Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa
File:                     323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (raw, json)
Hash identifier:          Ie8xFvUz4WbCzn2Upd5j3jsYzCyX3BCMuPz1AZ9H58Y=
Subject key identifier:   C9:03:D3:C7:FE:03:DB:BD:81:07:F2:25:1B:C7:F8:40:3E:6D:F6:4B
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       1F57191FA517ABAE02F393F76A93173707F2E3E4
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa
Signing time:             Thu 12 Oct 2023 16:10:41 +0000
ROA not before:           Thu 12 Oct 2023 16:05:41 +0000
ROA not after:            Thu 10 Oct 2024 16:10:41 +0000
asID:                     55158
IP address blocks:        2604:eb40:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 18:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:57:19:1f:a5:17:ab:ae:02:f3:93:f7:6a:93:17:37:07:f2:e3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Oct 12 16:05:41 2023 GMT
            Not After : Oct 10 16:10:41 2024 GMT
        Subject: CN=C903D3C7FE03DBBD8107F2251BC7F8403E6DF64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:89:d7:fe:7e:9d:1b:1e:43:b8:41:f5:a2:
                    cf:78:3c:11:2a:ce:4c:d3:a5:dd:4a:71:b2:88:9e:
                    b8:53:35:bb:ba:16:98:41:11:57:63:a0:d4:01:e7:
                    2a:d2:6d:16:20:8d:33:75:30:b2:c7:01:d6:28:f7:
                    e8:61:4c:2b:6b:f1:67:74:58:44:ec:c1:b8:48:f2:
                    90:2f:c8:a4:75:14:f2:fa:43:70:0a:42:20:02:23:
                    4e:4f:d1:86:67:aa:be:c4:f9:17:9c:fe:64:cf:42:
                    de:0a:8c:ca:b1:ab:03:45:bf:94:d5:69:19:4d:3f:
                    94:bc:47:ca:57:97:cf:83:fa:32:f6:67:c4:df:6e:
                    70:c3:42:07:8b:14:94:39:3e:1b:ad:b0:db:d5:f9:
                    77:34:88:bf:9b:cb:26:df:dc:29:43:c9:b1:e0:7a:
                    28:75:55:b3:5f:ea:62:20:be:4d:e7:11:d9:cb:2c:
                    83:07:d9:52:b3:15:a6:cc:c4:a7:20:f7:de:5b:c7:
                    fe:88:9a:58:05:73:46:8f:79:33:04:3c:b2:af:25:
                    57:d8:af:ce:19:65:04:d2:d1:e2:b8:81:f1:ab:45:
                    76:3c:ec:62:fb:7e:07:e2:c9:cd:ae:c2:76:9b:3a:
                    f9:b1:0e:87:9b:4e:3e:fb:4c:b6:dc:cc:ab:f2:c2:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:D3:C7:FE:03:DB:BD:81:07:F2:25:1B:C7:F8:40:3E:6D:F6:4B
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb40:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:46:30:c1:2e:02:86:57:18:ab:7b:30:51:30:cd:56:1b:
         9f:52:66:c0:28:3b:57:aa:b7:8c:bb:fa:8b:c7:6f:18:72:10:
         f5:fc:23:82:29:de:65:75:b3:d0:3e:31:f7:1a:5b:89:c2:95:
         9f:73:d7:96:32:0f:f8:4f:71:ac:ff:39:3a:73:39:3c:40:77:
         06:b8:6d:2b:ff:1d:df:f3:5c:15:93:ff:a0:e0:9e:5a:1b:37:
         69:ae:11:fc:2f:66:17:ce:49:c1:13:71:e9:e2:5d:c1:49:b6:
         33:6c:77:2b:4e:12:86:1f:0d:06:5f:93:fd:2d:ad:a8:80:b8:
         42:56:85:56:53:43:82:55:ab:56:1c:e5:0a:69:ab:8e:2b:98:
         6f:63:4d:46:35:24:55:c3:43:9c:67:44:a7:7b:58:ac:ee:d4:
         69:f8:e7:87:dc:67:12:af:77:36:de:53:25:e7:5d:a8:ca:12:
         3c:6d:f7:30:29:e9:d4:87:57:59:a8:74:ca:50:36:8b:e5:67:
         dd:89:e2:56:21:4f:18:d7:07:f7:13:cd:df:1e:d0:51:e9:2e:
         01:d1:1c:02:c9:ff:ff:1e:9b:f2:3d:14:5b:b2:7d:00:e2:cb:
         dd:b4:7d:54:97:d3:a7:fc:01:78:69:91:13:6d:7f:0a:eb:79:
         f2:cb:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 22:59:48 2024 by rpki-client on console-ams.rpki-client.org