Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa
File:                     323630343a656234303a3a2f33322d3438203d3e203332373237.roa (raw, json)
Hash identifier:          Fo0H6M3omqkGaocLklwBiqi5fpM2lwgk7hyb8b9hi8Q=
Subject key identifier:   F7:7D:9C:FE:BE:1C:97:19:0D:81:0A:1D:6F:72:43:1F:6F:48:11:01
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       1B66542F552C773D39D75C73BCA85E9DE3D11E27
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa
Signing time:             Sat 14 Sep 2024 01:22:33 +0000
ROA not before:           Sat 14 Sep 2024 01:17:33 +0000
ROA not after:            Sat 13 Sep 2025 01:22:33 +0000
asID:                     32727
IP address blocks:        2604:eb40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:66:54:2f:55:2c:77:3d:39:d7:5c:73:bc:a8:5e:9d:e3:d1:1e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Sep 14 01:17:33 2024 GMT
            Not After : Sep 13 01:22:33 2025 GMT
        Subject: CN=F77D9CFEBE1C97190D810A1D6F72431F6F481101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:6c:54:1e:23:1f:60:a3:c9:e1:1d:a5:a5:
                    6d:de:b8:72:51:f6:41:25:a3:52:07:5b:32:ee:0c:
                    56:92:9a:0c:50:4d:a7:30:42:b2:2e:37:b7:64:7b:
                    a9:e5:f9:48:1f:dd:bd:42:d4:18:bf:7a:61:54:b1:
                    e7:27:5a:d3:f3:a3:5a:f9:76:23:69:6c:1b:a1:ce:
                    61:38:5b:60:c1:6e:58:87:82:25:d4:4d:b2:92:06:
                    ff:29:31:3d:e3:8d:89:2f:e7:85:56:a8:b9:4a:ae:
                    6b:03:3f:f0:67:8f:e2:85:c6:dc:79:9d:c2:3f:4b:
                    d5:9a:dc:1f:a4:31:28:49:f9:7e:b3:b7:14:83:42:
                    08:6d:c6:a5:a0:0b:7e:ed:46:b4:d9:59:ea:7a:47:
                    ad:b0:f2:9f:a7:34:ae:70:58:ee:bc:e8:bb:e3:49:
                    d1:85:0f:23:c9:df:ea:95:0f:18:be:be:a0:81:40:
                    0f:fb:48:fe:f3:71:57:8f:57:63:ff:99:9e:90:b6:
                    29:72:58:05:f7:9b:38:8d:05:81:ea:31:4c:57:41:
                    af:e2:66:da:5d:78:70:1b:4f:da:41:d9:f2:34:1c:
                    89:d3:b1:46:c9:bb:23:aa:d8:69:ed:44:41:e7:30:
                    64:2d:3c:51:cd:06:e9:7d:4a:d7:05:7e:31:f8:2d:
                    3b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:9C:FE:BE:1C:97:19:0D:81:0A:1D:6F:72:43:1F:6F:48:11:01
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:3e:63:82:05:10:4b:37:7c:9c:84:13:2b:2e:a0:7c:43:
         6d:c5:77:2b:de:3d:64:a1:22:77:8b:ec:22:e3:67:a4:69:10:
         61:c2:f8:16:1c:7b:60:7b:3e:4e:d1:0f:63:e5:4c:25:3b:75:
         a7:44:2d:ce:fa:f9:46:31:66:31:7b:d6:8f:92:1c:d9:64:77:
         9f:cc:27:bc:d3:70:69:3b:8f:40:2d:2f:7d:98:8e:ba:df:12:
         02:40:d8:f0:83:06:df:0c:f9:ab:71:ab:9d:c2:53:3f:ff:17:
         6d:b3:67:b0:f6:74:40:2a:83:c4:91:3e:ad:3b:d6:c9:45:f9:
         bd:66:a7:e7:c3:b7:bb:fb:8f:5f:b6:bc:81:5d:49:4f:b5:99:
         38:ed:da:3d:7a:76:e1:74:a9:53:d6:08:5c:45:a5:38:dd:fc:
         3c:56:5b:0c:a2:51:d9:38:7d:a2:87:6d:34:22:d4:f8:cb:28:
         48:c0:73:72:6a:fe:47:0b:18:25:78:58:9c:3e:83:8e:84:61:
         d2:18:93:47:0d:06:f1:cc:32:18:14:3e:2d:39:cb:24:3c:b6:
         dd:55:4f:6c:25:b4:ee:a8:9c:38:06:cf:65:5c:f4:3f:ba:9b:
         2a:bc:6f:a8:10:06:82:ad:1f:58:9e:93:a3:6d:eb:7b:50:13:
         54:55:48:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:00 2024 by rpki-client on console-ams.rpki-client.org