Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa
File:                     323630343a653463303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          Dh54F5J/pX9Vxh6OIyPNzqZO49zDu7X7uvpltncouJE=
Subject key identifier:   D9:61:C8:BF:21:AE:11:8A:4F:A3:CC:90:85:5D:53:13:38:67:B1:10
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       234032C04E519FF8DB8832E676584D6A4312A418
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa
Signing time:             Thu 12 Oct 2023 16:10:42 +0000
ROA not before:           Thu 12 Oct 2023 16:05:42 +0000
ROA not after:            Thu 10 Oct 2024 16:10:42 +0000
asID:                     949
IP address blocks:        2604:e4c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 00:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:40:32:c0:4e:51:9f:f8:db:88:32:e6:76:58:4d:6a:43:12:a4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Oct 12 16:05:42 2023 GMT
            Not After : Oct 10 16:10:42 2024 GMT
        Subject: CN=D961C8BF21AE118A4FA3CC90855D53133867B110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:74:5f:89:11:41:7b:f2:b3:7a:74:b6:4a:
                    42:28:38:d1:54:1e:f1:67:cb:85:33:ea:40:4c:8c:
                    ec:4c:5f:14:db:e7:c5:00:e5:9b:0b:64:53:0d:0b:
                    70:de:f6:f7:5e:b3:3d:e2:dd:42:9d:30:df:61:e1:
                    ed:5d:df:1c:f4:5f:2b:51:66:1f:db:84:b2:43:1c:
                    09:6d:13:3c:3b:cb:72:57:68:13:e4:1c:7f:54:fe:
                    58:73:3e:e0:cf:30:44:96:4b:51:c8:a4:60:47:8a:
                    d0:49:a9:c5:78:33:3e:12:f6:90:e8:33:85:1d:65:
                    36:ca:ea:e0:4c:54:38:cd:c4:41:d5:85:c1:79:5a:
                    9f:74:2f:67:71:b9:44:7b:5d:44:e8:0a:40:76:c2:
                    87:25:15:a0:2f:d4:66:c6:8a:3e:ea:61:60:8c:72:
                    67:d0:3d:98:89:08:8f:7e:80:ac:47:cb:af:b8:fb:
                    86:b5:58:37:13:7e:bf:19:e4:bc:ae:07:87:0f:58:
                    a9:04:05:eb:d6:73:65:3a:dc:6c:d6:17:e2:ef:c9:
                    13:2a:2e:9e:c4:ef:2b:46:07:b8:3a:96:1d:e9:ac:
                    af:70:fa:3d:72:5a:28:03:1d:da:3a:33:9b:c7:e7:
                    6d:e8:23:af:69:b3:3c:5f:13:d6:b7:a3:6c:94:9f:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:61:C8:BF:21:AE:11:8A:4F:A3:CC:90:85:5D:53:13:38:67:B1:10
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:68:c7:ec:60:40:b8:d6:a2:68:4f:ba:a5:bf:0b:65:20:70:
         2d:82:8b:c9:d2:55:0b:7d:ee:f8:15:65:ee:f7:3b:ef:98:b4:
         59:00:07:13:66:75:57:6b:15:54:93:3f:5f:7b:49:88:a3:11:
         73:1a:e4:5e:59:4d:38:fe:ca:9d:1b:f2:1b:7b:34:02:13:81:
         2d:ca:90:35:f1:4e:7e:ac:0d:72:5d:c4:71:75:80:e3:17:51:
         18:05:46:77:04:ab:a8:91:f6:fa:2a:ab:9d:d2:66:9f:35:a5:
         63:0f:6e:78:da:b2:51:f2:18:e5:77:5a:aa:be:84:78:04:3e:
         24:99:1f:77:1b:02:3c:69:35:10:c1:2a:c1:72:2e:e6:3f:65:
         fa:04:41:19:bb:8d:60:0e:af:8a:ff:83:50:96:fa:21:a4:1a:
         3b:f4:a8:8c:48:85:28:c4:0a:9d:38:c4:a8:fa:83:79:b7:1a:
         72:30:18:ec:64:12:13:f5:61:ee:e4:fd:f2:ae:4d:ec:b8:e2:
         98:ee:a3:1f:2e:5d:05:ae:00:04:b3:bf:92:e5:dc:25:ee:b0:
         b2:ad:62:6d:08:13:16:72:92:90:6a:3c:59:fd:68:20:ec:21:
         4b:6e:dc:9e:34:6c:9e:c2:ba:6f:88:21:32:e2:3c:ce:2c:4e:
         de:cb:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 03:01:07 2024 by rpki-client on console-ams.rpki-client.org