Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa
File:                     3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          Uaez6iZritL8qNb8zashZZRXPOsrbSHSEJJRbEionds=
Subject key identifier:   3A:5A:7F:86:72:03:80:7A:AB:CE:00:9A:27:D6:0D:F1:F7:86:B8:8B
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       2C1D1F3B8B33BAD77D0A7F5CBFF6E28066E5C763
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:23 +0000
ROA not before:           Sat 14 Sep 2024 01:17:23 +0000
ROA not after:            Sat 13 Sep 2025 01:22:23 +0000
asID:                     6233
IP address blocks:        142.147.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1d:1f:3b:8b:33:ba:d7:7d:0a:7f:5c:bf:f6:e2:80:66:e5:c7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:23 2024 GMT
            Not After : Sep 13 01:22:23 2025 GMT
        Subject: CN=3A5A7F867203807AABCE009A27D60DF1F786B88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:09:7a:d4:55:88:ee:35:0f:b1:f0:64:e3:
                    8b:10:59:e8:0b:89:be:8d:f1:4a:e5:5a:87:f0:85:
                    88:94:49:53:59:60:8d:bd:cf:71:2d:7f:5c:2e:31:
                    5b:2b:5a:b2:d1:77:4f:4f:62:2c:5d:b6:21:61:e4:
                    bb:7b:e1:17:11:20:8b:db:ab:e8:64:16:74:35:16:
                    15:1c:86:99:61:88:a1:bc:0c:9e:97:88:bc:87:09:
                    3c:7e:c8:77:d5:37:8e:38:1e:92:a6:30:bd:b2:ac:
                    0d:c2:53:a9:40:47:cf:61:c9:9a:75:c8:1c:45:ff:
                    e9:5e:3b:c7:76:60:8e:7a:a2:5b:37:c2:e9:af:59:
                    95:17:13:eb:a9:70:c6:3b:b5:39:14:b6:3e:2c:12:
                    82:32:34:d5:21:ef:f0:86:6b:28:17:21:37:50:04:
                    43:ea:e4:64:ed:9e:e6:20:32:8e:33:41:38:bd:5c:
                    87:f4:75:22:7f:41:d6:c1:9d:62:19:1a:1f:c4:94:
                    35:ca:2d:9a:d5:ac:19:1d:18:c9:77:96:de:ed:90:
                    87:e9:7c:5d:a4:93:2f:c1:0c:ef:b4:56:bc:75:b8:
                    7b:01:af:36:d4:dd:0d:c1:0f:37:45:45:21:12:31:
                    a1:b7:71:84:3d:a1:e2:64:ac:5b:d7:c1:1e:6f:dc:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5A:7F:86:72:03:80:7A:AB:CE:00:9A:27:D6:0D:F1:F7:86:B8:8B
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b4:fa:0c:6c:5d:27:b4:b7:ed:30:bd:68:bf:48:00:f8:b8:
         31:d1:6e:c7:e5:af:bd:22:d5:49:35:4a:4c:9f:0a:29:62:4d:
         bc:e8:0f:f0:f1:79:5f:2b:2c:01:7e:cd:42:10:5b:b1:27:9e:
         9a:36:d2:65:c9:7d:f0:2a:f7:55:18:32:1d:bd:f0:4e:3b:46:
         a4:10:45:84:c1:f8:fb:76:fa:be:cc:4d:c3:ca:d1:cc:09:8f:
         2c:d7:a2:0e:c7:61:9e:f5:4a:b6:0e:ba:dc:46:ef:40:1e:4c:
         40:19:63:f3:99:02:b2:4f:2a:ed:3c:14:47:ca:f4:f7:5f:fd:
         95:13:dc:52:c6:61:1e:68:31:44:b7:d0:72:e7:62:87:4d:92:
         d9:86:30:84:5d:1a:51:af:2b:b8:f8:c0:38:9d:43:d6:3a:6f:
         6e:2a:5c:7d:54:a9:f6:45:74:d4:54:29:56:c1:f3:27:dc:2f:
         9e:7b:7b:1b:51:88:23:fe:50:6a:df:7d:89:3d:46:a5:b1:6f:
         e2:39:25:b2:21:a4:9e:6c:75:11:ed:38:ae:28:b0:b5:47:b4:
         35:77:b0:c1:a4:56:cb:ef:eb:4c:c2:45:5f:ad:d6:0d:d4:a3:
         54:b6:67:1f:71:13:62:00:f7:14:24:48:3a:df:47:82:10:cc:
         67:f2:56:56
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIULB0fO4szutd9Cn9cv/bigGblx2MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjQwOTE0MDExNzIzWhcNMjUwOTEzMDEyMjIz
WjAzMTEwLwYDVQQDEygzQTVBN0Y4NjcyMDM4MDdBQUJDRTAwOUEyN0Q2MERGMUY3
ODZCODhCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwckJetRViO41
D7HwZOOLEFnoC4m+jfFK5VqH8IWIlElTWWCNvc9xLX9cLjFbK1qy0XdPT2IsXbYh
YeS7e+EXESCL26voZBZ0NRYVHIaZYYihvAyel4i8hwk8fsh31TeOOB6SpjC9sqwN
wlOpQEfPYcmadcgcRf/pXjvHdmCOeqJbN8Lpr1mVFxPrqXDGO7U5FLY+LBKCMjTV
Ie/whmsoFyE3UARD6uRk7Z7mIDKOM0E4vVyH9HUif0HWwZ1iGRofxJQ1yi2a1awZ
HRjJd5be7ZCH6XxdpJMvwQzvtFa8dbh7Aa821N0NwQ83RUUhEjGht3GEPaHiZKxb
18Eeb9w2XwIDAQABo4ICXjCCAlowHQYDVR0OBBYEFDpaf4ZyA4B6q84AmifWDfH3
hriLMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM5MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI6TWjAN
BgkqhkiG9w0BAQsFAAOCAQEAg7T6DGxdJ7S37TC9aL9IAPi4MdFux+WvvSLVSTVK
TJ8KKWJNvOgP8PF5XyssAX7NQhBbsSeemjbSZcl98Cr3VRgyHb3wTjtGpBBFhMH4
+3b6vsxNw8rRzAmPLNeiDsdhnvVKtg663EbvQB5MQBlj85kCsk8q7TwUR8r091/9
lRPcUsZhHmgxRLfQcudih02S2YYwhF0aUa8ruPjAOJ1D1jpvbipcfVSp9kV01FQp
VsHzJ9wvnnt7G1GII/5Qat99iT1GpbFv4jklsiGknmx1Ee04riiwtUe0NXewwaRW
y+/rTMJFX63WDdSjVLZnH3ETYgD3FCRIOt9HghDMZ/JWVg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org