Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa
File:                     323630343a656234303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          zUzM4Z++z0KY5OYMAbnVs/dIxRKl4KoosJhEA9jWiBM=
Subject key identifier:   8F:4B:8F:0A:44:B8:D3:1F:74:15:3B:02:97:B4:40:19:CF:C6:25:4C
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       0E68CEC39D631DB6492BBAD4152DC54227B00A36
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa
Signing time:             Thu 12 Oct 2023 16:10:41 +0000
ROA not before:           Thu 12 Oct 2023 16:05:41 +0000
ROA not after:            Thu 10 Oct 2024 16:10:41 +0000
asID:                     949
IP address blocks:        2604:eb40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 18:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:68:ce:c3:9d:63:1d:b6:49:2b:ba:d4:15:2d:c5:42:27:b0:0a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Oct 12 16:05:41 2023 GMT
            Not After : Oct 10 16:10:41 2024 GMT
        Subject: CN=8F4B8F0A44B8D31F74153B0297B44019CFC6254C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:17:86:39:d7:12:3c:80:95:ab:f7:05:81:
                    37:b2:15:ef:d0:77:12:8a:67:5d:17:7c:cf:a3:97:
                    63:6f:5d:09:bb:0a:1f:29:da:72:70:4b:c4:33:a3:
                    3b:7b:f3:5e:3f:ba:02:38:4d:16:0f:dc:2b:8e:14:
                    84:c1:87:da:c0:24:0a:c6:8c:f6:92:98:a9:d7:ec:
                    f3:b7:0b:84:55:c5:c7:33:e4:44:80:83:68:10:ed:
                    a1:6f:f2:0b:9b:e2:b0:d0:39:a6:1e:2e:10:83:27:
                    8b:f8:61:9b:e7:4e:af:cb:5e:e3:38:2f:27:b3:c6:
                    0c:df:fd:9a:eb:a7:bc:75:ca:2d:16:14:99:fb:fe:
                    be:e5:f4:f6:8a:99:f5:fb:e4:76:cb:80:45:c8:97:
                    b0:a7:8b:15:ea:c4:e6:7c:4f:02:25:ce:e7:f3:cd:
                    81:dc:93:9a:cb:39:ad:ac:6c:42:df:3b:0b:45:d0:
                    08:8d:55:2e:d6:54:05:4f:76:da:fc:35:06:df:61:
                    08:ed:ee:3d:a1:de:d6:e3:7e:17:40:e7:8d:7d:15:
                    d7:e1:ad:08:46:68:6e:0a:86:54:6f:fe:ef:0d:c6:
                    f3:01:1e:fd:de:32:ea:b3:05:f0:a2:1c:99:87:29:
                    06:10:44:05:d2:fb:0e:b3:c2:25:b6:16:32:ca:b6:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4B:8F:0A:44:B8:D3:1F:74:15:3B:02:97:B4:40:19:CF:C6:25:4C
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:ec:73:70:4c:72:8f:c6:49:58:34:0a:55:0b:76:2c:a5:b2:
         46:65:ee:ce:4f:a9:8c:1b:71:d9:50:79:4c:dd:54:b7:c6:3b:
         a4:cc:72:2f:5d:88:27:60:38:de:b2:0a:93:58:48:84:e5:87:
         d6:dc:50:b6:8a:fe:40:54:35:3e:3a:ee:77:ee:2f:30:20:32:
         d6:30:d8:5e:1c:cb:48:4c:dd:89:c5:21:c5:52:7f:ca:dc:7a:
         d0:7a:02:14:d8:b2:13:dc:c6:5d:d2:81:57:dc:51:af:c4:4e:
         d2:1e:a3:a2:2b:42:10:e0:e8:34:63:8a:f2:22:4e:52:77:6a:
         b0:f2:05:a1:b8:0c:99:29:7d:51:66:e7:46:d9:0f:f0:8c:20:
         0f:42:43:f5:24:0e:6f:15:b6:f8:12:da:b7:e3:1a:b6:b1:97:
         19:49:9c:74:0c:ab:f5:7d:a5:12:ae:01:c1:e1:51:4e:ae:90:
         9d:5e:be:36:57:14:e1:ab:93:cd:ce:34:e8:f7:fc:c3:02:92:
         e4:b4:a2:e3:b0:dc:dc:88:07:3c:06:b1:63:2f:34:a5:f7:07:
         a2:95:55:db:49:d5:21:5c:48:44:ec:43:4b:e5:d5:67:c9:fd:
         b9:4c:40:e7:f4:e5:52:81:bb:2c:1e:18:2e:55:69:b2:4e:7a:
         ce:5d:96:a8
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIUDmjOw51jHbZJK7rUFS3FQiewCjYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3
NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjMxMDEyMTYwNTQxWhcNMjQxMDEwMTYxMDQx
WjAzMTEwLwYDVQQDEyg4RjRCOEYwQTQ0QjhEMzFGNzQxNTNCMDI5N0I0NDAxOUNG
QzYyNTRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4sXhjnXEjyA
lav3BYE3shXv0HcSimddF3zPo5djb10JuwofKdpycEvEM6M7e/NeP7oCOE0WD9wr
jhSEwYfawCQKxoz2kpip1+zztwuEVcXHM+REgINoEO2hb/ILm+Kw0DmmHi4QgyeL
+GGb506vy17jOC8ns8YM3/2a66e8dcotFhSZ+/6+5fT2ipn1++R2y4BFyJewp4sV
6sTmfE8CJc7n882B3JOayzmtrGxC3zsLRdAIjVUu1lQFT3ba/DUG32EI7e49od7W
434XQOeNfRXX4a0IRmhuCoZUb/7vDcbzAR793jLqswXwohyZhykGEEQF0vsOs8Il
thYyyrZDnwIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFI9LjwpEuNMfdBU7Ape0QBnP
xiVMMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj
Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0
NTU4ZmRiZi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez
YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrQDANBgkq
hkiG9w0BAQsFAAOCAQEAwOxzcExyj8ZJWDQKVQt2LKWyRmXuzk+pjBtx2VB5TN1U
t8Y7pMxyL12IJ2A43rIKk1hIhOWH1txQtor+QFQ1Pjrud+4vMCAy1jDYXhzLSEzd
icUhxVJ/ytx60HoCFNiyE9zGXdKBV9xRr8RO0h6joitCEODoNGOK8iJOUndqsPIF
obgMmSl9UWbnRtkP8IwgD0JD9SQObxW2+BLat+MatrGXGUmcdAyr9X2lEq4BweFR
Tq6QnV6+NlcU4auTzc406Pf8wwKS5LSi47Dc3IgHPAaxYy80pfcHopVV20nVIVxI
ROxDS+XVZ8n9uUxA5/TlUoG7LB4YLlVpsk56zl2WqA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 22:59:48 2024 by rpki-client on console-ams.rpki-client.org