Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa
File:                     3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (raw, json)
Hash identifier:          SD8eSbNpC+j2ob1Lnp5qYAO0x7aCbcCbnqNr2jZFro0=
Subject key identifier:   36:66:B5:19:00:67:BF:32:DA:B1:50:DA:76:D9:86:69:30:47:DB:AA
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       0676D0444DC5DB5474E8D817C1368FBA8AF1A4CD
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa
Signing time:             Sat 14 Sep 2024 01:22:25 +0000
ROA not before:           Sat 14 Sep 2024 01:17:25 +0000
ROA not after:            Sat 13 Sep 2025 01:22:25 +0000
asID:                     32727
IP address blocks:        142.147.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:76:d0:44:4d:c5:db:54:74:e8:d8:17:c1:36:8f:ba:8a:f1:a4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:25 2024 GMT
            Not After : Sep 13 01:22:25 2025 GMT
        Subject: CN=3666B5190067BF32DAB150DA76D986693047DBAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:29:29:57:4f:54:0c:db:ec:6a:56:a1:57:
                    65:1a:1b:1b:f5:dc:66:ab:09:0c:b1:6b:5d:a0:d9:
                    76:27:50:87:a2:bd:f6:72:b4:0f:d6:eb:c6:7b:4c:
                    70:3e:7f:6f:45:77:6c:33:18:52:fa:f2:56:75:ad:
                    3b:7a:62:2f:99:50:98:44:54:6d:03:19:0e:30:90:
                    b2:3d:5a:2c:a5:e2:91:99:13:62:e3:cf:cf:02:58:
                    bf:c6:02:05:a3:fa:5d:0d:5f:ff:e7:6b:c8:68:39:
                    f0:cc:44:50:79:c3:8d:b9:06:35:32:2f:b3:ff:2a:
                    60:86:bd:02:4e:95:49:be:9d:a2:a0:75:1e:67:7b:
                    5c:1a:28:57:48:03:73:18:72:66:29:a4:3d:85:9b:
                    24:08:98:cf:e9:53:72:e8:0a:16:ab:6e:ab:a5:ef:
                    8f:d5:20:4d:5f:63:e3:80:1c:b8:e9:ab:17:1d:97:
                    d9:ed:f5:ff:12:a3:74:60:ea:dc:b4:57:b9:37:f5:
                    18:af:c2:6d:8b:a7:86:d0:50:54:f4:00:00:37:16:
                    9c:a5:4e:79:39:1e:d2:c1:3f:0d:58:76:f2:e4:4b:
                    57:cb:1e:63:47:84:99:85:10:b2:9b:ae:13:9e:03:
                    84:f3:97:ba:75:1a:59:81:5b:16:0c:f4:42:ee:69:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:66:B5:19:00:67:BF:32:DA:B1:50:DA:76:D9:86:69:30:47:DB:AA
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:95:44:d2:d1:b6:5f:76:03:ab:82:43:f2:eb:ed:78:3b:
         0e:c7:da:f9:1e:b8:fe:e9:a8:66:d1:c0:29:fc:54:a8:51:ef:
         06:5d:9b:43:35:df:67:e8:fd:c2:31:96:ec:42:e5:28:1f:46:
         a3:04:fc:95:92:41:1a:31:84:94:c4:71:9b:00:d3:f1:b5:79:
         52:55:71:05:ee:cb:dd:e7:66:f9:64:8d:74:22:37:2f:63:77:
         7e:1b:b6:f3:2e:68:7d:9b:cf:5f:d8:66:3c:3f:a8:e6:5f:db:
         f7:97:11:25:2d:56:1f:c6:5d:6a:7d:fd:bb:c6:29:45:be:5d:
         4e:ab:61:0d:3c:30:94:ff:6c:84:68:fb:96:9f:d8:a4:ac:6b:
         9f:34:56:d7:77:ea:5a:7a:e3:bc:1f:4e:a4:a7:72:05:7b:13:
         19:db:b6:02:66:83:fa:3d:b7:e1:ef:54:f9:23:6f:28:a4:18:
         de:cb:c8:2f:1a:57:f0:08:ad:a4:30:ac:67:ea:36:49:dd:d9:
         dd:a0:0f:a4:56:c6:25:f6:d4:b9:78:d8:a1:74:6e:e7:7a:f5:
         35:06:1a:c1:a5:78:32:a2:41:99:b0:60:c2:18:76:40:73:fe:
         5c:d5:24:7b:3d:db:0a:24:ff:2a:e1:6e:a4:13:1c:09:dd:d0:
         df:c6:f7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org