Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa
File:                     323630343a613834303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          8WZiiARP34rsVV/fJ1SdzWD+kELbuKRgTXKuVh47r0Y=
Subject key identifier:   F2:1A:DD:8B:0A:DB:8C:34:BD:FF:3B:0B:FE:45:9E:CD:F4:B2:0D:AE
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       1634D55815900ED692B75D39DE9061D7F13F4ED9
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa
Signing time:             Sat 14 Sep 2024 01:22:24 +0000
ROA not before:           Sat 14 Sep 2024 01:17:24 +0000
ROA not after:            Sat 13 Sep 2025 01:22:24 +0000
asID:                     949
IP address blocks:        2604:a840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:34:d5:58:15:90:0e:d6:92:b7:5d:39:de:90:61:d7:f1:3f:4e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep 14 01:17:24 2024 GMT
            Not After : Sep 13 01:22:24 2025 GMT
        Subject: CN=F21ADD8B0ADB8C34BDFF3B0BFE459ECDF4B20DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:4d:e8:ba:90:1c:67:77:f5:99:f0:e7:0f:
                    8c:3e:be:d2:dd:85:63:df:dd:26:c9:f1:5d:ab:7c:
                    f8:79:ad:71:03:4a:01:77:26:9b:4d:08:b5:77:31:
                    2b:4e:37:50:18:ec:1d:01:be:47:74:10:48:5c:08:
                    ba:8a:1a:c6:6f:96:06:8f:a3:59:a5:aa:0c:4e:1f:
                    f5:94:85:ac:3a:6c:c0:11:bd:6b:98:25:37:49:6a:
                    7c:ae:dc:4f:db:12:9e:10:db:44:7b:f1:44:19:42:
                    a8:49:ea:a6:27:9a:15:e4:b2:a5:5b:20:38:dd:b6:
                    f8:a6:ed:9b:c3:2d:d9:4b:1c:32:18:76:b8:1a:b1:
                    da:42:57:05:6b:ef:48:6a:91:ff:db:92:67:6c:96:
                    81:b3:7c:85:d2:86:f7:54:3a:f7:1c:ef:2a:eb:57:
                    50:53:8e:60:4e:ee:37:6b:dd:11:97:f8:ba:09:ba:
                    e0:5d:24:b4:4e:2b:57:30:64:ad:a1:c4:68:f9:cb:
                    0f:82:af:b8:d9:c6:90:ba:d0:3b:15:1c:20:7a:a1:
                    57:4c:94:8c:dc:8a:5f:a9:f6:52:8a:7c:0a:b4:20:
                    7a:3c:59:7f:37:6f:5d:3e:fd:ac:a8:41:fc:68:91:
                    2b:33:61:d6:c4:db:3b:03:e5:06:e5:a0:b6:72:91:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1A:DD:8B:0A:DB:8C:34:BD:FF:3B:0B:FE:45:9E:CD:F4:B2:0D:AE
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a840::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:61:20:83:8e:44:e3:fe:c3:fc:3b:2f:1f:5b:60:85:c8:
         69:65:0f:8e:48:45:bf:f8:5e:a6:2c:9a:bf:6e:09:83:26:db:
         0c:fb:cf:ef:bd:f8:2c:fc:ae:42:90:58:3b:b0:06:e0:ad:5c:
         14:d2:c9:37:48:3a:85:22:48:a8:48:98:63:12:37:14:b5:94:
         aa:9e:65:a2:f8:fe:a1:1c:81:c3:be:fd:a8:3b:80:9e:e0:eb:
         d6:de:6d:b1:93:12:50:ab:05:fd:f7:47:d7:bf:fa:24:c1:09:
         46:19:87:b6:b3:9d:fa:fd:dc:73:7b:f3:6c:7e:9b:1f:99:e0:
         3b:76:b5:56:7e:09:bc:8f:b9:60:35:bf:2f:fa:81:20:6b:e2:
         ec:ff:13:b9:8a:f4:d7:70:8c:42:6e:b1:43:63:80:86:33:07:
         35:0f:42:40:f0:5c:5d:fe:d8:3f:2b:47:8d:ee:9c:03:02:0f:
         eb:78:05:73:89:24:4a:3e:59:67:82:ca:ee:d1:09:bd:67:a0:
         b1:f8:37:90:ab:46:9b:0e:d7:b6:da:39:11:2e:7d:ab:5b:03:
         11:57:01:dc:67:74:96:46:ab:82:31:af:3c:38:1b:27:d3:45:
         98:a9:05:91:f3:4f:69:86:19:1b:bc:4a:db:a3:82:d3:ee:c5:
         21:75:96:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:23 2024 by rpki-client on console-ams.rpki-client.org