Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa
File:                     323630343a653463303a3a2f33322d3438203d3e203131393330.roa (raw, json)
Hash identifier:          BEWR8qRkxlXQKeh2QL0nSN4LsmOv8en2iaZ7LEij5xw=
Subject key identifier:   DA:39:DC:19:E5:E3:E3:51:FE:A0:B7:4D:4E:7E:1B:46:A9:58:2D:A2
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       0C508BA37998BDC0305529E28FA31523829239F4
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa
Signing time:             Thu 12 Oct 2023 16:10:42 +0000
ROA not before:           Thu 12 Oct 2023 16:05:42 +0000
ROA not after:            Thu 10 Oct 2024 16:10:42 +0000
asID:                     11930
IP address blocks:        2604:e4c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 00:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:50:8b:a3:79:98:bd:c0:30:55:29:e2:8f:a3:15:23:82:92:39:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Oct 12 16:05:42 2023 GMT
            Not After : Oct 10 16:10:42 2024 GMT
        Subject: CN=DA39DC19E5E3E351FEA0B74D4E7E1B46A9582DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:51:aa:90:f3:ab:f8:55:b2:8a:31:ac:86:
                    d7:df:b6:16:65:5b:b6:3f:e7:7c:12:6c:4f:05:b2:
                    9d:e6:65:81:a0:6c:5c:39:e6:00:35:de:e1:40:6c:
                    fa:3a:e2:13:06:60:02:f9:34:f3:54:19:be:46:d8:
                    5f:70:45:db:48:1c:2b:7b:3e:5a:b9:02:85:b6:37:
                    0b:96:74:a1:dd:c6:31:cf:73:ee:6c:17:9c:c6:4b:
                    33:38:81:2c:af:b8:69:94:62:d1:e4:de:e7:76:44:
                    c6:97:35:95:89:46:de:2e:22:b2:65:52:c6:90:da:
                    d9:e6:68:a2:f3:14:c4:c4:d1:5a:b8:89:75:ae:b8:
                    75:59:0e:fa:c6:4e:47:86:3e:4f:a6:c4:b5:10:e2:
                    81:16:b7:44:02:fe:67:e4:51:96:b1:0a:9d:09:5e:
                    ef:f6:ed:0c:74:cc:49:07:fd:08:a4:84:49:18:15:
                    c7:85:fe:71:dc:3c:bb:e0:f6:65:07:d9:ad:0e:d1:
                    e8:4e:83:63:89:86:57:86:1a:8d:77:f1:c7:2f:bf:
                    28:43:c3:a5:18:5f:28:32:87:7e:e9:0d:a3:28:16:
                    bf:2d:30:5a:02:1c:db:d4:c8:63:3a:23:d8:eb:ad:
                    12:54:e7:31:3d:f8:00:e0:62:81:23:ca:17:63:1d:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:39:DC:19:E5:E3:E3:51:FE:A0:B7:4D:4E:7E:1B:46:A9:58:2D:A2
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:5d:5b:00:6a:49:a8:50:9e:10:f1:dd:90:5f:93:2b:fc:80:
         d4:4d:82:6b:1f:27:f8:ee:c6:b2:6c:71:41:75:23:db:23:91:
         e5:b7:62:16:2a:3b:99:7d:de:35:ed:73:88:b6:0b:e7:70:39:
         11:af:97:bf:58:99:14:dd:e9:52:fb:b8:cc:51:8d:75:db:b4:
         12:e3:35:23:d7:71:a8:cf:67:f7:43:e9:7c:fd:35:19:c8:b5:
         a6:33:21:0b:df:6a:58:ee:2e:49:1d:42:ce:12:e5:37:77:02:
         26:ca:3c:d3:cc:8f:b4:f5:61:86:6b:eb:69:2d:58:9a:0e:7f:
         18:63:04:45:06:f6:2e:39:02:9d:f1:78:99:17:eb:42:24:6e:
         95:9e:1d:fd:72:b3:6a:71:a0:be:2d:ae:1e:d8:a8:ce:30:33:
         f4:19:43:db:d5:d6:4d:db:12:a2:b0:f2:bc:1a:14:a4:52:39:
         6b:7a:eb:b8:5b:85:06:3c:ae:65:96:54:d4:a8:cc:f0:ef:23:
         71:40:fb:7f:59:fc:6f:77:74:5f:07:e4:0d:dd:e0:72:b8:b9:
         e9:f3:62:56:31:37:0a:31:c4:fe:fe:d0:35:f2:36:84:b9:33:
         78:eb:4c:ab:19:c0:20:2b:c9:27:44:e3:31:38:d4:41:81:67:
         2e:d8:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 03:01:07 2024 by rpki-client on console-ams.rpki-client.org