Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa
File:                     3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          jHkaVLNAdW9lo8zt42tA5xcsgmOhm7V0BOVpGQA4ieo=
Subject key identifier:   E6:FA:CE:4F:A4:C8:DE:B6:EA:1D:B2:93:68:1C:C4:85:67:76:AE:61
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       5138C1B37878914AC40D317E54E01E3CE7A10CF8
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:24 +0000
ROA not before:           Sat 14 Sep 2024 01:17:24 +0000
ROA not after:            Sat 13 Sep 2025 01:22:24 +0000
asID:                     6233
IP address blocks:        142.147.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:38:c1:b3:78:78:91:4a:c4:0d:31:7e:54:e0:1e:3c:e7:a1:0c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:24 2024 GMT
            Not After : Sep 13 01:22:24 2025 GMT
        Subject: CN=E6FACE4FA4C8DEB6EA1DB293681CC4856776AE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:cf:4d:b0:e3:95:07:60:52:84:63:be:58:
                    df:e3:ad:29:85:6f:a7:1a:6a:5e:5b:c7:7c:ff:07:
                    68:f2:86:80:39:61:0b:4e:b1:92:47:73:25:e6:8e:
                    6a:d6:a3:a6:88:36:2a:af:f6:18:3c:ba:1c:c3:6b:
                    28:17:b4:f2:3d:1a:74:5a:e3:a8:56:c4:4b:a5:f4:
                    b5:a9:c7:2f:4c:cc:8b:26:6e:f4:cb:f4:9e:9b:d8:
                    c8:5f:09:75:5d:b1:8d:60:4a:ab:73:59:5b:5f:63:
                    85:43:11:a3:f9:a9:7a:6b:bb:90:ed:1d:1c:c0:9f:
                    5d:31:3c:44:7a:24:63:42:b7:da:10:ac:f8:c3:a9:
                    a4:11:98:97:55:ec:ee:69:79:ae:5a:e5:6b:d3:f7:
                    d9:42:29:4d:9e:f4:7b:7c:eb:51:a2:f6:94:d3:58:
                    ea:05:8e:8a:44:26:a9:c9:5b:01:76:1f:54:a5:03:
                    10:d2:d2:9a:ce:b5:67:e7:15:4d:a7:13:5c:a1:95:
                    d8:7f:80:33:40:3e:b4:6e:50:8b:69:66:b4:cf:b5:
                    44:bf:24:8e:b7:7c:86:e6:53:77:29:38:33:54:0b:
                    13:57:8f:1d:d4:75:3c:d9:7d:b1:0a:e3:67:27:82:
                    dd:74:0c:18:de:0c:c1:85:66:5b:e9:86:f1:66:df:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FA:CE:4F:A4:C8:DE:B6:EA:1D:B2:93:68:1C:C4:85:67:76:AE:61
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7f:94:a0:0c:ca:b1:19:05:38:bf:3b:bf:b8:b2:42:cd:de:
         69:e5:1a:e3:d8:0d:a6:18:8e:7d:0c:0b:89:4c:f6:93:ea:71:
         ef:94:16:75:32:8c:c2:c2:76:0c:c7:5c:2a:4b:e6:65:1e:f7:
         73:5c:90:d3:5f:c6:60:c6:79:3c:2f:55:d3:ab:86:2f:54:55:
         76:7b:37:43:3e:8a:31:90:6d:58:3b:89:84:6c:da:0f:4b:68:
         41:5f:26:fd:0a:82:f6:39:ae:0b:11:42:a4:d7:17:ab:d8:44:
         2f:a1:89:f8:e0:83:97:87:2b:1d:db:ac:01:80:62:96:bc:74:
         1b:18:da:c0:75:c3:d7:de:55:9c:ae:02:54:9c:0f:6c:d5:51:
         71:0d:d8:91:98:13:d3:c7:ef:3d:ac:5a:81:02:f7:4c:0b:0e:
         a3:cf:df:79:ee:23:6c:0f:ea:84:dd:04:b7:da:de:3a:16:b0:
         0c:82:05:79:26:24:32:4a:d9:ff:cc:0f:2c:c2:d7:6b:9a:0a:
         7f:ca:f0:52:b4:4e:bf:1a:a9:66:b7:3b:dd:85:71:2f:64:d5:
         76:c9:49:4e:b9:e3:7a:c0:9c:62:97:b3:2b:09:5e:5d:ca:8c:
         1a:b4:b7:18:62:4c:26:19:40:b7:f4:8b:63:cf:2b:55:db:72:
         e4:56:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org