Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e20393439.roa
File:                     3134322e3134372e38382e302f32312d3234203d3e20393439.roa (raw, json)
Hash identifier:          0WYqo5igyKkDLhLeGNETpW87dUrlfRLrVabhhC6LhW4=
Subject key identifier:   BE:10:A7:E3:8A:21:3B:80:D4:8B:89:AF:89:B8:FE:8A:23:06:F1:7C
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       309123849EE8113807195EF5E666F5C598F840B9
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e20393439.roa
Signing time:             Sat 14 Sep 2024 01:22:25 +0000
ROA not before:           Sat 14 Sep 2024 01:17:25 +0000
ROA not after:            Sat 13 Sep 2025 01:22:25 +0000
asID:                     949
IP address blocks:        142.147.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:91:23:84:9e:e8:11:38:07:19:5e:f5:e6:66:f5:c5:98:f8:40:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:25 2024 GMT
            Not After : Sep 13 01:22:25 2025 GMT
        Subject: CN=BE10A7E38A213B80D48B89AF89B8FE8A2306F17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:3d:2b:c5:c9:65:79:34:c4:e2:47:8e:a6:
                    20:ac:26:94:31:97:e2:2d:28:56:b8:c9:1a:86:ca:
                    fc:ea:b9:5a:15:31:d5:7c:69:7b:4b:05:7e:80:69:
                    70:09:b8:a0:d5:a6:3e:c3:cd:b7:a6:da:b9:48:aa:
                    5d:2e:94:d1:f7:a8:e7:9b:77:e6:a1:5b:db:95:d8:
                    bc:f5:ec:69:56:ed:aa:30:0e:ef:e5:01:18:25:44:
                    b2:20:a4:17:96:d9:92:00:c5:c1:a1:99:f3:41:26:
                    cd:8e:13:16:58:6b:8d:52:f4:d3:e1:f5:c8:fb:f7:
                    d0:76:75:fb:70:2f:87:85:a9:88:fa:68:00:7e:52:
                    1c:77:ed:60:0d:c8:3d:b1:b3:49:b8:10:31:c2:f3:
                    71:63:e0:f1:25:ed:f1:03:28:ee:54:2d:d4:f6:9d:
                    d3:b0:82:f0:8d:d9:09:72:91:5e:01:af:c4:da:04:
                    6a:15:25:38:f4:ed:0d:22:3f:47:2d:54:25:68:0e:
                    13:63:fd:6f:88:37:dd:cf:e9:e3:70:6b:6c:3e:48:
                    53:40:1c:68:79:c4:3f:12:40:e8:b7:06:a9:eb:1f:
                    50:44:ab:8f:6f:bf:f6:b2:ef:82:84:67:af:29:d3:
                    60:3c:79:b8:34:98:0a:f7:4c:63:97:a7:d3:66:b7:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:10:A7:E3:8A:21:3B:80:D4:8B:89:AF:89:B8:FE:8A:23:06:F1:7C
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:59:e2:26:2e:3c:03:9a:dc:9e:a6:35:b4:e9:a2:1e:8d:9b:
         80:a4:82:af:a0:5e:c9:a9:26:5c:1d:95:ae:17:ed:6c:b2:2e:
         9a:d5:5e:2c:50:ab:ca:78:31:98:4b:ba:10:89:df:27:5a:65:
         28:b1:09:1a:1d:72:22:02:de:76:22:b6:6b:29:91:10:ee:8e:
         22:78:ec:ad:35:0b:cf:15:1b:eb:8f:b9:7e:05:f3:5d:8a:db:
         3f:eb:ee:cb:e1:67:15:b1:5b:4e:4a:51:3c:32:a4:bf:66:d7:
         84:f3:74:5e:af:b5:31:13:2e:98:91:d0:c8:9a:b4:9a:33:09:
         87:cd:95:b4:7b:97:3c:a5:bd:10:10:b5:df:6e:81:c4:fe:1f:
         7d:aa:4b:f3:dc:51:ef:2d:12:28:ee:d8:d1:96:fa:f5:88:a0:
         fe:99:2c:10:4b:a9:4d:ca:87:24:f0:47:c9:3a:08:23:40:56:
         66:e1:6c:24:4c:49:b8:d2:05:cb:e0:77:4b:29:cc:a5:39:92:
         80:36:85:08:b4:1b:b0:57:a5:64:c3:33:e0:2a:67:4b:b9:1a:
         04:b8:0c:94:5d:15:00:8c:4c:25:97:1e:36:fc:8b:26:8c:86:
         c9:3d:91:9f:6f:e3:e8:ca:f0:fe:3a:8a:4e:c4:63:9b:79:dc:
         87:2c:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:23 2024 by rpki-client on console-ams.rpki-client.org