Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39312e302f32342d3234203d3e203632383035.roa
File:                     3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (raw, json)
Hash identifier:          b29zK4U8Mcq+XxDLVK6zeqp99cVMrTm1iEY248+v7GQ=
Subject key identifier:   CF:3B:D6:C5:AC:65:4A:8A:31:DE:26:F8:40:40:0E:E4:DE:A2:DD:FF
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       0FDF449D6049C7D4087439097468770D89F6CFD1
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39312e302f32342d3234203d3e203632383035.roa
Signing time:             Sat 14 Sep 2024 01:22:24 +0000
ROA not before:           Sat 14 Sep 2024 01:17:24 +0000
ROA not after:            Sat 13 Sep 2025 01:22:24 +0000
asID:                     62805
IP address blocks:        142.147.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:df:44:9d:60:49:c7:d4:08:74:39:09:74:68:77:0d:89:f6:cf:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:24 2024 GMT
            Not After : Sep 13 01:22:24 2025 GMT
        Subject: CN=CF3BD6C5AC654A8A31DE26F840400EE4DEA2DDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:e0:eb:fd:22:b3:fa:5c:3d:ce:3c:7d:7c:
                    68:ca:4e:42:06:ab:1b:0d:ff:c8:80:64:7b:cd:95:
                    92:4f:8a:02:5a:65:52:0b:42:3d:15:89:3c:92:ac:
                    e8:ac:42:4c:67:9d:51:62:14:92:81:26:e3:d9:87:
                    82:7e:08:b8:c1:6f:81:e1:fc:3f:66:61:d5:4f:d7:
                    a9:6a:fc:47:a8:56:f0:94:ac:5c:53:89:2f:3e:4f:
                    8f:01:aa:4b:46:71:97:e4:37:2f:1c:8c:cc:3e:10:
                    d4:35:9d:c6:80:05:d4:aa:87:4a:88:f0:a7:9d:e4:
                    50:aa:38:b7:e9:86:ce:11:9d:4c:14:1b:f9:81:12:
                    d7:da:bb:43:f3:6a:79:7a:ca:69:e6:1f:c1:07:1b:
                    76:54:35:26:23:6b:b5:26:a8:8b:37:fc:85:97:07:
                    59:fa:55:42:19:7b:06:b3:66:4f:ac:35:53:24:ae:
                    19:91:42:02:9c:4e:1f:c9:07:db:2f:ab:e0:42:b8:
                    f4:e1:9f:64:7e:2d:93:70:e5:42:bc:0c:68:1a:54:
                    99:b6:b9:11:d6:30:f0:74:5d:5e:ed:b7:34:8e:85:
                    94:d3:62:c2:a1:1a:59:9a:f9:d1:1f:51:60:06:c1:
                    c2:05:40:61:34:0a:3d:4c:5c:89:bd:7b:4b:20:63:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3B:D6:C5:AC:65:4A:8A:31:DE:26:F8:40:40:0E:E4:DE:A2:DD:FF
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39312e302f32342d3234203d3e203632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:97:05:0c:0d:50:db:58:d9:c8:a9:e5:61:fc:0c:8e:38:09:
         1f:51:83:2f:a7:fb:b5:c2:b9:f9:f5:47:66:4c:c4:34:aa:9b:
         3d:b8:49:6a:75:6d:c3:f1:53:75:db:04:77:15:94:5f:0f:6e:
         85:e3:b2:a2:f7:bc:f6:50:72:78:3c:eb:e3:35:ac:a5:b5:94:
         5f:44:ce:70:e9:14:14:4b:d3:05:f6:2b:6b:c6:18:ce:08:e6:
         8f:7a:a7:24:72:e4:6e:60:96:27:5a:63:b3:83:71:10:ef:de:
         86:38:e9:57:9d:fa:eb:97:e6:e0:3d:41:5d:ae:f0:6a:cf:55:
         42:9b:d9:33:0f:bb:83:ff:61:ce:2f:2e:67:6f:51:70:00:c2:
         fd:6c:76:4c:5b:ff:88:5c:4c:2a:33:b3:1f:af:bf:9d:06:6b:
         d4:b4:13:21:a2:f0:f5:1e:71:85:fd:a4:f2:d1:be:d3:5e:1b:
         13:0c:2d:c5:08:42:77:c3:9c:43:ea:c8:03:92:38:85:27:22:
         f8:ca:e0:e8:52:fc:c6:a3:ab:e6:1d:ce:4f:b6:b4:2c:1c:5e:
         27:7c:47:7f:3e:6e:42:b9:d0:45:c2:c6:f2:35:41:52:04:8c:
         a8:bd:e0:a5:cd:45:e5:6d:ef:5e:41:ad:61:63:23:fc:2c:75:
         42:70:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:54:58 2024 by rpki-client on console-ams.rpki-client.org