Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa
File:                     3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (raw, json)
Hash identifier:          Zp2dLdflPopZRz2wCBvQ323kQWGGkQirp3/oJFp4gtE=
Subject key identifier:   6F:2F:AF:F4:F9:BC:57:C5:20:5E:A8:3C:C0:C7:7B:B3:4F:A9:AB:F8
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       3D226B9C5484F56B960A2554D27AEA65F02F8387
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:26 +0000
ROA not before:           Sat 14 Sep 2024 01:17:26 +0000
ROA not after:            Sat 13 Sep 2025 01:22:26 +0000
asID:                     6233
IP address blocks:        142.147.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:22:6b:9c:54:84:f5:6b:96:0a:25:54:d2:7a:ea:65:f0:2f:83:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:26 2024 GMT
            Not After : Sep 13 01:22:26 2025 GMT
        Subject: CN=6F2FAFF4F9BC57C5205EA83CC0C77BB34FA9ABF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:20:26:ac:a3:de:2a:6f:5d:df:b9:65:b4:
                    6e:f0:80:bc:12:69:0c:3a:ec:ea:fe:0e:f9:ba:d6:
                    32:f1:12:5f:7c:52:74:6b:35:2e:52:6d:97:24:92:
                    0d:ed:98:e4:c8:1d:28:60:46:9d:4f:5b:30:c9:2c:
                    c2:74:02:b2:74:f5:8c:d5:c4:f7:f8:bc:af:56:2a:
                    c5:d6:f8:11:53:0c:3a:90:ea:f7:5f:3e:3e:c1:b3:
                    d5:72:ff:2c:e9:33:1c:77:c8:cf:76:96:67:23:1a:
                    3d:7c:d0:81:0f:08:cb:ea:f3:ff:0a:bd:74:39:5e:
                    18:aa:17:e9:5b:43:06:44:c9:23:b6:a0:c9:59:58:
                    45:08:af:5a:57:25:90:15:d7:2f:31:7e:1a:d4:8d:
                    71:b2:83:5a:60:e0:56:87:3a:34:5b:3f:3a:a7:a6:
                    4e:cb:3a:3e:6d:9b:fb:d0:76:8a:9d:b4:6a:04:50:
                    70:ea:6a:42:5d:77:2d:3e:c5:5b:61:d5:bf:84:e8:
                    ec:fe:80:ab:ac:12:76:d0:f9:bb:5a:5a:cc:ab:2a:
                    d0:2c:23:90:c6:b3:f3:4c:bd:ca:58:63:1f:3e:47:
                    45:8a:0c:42:c4:83:d8:4f:f7:97:43:fa:f1:a3:18:
                    63:ee:70:aa:d9:a7:8f:42:fc:14:40:ba:35:9b:9e:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:AF:F4:F9:BC:57:C5:20:5E:A8:3C:C0:C7:7B:B3:4F:A9:AB:F8
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:51:07:8b:ee:06:0d:d9:24:83:21:3c:4e:89:a4:2f:b6:d3:
         24:d8:09:cb:07:37:8b:d4:fb:f2:6c:40:4f:2b:02:04:ba:ed:
         c0:7d:7e:fe:76:ee:bd:76:d0:21:51:6f:88:eb:22:da:16:1f:
         d9:e9:3b:79:56:56:0d:c6:af:2c:89:17:68:92:1c:bb:8c:6d:
         71:8d:32:de:69:78:5b:e3:53:d5:5b:a1:53:69:91:24:62:ad:
         11:f8:37:e4:ae:04:80:48:d3:39:f6:11:6e:3d:38:95:56:83:
         49:43:a6:dc:cb:e7:b0:02:44:5f:a1:73:67:f9:06:d3:85:34:
         0a:f8:55:bd:37:6e:66:c5:68:bc:b8:94:ff:a1:40:c2:7b:15:
         00:3b:2b:1d:b9:ed:cf:9b:0e:cd:8e:3c:38:09:38:9e:cb:99:
         ec:c9:89:d7:93:ae:66:43:5a:0f:2a:8a:8c:c7:ee:36:05:9c:
         b7:95:33:e1:bc:82:b0:cd:05:36:e6:d7:2c:df:bd:24:f1:00:
         7c:c4:d5:23:0c:21:a9:97:b6:42:e1:d4:f1:40:bb:be:da:10:
         b3:2a:8f:f2:30:5c:13:28:3e:b6:51:ab:c2:3b:82:71:2c:2c:
         7c:82:45:bf:ec:44:98:00:78:16:85:93:8b:ea:1d:fa:07:8a:
         47:27:df:f1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPSJrnFSE9WuWCiVU0nrqZfAvg4cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjQwOTE0MDExNzI2WhcNMjUwOTEzMDEyMjI2
WjAzMTEwLwYDVQQDEyg2RjJGQUZGNEY5QkM1N0M1MjA1RUE4M0NDMEM3N0JCMzRG
QTlBQkY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK4gJqyj3ipv
Xd+5ZbRu8IC8EmkMOuzq/g75utYy8RJffFJ0azUuUm2XJJIN7ZjkyB0oYEadT1sw
ySzCdAKydPWM1cT3+LyvVirF1vgRUww6kOr3Xz4+wbPVcv8s6TMcd8jPdpZnIxo9
fNCBDwjL6vP/Cr10OV4YqhfpW0MGRMkjtqDJWVhFCK9aVyWQFdcvMX4a1I1xsoNa
YOBWhzo0Wz86p6ZOyzo+bZv70HaKnbRqBFBw6mpCXXctPsVbYdW/hOjs/oCrrBJ2
0Pm7WlrMqyrQLCOQxrPzTL3KWGMfPkdFigxCxIPYT/eXQ/rxoxhj7nCq2aePQvwU
QLo1m57ToQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFG8vr/T5vFfFIF6oPMDHe7NP
qav4MB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM4Mzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA46TWDAN
BgkqhkiG9w0BAQsFAAOCAQEABFEHi+4GDdkkgyE8TomkL7bTJNgJywc3i9T78mxA
TysCBLrtwH1+/nbuvXbQIVFviOsi2hYf2ek7eVZWDcavLIkXaJIcu4xtcY0y3ml4
W+NT1VuhU2mRJGKtEfg35K4EgEjTOfYRbj04lVaDSUOm3MvnsAJEX6FzZ/kG04U0
CvhVvTduZsVovLiU/6FAwnsVADsrHbntz5sOzY48OAk4nsuZ7MmJ15OuZkNaDyqK
jMfuNgWct5Uz4byCsM0FNubXLN+9JPEAfMTVIwwhqZe2QuHU8UC7vtoQsyqP8jBc
Eyg+tlGrwjuCcSwsfIJFv+xEmAB4FoWTi+od+geKRyff8Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org