Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
File:                     3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (raw, json)
Hash identifier:          96o5E3l8VX2A9M6Mv6rN9cqwbqxcVJnLdu+NXHSrwR0=
Subject key identifier:   4A:67:23:29:8C:06:8D:85:CE:33:60:7F:5D:E7:0F:99:6B:65:01:90
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       0EAECD2456CB81A4CF851A3D5972C9834F6A2AB6
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
Signing time:             Sat 14 Sep 2024 01:22:24 +0000
ROA not before:           Sat 14 Sep 2024 01:17:24 +0000
ROA not after:            Sat 13 Sep 2025 01:22:24 +0000
asID:                     55158
IP address blocks:        142.147.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ae:cd:24:56:cb:81:a4:cf:85:1a:3d:59:72:c9:83:4f:6a:2a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:24 2024 GMT
            Not After : Sep 13 01:22:24 2025 GMT
        Subject: CN=4A6723298C068D85CE33607F5DE70F996B650190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:d4:c2:a9:48:17:34:ce:09:34:1e:3c:59:
                    16:07:1d:7a:1d:f5:e5:f4:4d:19:11:27:53:fb:47:
                    ec:5d:c7:e8:4a:41:de:e4:55:9e:bc:72:5b:2c:e7:
                    1c:7d:6a:1c:0c:ba:0a:6d:c3:4a:b1:43:0d:3d:62:
                    a7:58:b8:1c:82:fe:10:83:74:a6:47:9e:62:6e:d8:
                    6d:a9:74:6f:6c:74:19:1c:11:c9:3f:5e:a3:b7:fe:
                    fe:f0:0a:84:08:37:dc:df:9c:23:0e:5c:ca:c6:3b:
                    c5:a4:83:b8:3b:1c:d8:85:51:41:0d:43:1e:a2:a1:
                    02:db:89:70:82:c3:a3:62:ad:d1:30:15:ef:b0:d4:
                    32:51:6f:f7:af:45:65:ed:81:05:e8:18:d5:f2:39:
                    8e:27:55:85:8e:a1:27:2b:14:03:22:2e:a5:98:71:
                    62:c3:f4:fc:2d:8e:13:7c:b6:c5:29:92:64:4c:d7:
                    1b:ad:d9:c5:28:a3:d6:10:a7:f0:df:13:cc:93:8a:
                    64:4f:e6:24:1d:1d:57:b1:a3:4c:cb:8a:dd:c5:57:
                    ad:af:fd:8e:f8:4b:04:c5:05:b5:b9:53:be:16:bf:
                    5c:9e:18:e3:5d:40:97:92:13:2b:59:87:e2:a6:97:
                    cc:57:fe:73:92:b2:c6:eb:3e:f1:d3:01:3a:a8:c3:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:67:23:29:8C:06:8D:85:CE:33:60:7F:5D:E7:0F:99:6B:65:01:90
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e8:3e:cc:40:2c:2a:8b:34:a6:48:c1:6d:29:ce:cc:b4:0d:
         5b:bc:e5:d0:30:64:a8:eb:e5:2c:fc:87:93:94:73:79:93:bf:
         02:a9:0e:8e:4e:fa:1e:02:35:99:ce:9a:4d:4a:8e:a9:1e:ee:
         88:24:07:c6:a0:4b:e5:e1:3a:e0:48:6f:bc:4f:c4:d9:8c:7b:
         db:dd:3e:25:75:40:14:57:41:6c:ae:48:95:7b:28:c8:3b:22:
         11:03:a7:dc:e0:d3:63:49:f4:7d:52:b5:82:dd:5d:d7:26:98:
         eb:e0:ee:f8:67:e8:42:61:6a:e6:20:b3:c6:e2:38:d1:a9:6c:
         71:80:40:23:ad:bf:c2:e0:6e:31:ab:47:ef:0a:4f:1d:e7:b9:
         12:df:a5:b5:cd:43:f5:a3:a1:5b:cd:e7:54:93:42:be:43:10:
         94:76:11:94:cf:6d:86:90:fe:ce:83:4a:7f:28:4c:d6:94:46:
         93:54:87:9a:fc:34:70:e9:3a:00:f3:18:ec:6e:9c:67:1b:c3:
         41:cf:06:d3:b4:7a:b2:77:28:0a:31:93:82:72:41:0b:b6:8d:
         7b:10:96:08:ab:fb:99:2b:d9:f0:83:01:71:b9:fb:ca:32:0b:
         47:09:d8:d6:e3:be:22:19:2a:5d:e6:20:04:11:18:cf:34:aa:
         bc:d1:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:23 2024 by rpki-client on console-ams.rpki-client.org