Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa
File:                     3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          rpG176mq+Hz0ATWW9+e61ZLrSrpzkMO/+wQlXX8v8ZU=
Subject key identifier:   C5:44:30:37:69:F0:35:A2:07:F0:27:48:9D:62:94:21:35:B6:62:B4
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       6D997D099919A28404E3D5B7EA56462F7A3D68EF
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:25 +0000
ROA not before:           Sat 14 Sep 2024 01:17:25 +0000
ROA not after:            Sat 13 Sep 2025 01:22:25 +0000
asID:                     6233
IP address blocks:        142.147.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:99:7d:09:99:19:a2:84:04:e3:d5:b7:ea:56:46:2f:7a:3d:68:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:25 2024 GMT
            Not After : Sep 13 01:22:25 2025 GMT
        Subject: CN=C544303769F035A207F027489D62942135B662B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:c6:b2:87:6a:52:f1:ca:e6:f9:45:84:9f:
                    14:9e:27:50:eb:5b:32:02:21:a8:32:1f:f6:64:08:
                    89:82:23:f2:47:b2:10:d1:32:c4:92:21:d4:ae:8f:
                    da:64:96:6b:c0:dd:14:ea:3e:6e:1f:f3:ab:39:60:
                    7f:26:6b:50:4e:c9:fb:9a:bd:e8:f9:0e:b1:87:13:
                    f2:0a:1f:91:fe:ad:01:be:b1:95:22:8c:90:d0:68:
                    f5:01:f0:c6:79:3f:d4:12:14:d0:1b:c8:d8:99:30:
                    86:ac:df:10:4a:b4:cb:da:7b:54:31:79:f7:a3:93:
                    d6:eb:b2:48:cc:35:13:77:24:00:52:11:76:a2:2e:
                    88:2f:83:fe:37:63:fe:ec:d5:3c:81:e0:74:36:ed:
                    72:d9:06:58:9b:42:63:e1:05:6b:93:b7:1b:a6:98:
                    c0:af:89:ce:54:a4:de:bd:b1:d5:a0:1d:e2:62:11:
                    cc:a2:78:0b:a5:d4:c4:44:79:9d:79:07:26:e3:59:
                    62:4c:5f:f2:9b:68:cd:a9:f5:fb:40:41:b2:68:44:
                    a0:db:0f:8d:08:ab:27:e5:9e:9f:bb:88:ce:c0:01:
                    be:62:54:bc:d9:d0:97:79:63:86:86:65:f7:b4:6d:
                    9f:7c:6f:fa:dd:dc:0f:a5:d2:78:3d:8c:a5:03:d3:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:44:30:37:69:F0:35:A2:07:F0:27:48:9D:62:94:21:35:B6:62:B4
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:9d:50:2c:db:2f:87:77:f0:15:87:d7:d9:22:f2:41:17:67:
         a8:f8:0a:3a:79:ae:54:6c:f4:be:08:bd:f8:b2:55:03:a4:40:
         7e:6c:f8:71:02:7b:e5:ff:84:8f:3e:5f:d0:a8:b3:5e:f6:27:
         77:e2:28:f1:0c:25:b9:7c:f6:45:7c:92:74:db:c1:61:f6:28:
         12:04:44:30:88:53:73:58:1a:e4:ce:15:f1:f7:25:e4:7c:e5:
         3a:4b:d9:36:03:5a:2f:4e:d6:95:da:b9:13:aa:19:85:67:00:
         7a:bd:7f:3d:01:68:1b:43:91:fb:ee:de:23:7a:c9:52:00:aa:
         33:38:75:5a:88:2d:09:0f:8c:6e:d0:2a:9d:2e:bd:74:42:4d:
         31:59:ed:52:85:f5:f0:19:2b:d2:36:7d:91:51:9b:29:ae:ff:
         1c:dd:92:df:c2:3b:6b:b6:26:f9:29:7e:43:ee:b8:81:87:1e:
         0a:c2:58:7d:19:b3:39:fd:37:8c:15:91:87:c3:81:2b:9c:80:
         af:98:85:f2:e5:07:e1:56:30:3f:eb:c5:c5:47:c8:ce:86:82:
         d8:1c:d1:42:f1:05:fe:51:2e:b6:4e:34:bc:18:c4:40:0f:13:
         a9:39:39:2e:0c:3f:e2:e7:e7:81:f4:23:66:70:95:eb:9d:51:
         b0:47:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org