65:8c:94:8f:
                    de:20:15:c0:7a:d5:d0:aa:63:c2:cd:be:6d:48:00:
                    4d:e9:27:4e:8a:e3:ff:f3:4e:c6:94:47:0e:21:4a:
                    38:da:70:9c:74:3e:e2:39:1d:19:79:f6:56:6a:9e:
                    4b:27:3e:51:d9:9b:f1:b3:47:a6:1d:41:c0:2c:3e:
                    7d:2a:1d:d3:9a:88:c8:e5:43:67:cb:91:9d:47:2d:
                    2e:80:19:29:85:79:dc:18:2f:8c:83:d8:ab:fb:a7:
                    21:eb:d3:6e:e0:1e:68:4b:cd:9b:be:3d:7d:53:24:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:55:83:50:60:D7:82:6A:FA:9B:C5:96:43:CB:23:DB:1A:6F:F5:F5
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:27:6f:79:86:8c:a3:3e:4b:0b:b2:0d:22:a0:58:49:e6:51:
         f5:d9:1e:29:4b:22:05:5a:2e:95:3e:2d:1e:a7:77:ac:ed:61:
         79:45:0d:6a:df:43:79:b7:f4:c9:e5:c3:e7:1b:4a:c9:c7:eb:
         4a:62:1c:af:d5:32:54:9c:c3:95:68:4e:dc:ca:d1:ac:ab:c5:
         0d:7b:af:58:71:aa:3c:fb:01:4e:15:c4:81:f7:ec:69:ef:21:
         50:17:95:79:0e:f1:4e:55:3c:a2:5e:ce:c6:7a:05:1c:57:46:
         e5:dc:90:68:f3:e7:e2:fb:14:88:4a:92:e0:5d:82:e0:90:a7:
         b7:67:f8:ce:b6:13:06:b7:6f:40:da:50:e0:e8:ed:0d:85:4f:
         f9:7b:4d:b6:f4:97:ab:5e:b9:8e:dd:66:ab:1c:74:5b:64:11:
         90:c6:f7:d5:31:b7:ba:ad:f3:7e:34:07:ec:fc:66:6b:06:35:
         ee:43:c0:7e:ea:6a:b0:b1:fc:f6:84:9b:63:57:4a:c5:d1:a3:
         21:b5:64:3d:37:4a:94:fe:8d:72:99:8f:5f:d9:92:18:7d:58:
         78:49:42:41:89:58:1f:a8:09:1f:1b:3a:1a:58:82:e3:94:f9:
         08:22:90:a0:8b:15:20:cd:e2:68:61:a4:79:18:dc:26:9b:74:
         84:0b:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:20 2025 by rpki-client