Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa
File:                     323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (raw, json)
Hash identifier:          iLBwT2VJX2JRx3QKmo0rT6J95LtEZpf22jVmEnBmjvM=
Subject key identifier:   99:2D:12:D2:FD:A8:04:98:AB:95:29:FB:5C:34:B5:16:3A:80:5D:C7
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       58AFD7225BD6C09EBFDD7BDB6890E77C2179F1F3
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa
Signing time:             Thu 09 May 2024 11:30:42 +0000
ROA not before:           Thu 09 May 2024 11:25:42 +0000
ROA not after:            Thu 08 May 2025 11:30:42 +0000
asID:                     20473
IP address blocks:        2604:e4c0:120::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 15:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:af:d7:22:5b:d6:c0:9e:bf:dd:7b:db:68:90:e7:7c:21:79:f1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: May  9 11:25:42 2024 GMT
            Not After : May  8 11:30:42 2025 GMT
        Subject: CN=992D12D2FDA80498AB9529FB5C34B5163A805DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:0f:01:e8:31:2e:5c:39:aa:9d:d6:1d:05:
                    2c:c0:15:1f:04:6e:70:4e:f4:0d:35:71:cf:29:4c:
                    72:b0:12:2e:4e:90:98:ca:94:b3:b4:c4:db:53:75:
                    b8:07:52:a9:89:44:38:43:ad:65:bb:67:4a:31:02:
                    90:4d:ff:39:55:9d:26:23:87:42:fa:b8:17:56:2d:
                    d7:5b:1a:26:92:2f:87:06:8d:3c:e0:fb:c4:b1:0b:
                    b2:ce:12:6e:f9:77:a3:cd:b5:0c:7f:c9:1e:b6:6d:
                    00:97:40:31:90:4f:ba:5b:b4:d8:08:1f:92:e9:7b:
                    40:49:16:ac:a1:ee:7d:fe:08:a4:0b:28:a1:0c:84:
                    c6:b2:7e:07:8f:ea:71:da:76:33:8a:ad:07:f2:90:
                    19:9f:00:ec:3d:c1:dc:6b:5c:79:79:23:56:44:69:
                    23:65:99:f4:b9:af:e0:c1:17:65:03:8f:0e:e0:4d:
                    66:7e:9f:ba:05:dd:b9:c8:f2:a6:eb:59:e5:c7:b0:
                    ab:93:31:db:2b:5a:18:56:2a:1a:52:20:cc:29:d0:
                    a6:ea:c1:3f:98:84:97:31:d0:a4:ce:0b:8d:97:ed:
                    68:a3:42:81:dc:61:da:0d:20:56:c6:f2:2c:26:30:
                    8f:11:17:9a:4a:11:9f:44:e7:0d:3a:ac:d3:6a:2e:
                    ce:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2D:12:D2:FD:A8:04:98:AB:95:29:FB:5C:34:B5:16:3A:80:5D:C7
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:ab:84:6f:28:e8:a0:69:fd:5d:e3:95:29:df:29:f8:cd:
         1e:68:7f:ad:2c:65:47:06:ae:f1:c0:af:98:5e:b0:38:31:08:
         69:aa:c5:76:06:c5:ae:d6:73:29:d2:42:37:39:ab:ea:e1:c6:
         02:6c:f0:e0:1f:00:a8:79:f8:db:8d:52:1b:37:ab:00:0a:d3:
         60:87:90:d5:4a:20:8d:08:be:c5:2f:86:91:d6:0b:a7:d2:13:
         56:d0:5e:22:ec:73:6c:f5:ac:4b:41:bc:8f:f6:43:c6:f0:fd:
         45:b5:30:c7:df:d6:6f:75:b9:c8:4d:a5:5f:0e:ff:f4:ee:e1:
         1d:f0:a2:b7:e3:bf:2f:ca:1d:3e:18:75:70:ef:5c:35:df:bf:
         ec:38:62:dd:58:91:1e:d4:96:b7:8d:15:1b:5d:43:b9:4a:ab:
         dc:97:3d:b1:51:ed:b4:63:db:c0:5c:c6:01:98:39:5f:5f:9e:
         e7:63:db:f2:da:bc:0f:3c:00:e0:a9:a9:86:e6:28:81:0c:f0:
         5e:5d:2b:b9:b3:c1:0d:3b:28:24:b3:1d:bf:52:59:d9:23:a1:
         62:a1:d8:0b:29:ee:a8:53:5b:20:22:ce:23:1d:13:be:b8:9b:
         37:81:2e:77:cb:ba:25:80:ad:ad:02:75:b7:07:95:bb:51:be:
         5c:6a:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:53:45 2024 by rpki-client on console-ams.rpki-client.org