Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa
File:                     323630343a656234303a3a2f33322d3438203d3e2036323333.roa (raw, json)
Hash identifier:          zMZxgp965C81Yx4scGFytUhqhpM5xaKTUx+hmeXiVOg=
Subject key identifier:   B1:CC:57:5D:11:61:21:98:FA:2D:9A:7E:82:8D:C1:CE:0D:81:24:71
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       4C3A74D3E54A42CD6C3A12332CB02A1C2F3A9EDD
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa
Signing time:             Thu 12 Oct 2023 16:10:41 +0000
ROA not before:           Thu 12 Oct 2023 16:05:41 +0000
ROA not after:            Thu 10 Oct 2024 16:10:41 +0000
asID:                     6233
IP address blocks:        2604:eb40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 23:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3a:74:d3:e5:4a:42:cd:6c:3a:12:33:2c:b0:2a:1c:2f:3a:9e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Oct 12 16:05:41 2023 GMT
            Not After : Oct 10 16:10:41 2024 GMT
        Subject: CN=B1CC575D11612198FA2D9A7E828DC1CE0D812471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:96:ad:86:90:19:c5:99:9a:51:d6:1e:f3:
                    2c:18:73:37:f2:06:2f:07:68:4d:bb:4e:7e:f6:0b:
                    33:3d:30:9d:55:fe:1c:05:da:1b:5d:37:a8:47:8d:
                    0d:7b:2d:9a:d0:60:99:b0:63:c8:47:25:df:60:6c:
                    e9:12:f0:56:62:85:a7:52:38:e0:c3:d7:21:b6:80:
                    94:5c:5b:32:02:79:d0:c8:e5:58:7d:97:46:3f:b2:
                    a2:c6:a9:0e:4c:67:64:d5:62:9f:f2:ad:3d:80:7a:
                    25:e1:58:d2:09:f4:e5:5c:f4:39:db:6b:38:03:0f:
                    50:ef:93:36:73:5f:a6:ee:88:4c:f8:8f:be:79:94:
                    85:ea:b1:ee:6c:f1:a5:2b:43:d2:dc:b5:a3:f6:c0:
                    0c:c4:92:3f:8c:ad:6f:67:23:9e:38:9c:f2:35:cd:
                    90:ce:18:35:ed:89:3c:d3:b2:b3:fa:66:dc:6f:4f:
                    a8:30:30:c5:a8:5c:d2:dd:6f:97:29:16:4b:d8:8a:
                    51:60:37:8b:bb:ed:cb:d7:e5:c9:66:e9:e1:e4:1b:
                    73:25:d6:b2:0f:95:93:6b:7f:7a:55:05:f3:fc:0d:
                    4f:55:02:20:31:e8:07:0d:b8:4d:b9:fb:62:25:26:
                    b6:8d:79:16:9a:95:76:85:d2:c1:fb:ce:26:f8:4b:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CC:57:5D:11:61:21:98:FA:2D:9A:7E:82:8D:C1:CE:0D:81:24:71
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:7c:9b:ac:c1:c1:95:64:19:3b:d4:af:a4:89:2d:5c:b8:a5:
         13:6b:b6:04:ae:ea:a2:09:89:f8:fd:6b:67:c5:cc:f5:8d:bd:
         c4:1c:cd:84:11:d3:0f:c5:e5:b5:45:d0:ee:1d:c4:03:72:ae:
         d3:4b:f6:3b:b3:e8:1d:de:1c:f1:fa:48:ee:31:6a:51:dd:b3:
         a7:82:18:e8:2f:00:76:db:34:13:c5:bf:47:72:bb:65:88:e9:
         ce:cb:3e:8a:b9:a1:36:61:0d:1a:d5:22:9a:1e:fe:a6:53:55:
         21:c0:df:ec:84:ae:e4:97:1c:ea:d6:ed:25:d6:85:d9:8d:84:
         73:9d:c8:b9:dd:dd:20:ff:a5:1c:3a:e5:ed:f0:c7:a8:62:bc:
         ab:30:2e:c6:dc:a6:28:9d:0f:14:cf:38:6f:32:d4:99:01:64:
         c0:1c:31:cd:28:4a:ac:ec:88:bd:aa:de:a0:09:7c:42:38:c1:
         47:ef:c3:32:cc:57:74:cd:53:ac:0b:60:4e:82:1a:f4:57:e7:
         fb:17:64:9f:51:13:d6:d6:8d:93:43:05:39:22:b3:f1:c6:4a:
         94:96:55:32:a4:eb:1d:60:54:f0:ae:50:5f:7d:cf:50:99:9a:
         7d:ba:e4:54:1b:3c:16:ea:6d:50:17:54:4e:92:41:f7:1d:9d:
         f9:0a:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:18:50 2024 by rpki-client on console-ams.rpki-client.org