Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa
File:                     323630343a656234303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          HMBcQL9zi4h4PLv+gp1lUV1HojBgbGsCYWyjyMCF+dE=
Subject key identifier:   75:67:16:2A:A4:A2:CE:B3:91:60:E9:02:A2:3E:C9:98:69:08:5C:D7
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       47EFCF361DAEA18AAB471ABBB280AA14ACD2C567
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa
Signing time:             Sat 14 Sep 2024 01:22:33 +0000
ROA not before:           Sat 14 Sep 2024 01:17:33 +0000
ROA not after:            Sat 13 Sep 2025 01:22:33 +0000
asID:                     949
IP address blocks:        2604:eb40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ef:cf:36:1d:ae:a1:8a:ab:47:1a:bb:b2:80:aa:14:ac:d2:c5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Sep 14 01:17:33 2024 GMT
            Not After : Sep 13 01:22:33 2025 GMT
        Subject: CN=7567162AA4A2CEB39160E902A23EC99869085CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:22:f6:75:d4:63:79:34:ac:82:b9:72:63:
                    2b:9b:23:7b:cb:73:da:90:c7:27:a4:27:19:6e:e3:
                    a5:4d:4f:f1:b9:61:2e:d7:7e:42:55:3c:de:59:03:
                    07:d1:b5:6c:5a:3c:fd:83:e0:4d:b5:cb:8c:5a:8c:
                    28:fa:8e:d4:dd:15:ea:a8:92:b5:b0:a1:8d:96:3c:
                    c8:8a:a3:fa:d5:5b:f3:ec:d8:7a:b6:5d:ce:56:80:
                    02:a2:ab:b3:49:68:05:ca:6d:09:82:83:34:b8:82:
                    29:57:c5:80:e6:01:f5:0b:d6:e6:c5:93:9d:a1:5f:
                    8c:12:d3:41:aa:be:83:15:69:68:d7:b4:26:9c:7f:
                    c4:55:cc:33:bf:62:9f:40:75:5c:4d:6b:8b:22:f1:
                    4f:08:fc:77:da:15:6f:84:a0:02:25:d5:04:8b:8f:
                    f7:2b:87:50:f4:60:14:b3:40:a0:2e:84:09:fe:82:
                    45:60:7a:4b:2c:87:7f:06:e3:43:24:33:da:29:0e:
                    9c:5c:ed:f6:55:6e:14:b2:f9:10:10:ef:f5:a1:1f:
                    be:ea:75:23:19:c7:4b:87:d9:f6:76:6a:0f:38:65:
                    a7:48:ca:85:74:08:9d:2f:8e:a7:fe:71:dd:01:a7:
                    5c:08:e8:6c:ac:a9:32:b6:56:8c:0c:74:75:e5:83:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:16:2A:A4:A2:CE:B3:91:60:E9:02:A2:3E:C9:98:69:08:5C:D7
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:ef:2f:cd:55:8d:b8:a7:47:37:d0:2f:ce:4b:e9:7f:b2:
         27:d9:9c:a5:61:26:9f:1f:75:e7:65:6e:d3:a2:ab:0b:24:55:
         24:1a:2a:e6:1f:e4:bf:1f:77:73:8b:f6:f5:ce:66:cb:1f:43:
         9e:36:98:da:0a:30:f6:cb:92:d0:01:0c:66:ef:e1:db:fd:e9:
         68:a0:86:2d:be:51:82:b8:24:20:d9:12:95:4b:88:61:87:7b:
         a6:f4:96:2c:5b:64:30:0e:0b:41:25:8b:11:cc:53:c1:78:8e:
         a9:f1:87:b9:2d:aa:78:f7:d9:ae:e8:47:d3:81:94:07:99:46:
         31:77:09:15:79:44:a5:b0:c9:ac:69:e9:83:22:3e:a1:8c:d2:
         62:9f:79:29:2a:4e:93:6a:db:cf:bb:d8:f0:bc:6f:45:f0:d9:
         10:22:e7:ab:2c:7f:b4:6f:3d:98:64:cc:de:95:8b:da:05:2a:
         b3:56:fe:8a:01:84:c1:db:86:0c:8e:30:32:05:5b:9c:57:c3:
         e0:86:45:5a:67:0e:be:3f:bf:43:12:7f:db:9b:b6:09:33:21:
         53:94:bb:19:f6:19:91:69:7d:68:8e:58:24:a8:df:03:8a:4e:
         07:0a:12:38:89:7c:b1:bb:1f:64:a0:fb:2d:0b:79:22:72:1f:
         b5:46:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:00 2024 by rpki-client on console-ams.rpki-client.org