Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa
File:                     323630343a656234303a3a2f33322d3438203d3e2036323333.roa (raw, json)
Hash identifier:          lio281+HPrVgA+/xhco0XR6O6w4XVxH6wQYDp2Mz7d0=
Subject key identifier:   72:D1:68:2D:EB:8B:CE:C5:BF:00:88:7C:79:65:42:E2:83:50:EB:CC
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       4891F2650A91884F7133FF7D9FF30461584FA016
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa
Signing time:             Sat 14 Sep 2024 01:22:32 +0000
ROA not before:           Sat 14 Sep 2024 01:17:32 +0000
ROA not after:            Sat 13 Sep 2025 01:22:32 +0000
asID:                     6233
IP address blocks:        2604:eb40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:91:f2:65:0a:91:88:4f:71:33:ff:7d:9f:f3:04:61:58:4f:a0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Sep 14 01:17:32 2024 GMT
            Not After : Sep 13 01:22:32 2025 GMT
        Subject: CN=72D1682DEB8BCEC5BF00887C796542E28350EBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:ef:9a:be:94:1d:be:ee:76:59:90:fa:88:
                    d7:3d:21:6c:da:df:cc:96:2a:64:ed:d9:c8:aa:b9:
                    3b:6b:65:84:d5:aa:50:66:16:64:bb:44:c9:e4:ea:
                    e2:fd:30:74:7d:25:de:a8:33:e1:ee:de:af:25:6a:
                    ba:4e:c0:5b:ff:76:d0:8d:df:79:d2:9c:9f:bb:c1:
                    dc:29:2e:03:62:51:88:9f:17:0a:21:16:84:07:45:
                    06:90:68:63:e4:98:28:69:a4:81:d0:bc:bf:d2:83:
                    ac:7d:fe:63:8f:90:49:a9:c1:cb:3b:f2:91:c8:ea:
                    7e:8f:77:b5:20:93:98:00:75:1a:f2:ee:a0:37:f9:
                    f2:57:ab:e6:7d:7d:43:04:ca:54:2f:4e:54:e9:8a:
                    5c:18:37:72:04:73:ed:39:79:16:dd:1b:2a:0c:66:
                    56:2b:3e:38:f0:1e:a9:a1:9f:28:2d:9f:70:e7:5c:
                    5e:d7:19:a1:20:67:cd:2d:7d:6d:b5:58:74:6c:d8:
                    d4:05:9b:45:64:4a:72:e3:10:a8:07:28:25:9a:34:
                    16:58:b9:a4:1e:33:71:1f:6b:1b:a6:21:8b:6c:67:
                    1e:5b:30:25:e1:81:34:a2:4d:30:d6:00:9e:cd:35:
                    15:ae:74:b4:b1:1c:b3:80:40:95:22:1e:f5:ff:fb:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D1:68:2D:EB:8B:CE:C5:BF:00:88:7C:79:65:42:E2:83:50:EB:CC
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:3f:1a:42:cc:58:ce:71:6f:53:ff:f0:f6:46:70:ef:63:a5:
         17:a2:80:18:9f:c3:7f:55:05:88:69:46:94:23:d0:96:c3:dc:
         bf:7c:92:49:d5:49:1d:f2:94:64:2c:87:69:67:02:45:d6:e7:
         de:dc:ea:90:29:0e:57:38:21:66:77:f8:3d:51:98:88:cb:72:
         d1:cf:12:7c:18:c1:c5:ad:f9:d0:60:94:58:ca:71:5f:c2:bf:
         e7:a3:b7:75:90:6b:61:4e:f2:0f:04:c6:1b:b1:ea:f2:2a:c2:
         ec:b9:c0:6f:48:d9:0e:d0:30:09:fe:2b:37:dd:ed:b9:fb:ed:
         50:e5:48:21:f1:4e:c8:3c:6a:bd:ef:f6:fc:a6:1c:bc:84:7b:
         43:1e:db:70:45:bf:e0:98:25:a1:8a:6c:96:a0:19:12:36:e3:
         3b:19:9e:54:4c:26:42:23:95:0d:67:15:d1:b0:73:56:66:c9:
         08:6e:c1:4c:92:ee:ce:3d:9c:a3:cc:85:0b:8b:2e:9c:eb:66:
         e1:c1:57:fe:0b:96:5f:46:93:4b:ae:92:0a:51:8a:a5:d3:db:
         b3:b6:c0:24:77:9b:3c:74:a7:c1:b7:f9:e9:64:c9:f0:28:e0:
         39:4c:a9:7a:4a:56:35:24:18:7e:a8:6e:87:81:53:b3:9a:ba:
         2c:71:9f:6f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUSJHyZQqRiE9xM/99n/MEYVhPoBYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3
NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjQwOTE0MDExNzMyWhcNMjUwOTEzMDEyMjMy
WjAzMTEwLwYDVQQDEyg3MkQxNjgyREVCOEJDRUM1QkYwMDg4N0M3OTY1NDJFMjgz
NTBFQkNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Lvmr6UHb7u
dlmQ+ojXPSFs2t/Mlipk7dnIqrk7a2WE1apQZhZku0TJ5Ori/TB0fSXeqDPh7t6v
JWq6TsBb/3bQjd950pyfu8HcKS4DYlGInxcKIRaEB0UGkGhj5JgoaaSB0Ly/0oOs
ff5jj5BJqcHLO/KRyOp+j3e1IJOYAHUa8u6gN/nyV6vmfX1DBMpUL05U6YpcGDdy
BHPtOXkW3RsqDGZWKz448B6poZ8oLZ9w51xe1xmhIGfNLX1ttVh0bNjUBZtFZEpy
4xCoByglmjQWWLmkHjNxH2sbpiGLbGceWzAl4YE0ok0w1gCezTUVrnS0sRyzgECV
Ih71//s5ZQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFHLRaC3ri87FvwCIfHllQuKD
UOvMMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj
Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0
NTU4ZmRiZi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez
YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOtAMA0G
CSqGSIb3DQEBCwUAA4IBAQAlPxpCzFjOcW9T//D2RnDvY6UXooAYn8N/VQWIaUaU
I9CWw9y/fJJJ1Ukd8pRkLIdpZwJF1ufe3OqQKQ5XOCFmd/g9UZiIy3LRzxJ8GMHF
rfnQYJRYynFfwr/no7d1kGthTvIPBMYbseryKsLsucBvSNkO0DAJ/is33e25++1Q
5Ugh8U7IPGq97/b8phy8hHtDHttwRb/gmCWhimyWoBkSNuM7GZ5UTCZCI5UNZxXR
sHNWZskIbsFMku7OPZyjzIULiy6c62bhwVf+C5ZfRpNLrpIKUYql09uztsAkd5s8
dKfBt/npZMnwKOA5TKl6SlY1JBh+qG6HgVOzmroscZ9v
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org