Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa
File:                     323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (raw, json)
Hash identifier:          VRnAyYIyO0DJ7S8MRdroz72Bc5rhbYuWEqmtCLDdcZ4=
Subject key identifier:   16:94:DD:E6:4D:A2:E2:1D:A7:81:C0:53:42:B6:C9:01:9A:45:7B:6E
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       0B38BFD3A4760808FC12FEA05BC1C84E74F91299
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa
Signing time:             Thu 08 Jun 2023 11:06:27 +0000
ROA not before:           Thu 08 Jun 2023 11:01:27 +0000
ROA not after:            Thu 06 Jun 2024 11:06:27 +0000
asID:                     20473
IP address blocks:        2604:e4c0:120::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:38:bf:d3:a4:76:08:08:fc:12:fe:a0:5b:c1:c8:4e:74:f9:12:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Jun  8 11:01:27 2023 GMT
            Not After : Jun  6 11:06:27 2024 GMT
        Subject: CN=1694DDE64DA2E21DA781C05342B6C9019A457B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:bf:8e:ef:53:5b:9d:bf:08:5a:88:22:5f:
                    0d:27:bd:d5:a3:ec:99:75:e4:14:88:77:29:5b:cb:
                    c9:ea:f2:0d:c6:a2:c8:f2:b9:14:4d:09:dc:33:52:
                    92:4d:1e:c7:4f:a2:9c:68:24:b1:0c:fd:a1:9b:73:
                    a9:39:33:74:34:d5:f4:5f:8c:ff:50:5e:95:70:c7:
                    cf:79:cb:54:f3:0d:f0:a2:17:60:fb:f4:df:06:3b:
                    ec:fa:c1:92:e3:2d:a3:99:6e:59:32:c1:ab:c6:aa:
                    cc:a2:9f:fc:5f:9c:a3:45:12:59:40:d5:ea:0b:cc:
                    00:10:94:2d:e7:b2:82:e6:19:7c:93:a2:24:5c:be:
                    0e:5a:4d:8a:82:86:d7:09:60:25:3d:d3:16:e3:5e:
                    ef:8a:b7:34:25:28:4f:68:e7:31:a8:ee:7c:1a:5e:
                    f7:b6:30:67:5c:8b:2c:af:13:6a:ef:5b:31:a0:11:
                    b0:29:cb:99:00:9b:54:37:f4:7b:4b:83:a6:b9:00:
                    9c:25:18:05:86:a3:8d:05:1c:76:0b:4d:0f:bf:1c:
                    6d:f2:ba:73:6a:05:2e:1a:fb:ad:dc:94:5e:f2:32:
                    2a:a1:5f:f2:b1:c6:f9:23:54:90:74:4c:90:bd:4b:
                    4f:c7:0b:55:2d:e6:1a:7f:db:84:03:64:e1:de:e5:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:94:DD:E6:4D:A2:E2:1D:A7:81:C0:53:42:B6:C9:01:9A:45:7B:6E
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:f3:e5:0a:90:13:3b:02:f7:bb:dc:c3:d3:4f:de:85:7d:16:
         28:85:ee:05:29:aa:87:84:39:72:fd:13:62:4c:c2:7a:1e:d5:
         8b:2d:ad:6f:7c:5c:27:f6:c5:ac:e9:38:81:44:18:8f:39:36:
         69:04:92:bd:d4:88:6f:2f:46:72:7e:2c:19:56:b2:08:02:8a:
         7b:83:45:50:d5:ea:7f:3b:d4:25:c8:0a:75:82:e7:c7:85:2f:
         a1:b9:84:37:7b:41:86:4d:ca:e3:a9:62:aa:16:7b:7f:0b:3e:
         8e:15:96:14:d9:d1:d5:01:b3:cf:9b:8f:01:f5:11:54:c7:c2:
         c4:9b:21:51:9f:10:a8:22:d9:a3:f2:0a:c0:d4:9f:37:40:56:
         58:90:06:30:58:98:e0:fc:1a:bb:b6:89:f0:08:54:8d:86:f9:
         42:2f:91:71:eb:34:5b:92:c2:7d:3d:38:65:78:9c:02:60:0c:
         24:40:8f:eb:67:4c:46:90:54:e3:80:77:c0:b6:0b:64:3e:c6:
         50:37:64:77:e1:88:8f:c5:02:f9:1c:da:0e:aa:34:c4:87:c2:
         f8:b7:da:f1:39:b5:f2:62:3a:ed:37:2e:d8:41:1f:75:df:75:
         df:67:d6:4b:2d:d2:f0:cb:09:3a:b6:b2:82:91:74:01:02:73:
         32:98:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:02:45 2024 by rpki-client on console-ams.rpki-client.org