Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa
File:                     3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (raw, json)
Hash identifier:          9pniSLjFRQJ+eqL4yaOaOLJswVTB5vXeN3pUAVMb9/Q=
Subject key identifier:   F9:2F:03:60:CC:0B:30:47:86:CA:25:8E:2A:01:57:E1:DD:F5:47:32
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       5EA3DE7AED989B77D08C1169839CACB258C5B852
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa
Signing time:             Sat 14 Sep 2024 01:22:24 +0000
ROA not before:           Sat 14 Sep 2024 01:17:24 +0000
ROA not after:            Sat 13 Sep 2025 01:22:24 +0000
asID:                     62805
IP address blocks:        142.147.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a3:de:7a:ed:98:9b:77:d0:8c:11:69:83:9c:ac:b2:58:c5:b8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:24 2024 GMT
            Not After : Sep 13 01:22:24 2025 GMT
        Subject: CN=F92F0360CC0B304786CA258E2A0157E1DDF54732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d8:45:d4:49:f4:0d:95:9c:74:63:58:24:d2:
                    61:cb:29:4e:a2:84:ac:7c:2c:18:da:82:ce:c9:dc:
                    43:bd:3a:62:3b:ce:23:ac:f9:60:7c:1c:7a:6e:a6:
                    0d:17:41:a4:68:2b:9a:f8:6e:81:a5:b4:4e:13:ac:
                    99:6d:52:2f:ae:37:54:ed:f4:74:b3:b7:fc:74:af:
                    64:3a:86:e2:46:7b:80:f9:a8:28:20:32:d5:80:63:
                    5f:65:61:1e:03:7b:df:eb:8f:da:41:47:9a:37:fb:
                    9d:b4:5d:d5:d4:9a:fa:50:7a:f8:a8:cc:9e:25:f6:
                    7c:39:bf:a9:84:53:f5:09:40:ad:50:21:23:05:f5:
                    14:77:4c:49:5b:4a:7d:44:4e:8f:9f:94:f4:a9:3c:
                    ab:e5:3e:09:54:60:f0:2a:4d:a6:04:4e:47:bb:9c:
                    18:b1:36:96:e1:62:5c:17:6f:60:ac:c5:2e:82:2f:
                    88:b7:77:77:43:c4:19:77:0f:53:11:8b:8f:f5:83:
                    46:a5:42:f0:b2:55:66:f1:69:d0:5e:1a:d8:9a:5f:
                    a7:4e:f6:f0:b8:70:d7:47:08:2f:a4:ff:59:a4:fc:
                    7c:5c:e1:88:38:5e:5e:a2:dc:67:6a:af:76:0a:12:
                    0c:f1:6b:eb:99:9d:29:78:7c:ec:4f:ba:74:c4:36:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:03:60:CC:0B:30:47:86:CA:25:8E:2A:01:57:E1:DD:F5:47:32
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:91:37:5e:c2:5a:88:e6:ef:ad:f2:1c:95:6d:80:37:bc:0d:
         5a:89:f8:78:64:bd:f5:d1:0c:2b:95:bb:db:3b:37:9d:1f:c0:
         ba:d4:7d:bf:c9:74:51:c4:fa:7f:7b:5d:9a:ee:42:73:34:be:
         91:6a:d9:bd:27:1a:7e:59:7e:63:a5:6f:a5:1f:ac:47:f9:b3:
         c3:19:e4:7c:80:f0:57:9c:08:64:d2:56:c8:ae:b9:3b:bb:50:
         29:d0:28:de:c3:e1:29:5a:56:c2:e0:1f:bb:49:78:2e:42:09:
         7c:d3:bc:2d:12:a2:32:a5:24:39:6f:29:a6:b3:67:19:fb:42:
         36:a7:03:fd:0a:0f:27:fa:84:e5:fd:fa:b8:12:ee:3d:01:07:
         3b:00:e2:16:01:af:56:06:21:ee:89:cd:19:9a:20:f5:8d:e8:
         27:39:0e:3c:aa:9f:ba:d2:58:d8:b1:96:bf:99:6a:48:4d:01:
         88:ea:cd:99:88:c2:7e:e1:08:e1:39:c2:ed:e7:e4:b3:00:05:
         db:39:a6:79:b4:06:45:de:1a:2d:0c:22:23:31:3d:3b:b1:49:
         bc:7e:f8:5e:09:ca:0c:1e:59:2e:8a:fe:a1:1e:cd:60:ae:35:
         76:57:cc:81:6f:69:8f:87:bc:f9:f2:81:42:df:09:24:d5:34:
         5c:41:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org