Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa
File:                     323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (raw, json)
Hash identifier:          0M9A9EMbK49IC3koRNNwo0IlIyzYVKYHHWg6mLppy3A=
Subject key identifier:   31:EE:CB:6C:F1:E2:51:19:C1:41:78:7C:17:07:02:CD:9A:23:34:C9
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       4AC85DFFA59365045B90E95EA4637F7D17CD162E
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa
Signing time:             Thu 09 May 2024 11:30:42 +0000
ROA not before:           Thu 09 May 2024 11:25:42 +0000
ROA not after:            Thu 08 May 2025 11:30:42 +0000
asID:                     20473
IP address blocks:        2604:e4c0:110::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 15:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c8:5d:ff:a5:93:65:04:5b:90:e9:5e:a4:63:7f:7d:17:cd:16:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: May  9 11:25:42 2024 GMT
            Not After : May  8 11:30:42 2025 GMT
        Subject: CN=31EECB6CF1E25119C141787C170702CD9A2334C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:fb:22:6c:d7:28:b5:2f:5e:62:a5:91:7b:
                    cc:8e:9a:c2:cf:85:86:7d:00:a0:6a:64:00:49:1f:
                    50:a5:3f:a6:87:ae:eb:4e:4b:6e:45:33:57:9a:a9:
                    67:63:d2:ac:0e:3c:8a:ca:9b:11:e3:91:4b:8e:8b:
                    89:bc:36:30:16:83:04:0f:a3:39:29:e3:7b:b8:cc:
                    67:23:de:e6:4a:29:64:39:06:25:1e:82:e4:10:21:
                    97:1d:48:0f:44:40:b5:00:82:8d:a5:b6:5c:7d:f7:
                    13:3f:54:0d:9d:61:89:db:63:5d:e6:d4:4a:a5:35:
                    cd:99:5b:f4:9b:a9:d9:93:6b:0c:3d:a8:e7:ae:18:
                    b0:32:dc:ea:3d:61:b3:6e:91:85:9c:96:44:3f:5c:
                    29:58:3d:d4:28:4d:f9:fd:5d:75:bc:40:21:fc:68:
                    2a:18:31:36:13:7c:27:98:97:b0:b1:a6:b0:84:c9:
                    05:d3:26:b3:77:7a:3a:66:1d:c0:20:44:98:94:21:
                    9f:35:8a:2b:6b:89:07:60:47:c3:57:df:9d:ff:56:
                    21:d9:50:8d:9e:da:c2:54:7c:20:e0:eb:40:fb:6f:
                    05:6b:35:0e:68:9f:54:8d:82:2b:bb:a9:e8:ab:3a:
                    2c:f4:8e:f6:20:19:42:58:4b:68:e5:57:86:27:28:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EE:CB:6C:F1:E2:51:19:C1:41:78:7C:17:07:02:CD:9A:23:34:C9
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:4e:ec:74:ea:b5:c9:22:89:ca:aa:19:96:86:2d:5f:b3:74:
         74:a0:53:82:82:24:e9:74:ec:9d:ca:64:f7:44:e7:7e:68:9a:
         26:65:73:91:42:d7:fc:ec:22:c4:e7:65:5c:4f:fd:a0:01:40:
         05:6c:c4:b9:e4:f7:d7:ca:e2:00:2a:6a:18:5e:24:34:c0:54:
         8b:1d:3d:47:aa:fb:0e:00:61:0f:c0:21:f0:b7:c1:a6:64:18:
         e1:60:fc:59:a0:c6:46:9e:5b:50:f8:7b:22:c1:1a:28:27:88:
         f3:50:00:c5:d3:f3:b6:07:79:f5:be:de:c2:81:bf:61:1c:c2:
         9a:1b:d2:c1:fb:72:b0:fb:b9:44:54:65:93:5e:d4:af:c9:41:
         b5:17:c1:bd:3c:2b:26:e8:71:16:fc:74:93:5a:9b:7a:cf:36:
         a3:89:4a:d5:8d:db:bd:ed:30:55:29:fe:71:e1:27:91:30:1a:
         f4:5c:08:a6:db:d2:8e:27:0b:96:78:8c:76:44:d6:41:05:2e:
         39:43:e0:75:75:68:97:a3:ce:b3:cd:d1:67:a7:42:de:77:24:
         f2:9f:05:fc:33:da:67:80:c5:c1:a8:29:30:d5:6e:1e:e9:c6:
         c0:4a:99:aa:30:b3:3f:bb:14:8f:4c:79:78:61:12:f3:c7:14:
         da:a8:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:53:45 2024 by rpki-client on console-ams.rpki-client.org