Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e20393439.roa
File:                     323630353a3963303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          p0lGhk0Q/r6KmEloPSh3M8LbpJdvMXmXfuckmlA4/pI=
Subject key identifier:   01:34:3E:FA:40:E1:93:B8:08:F0:86:8F:84:7F:9B:93:44:E9:3C:85
Certificate issuer:       /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial:       1DF7311E9959392415999DA6D4BC0A1C56490480
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e20393439.roa
Signing time:             Sat 14 Sep 2024 01:22:26 +0000
ROA not before:           Sat 14 Sep 2024 01:17:26 +0000
ROA not after:            Sat 13 Sep 2025 01:22:26 +0000
asID:                     949
IP address blocks:        2605:9c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
                          rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f7:31:1e:99:59:39:24:15:99:9d:a6:d4:bc:0a:1c:56:49:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
        Validity
            Not Before: Sep 14 01:17:26 2024 GMT
            Not After : Sep 13 01:22:26 2025 GMT
        Subject: CN=01343EFA40E193B808F0868F847F9B9344E93C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:cb:53:77:e8:aa:e0:29:be:f7:35:4b:62:
                    d1:57:63:b6:08:90:a4:f4:71:80:76:3e:c9:a5:0d:
                    79:7b:a4:1b:07:f6:07:5a:c5:a6:9f:39:5a:d4:32:
                    cc:b1:96:b6:7c:7e:4a:7f:b5:c6:6c:fb:e6:6b:a3:
                    5c:ff:cd:e4:62:6f:a5:39:1e:84:b3:33:8b:9a:c8:
                    8c:26:1e:20:3f:b6:52:64:4f:79:97:50:f5:21:bb:
                    db:c6:95:9c:b8:e2:d6:8c:ba:0a:fd:78:44:8e:5e:
                    da:0c:27:51:31:b3:d3:8e:f3:4b:c2:6e:9c:c9:63:
                    c3:15:6b:8d:f1:c0:86:9b:31:7e:11:3d:5b:07:f2:
                    e1:8b:7f:c8:15:17:3b:1d:d8:48:85:9b:77:23:3a:
                    34:39:48:c8:d1:44:92:bb:f9:7d:77:bc:36:77:1b:
                    7b:1a:9a:5a:1d:81:89:58:f0:4d:7e:54:ef:64:c7:
                    6d:d5:57:b4:d2:15:76:25:b5:3f:15:b4:32:ae:18:
                    2d:1b:16:7c:56:19:33:97:55:65:97:e1:dc:46:3c:
                    98:28:03:2b:01:06:a3:64:17:47:f3:db:46:3e:86:
                    7c:09:fa:7c:42:6f:cf:f9:f1:75:e6:f8:b9:47:84:
                    ea:fe:0c:50:69:89:d4:99:56:3b:00:7d:e4:15:0b:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:34:3E:FA:40:E1:93:B8:08:F0:86:8F:84:7F:9B:93:44:E9:3C:85
            X509v3 Authority Key Identifier:
                keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:db:ac:57:64:22:c9:53:e8:e2:51:2c:8d:3e:d2:26:45:0f:
         75:a2:19:f7:6d:12:d1:51:4c:ac:4f:84:3d:77:28:3e:89:e7:
         f9:7f:13:81:ea:27:d3:ae:e0:65:27:2e:bf:91:1b:2d:9d:8d:
         42:40:16:84:71:a7:73:12:e2:8d:73:1c:ba:cf:89:31:6e:6f:
         a1:84:8c:5a:6a:97:69:25:ee:94:33:1f:0e:2b:83:e1:5d:cb:
         ed:64:57:4f:bd:49:9c:1d:ef:de:91:38:fc:b9:2e:06:c0:f3:
         25:ed:2c:85:98:92:ca:5e:cc:e9:ab:bf:60:5e:2a:bc:6e:f0:
         ba:1f:9b:0a:d6:5f:88:dd:04:6a:9b:2c:4a:d5:84:19:8c:4a:
         e3:8e:ab:1b:21:6d:92:63:d6:6b:5b:3f:c9:03:9f:b8:18:b0:
         1c:96:af:f9:3a:a8:15:7c:5c:26:4e:19:6b:f2:8e:7b:3b:e8:
         aa:b4:0a:80:72:96:40:b7:63:b3:b5:6e:14:17:eb:3a:4c:79:
         2a:2f:80:57:46:44:29:19:9a:e3:14:d3:79:21:44:f0:89:0a:
         8c:ff:88:ff:2c:05:e4:26:62:ec:82:5d:43:1f:9d:ca:dd:6b:
         c9:6e:02:80:b7:b7:6b:07:d1:9c:6f:fd:a5:e4:5e:a2:ae:62:
         99:23:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:00 2024 by rpki-client on console-ams.rpki-client.org