Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa
File:                     323630343a653034303a3a2f33322d3438203d3e203632353939.roa (raw, json)
Hash identifier:          Y9uUIf7JCIXyDmbEYYzWbewXUAXmGdQBxyKEJBp/GO4=
Subject key identifier:   6C:3D:17:60:C6:80:0F:58:FB:AC:9B:DD:B2:25:B0:D6:78:E7:30:4A
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       7E8CAFF62D30985A83FD2AC428D02783461637A9
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa
Signing time:             Thu 12 Oct 2023 16:10:40 +0000
ROA not before:           Thu 12 Oct 2023 16:05:40 +0000
ROA not after:            Thu 10 Oct 2024 16:10:40 +0000
asID:                     62599
IP address blocks:        2604:e040::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
                          rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8c:af:f6:2d:30:98:5a:83:fd:2a:c4:28:d0:27:83:46:16:37:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Oct 12 16:05:40 2023 GMT
            Not After : Oct 10 16:10:40 2024 GMT
        Subject: CN=6C3D1760C6800F58FBAC9BDDB225B0D678E7304A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:30:fe:b6:23:ba:0f:0a:a8:cc:01:4d:63:
                    4d:44:df:e2:0b:e0:91:56:10:1f:10:fa:c5:fb:9c:
                    56:48:22:68:01:ab:3a:f0:0b:00:b0:05:b0:fa:77:
                    70:59:e1:83:77:37:a7:3d:74:6a:2e:62:5e:4f:13:
                    9b:8c:28:78:58:79:b2:4a:81:62:5e:93:3e:58:f7:
                    64:16:7b:ba:8c:c6:7d:ad:10:e4:ad:29:2c:c4:96:
                    ba:7d:aa:f3:04:b5:fe:e1:3b:17:90:e1:ea:83:98:
                    c9:f1:71:46:62:7d:bd:39:81:ae:45:ed:28:74:09:
                    6d:ca:32:dc:58:8f:74:1b:5c:0d:5b:b7:5c:22:14:
                    53:72:51:6a:ac:2d:9e:f7:46:6e:b6:1d:98:4d:d0:
                    af:77:3d:b8:3b:12:91:dd:5c:d8:c0:12:1f:df:6f:
                    05:cd:69:57:12:e9:c6:a0:51:2a:b3:a6:ed:4b:8e:
                    ed:fc:b8:27:a6:32:d5:0a:da:ce:c8:b2:6e:96:16:
                    63:9c:40:15:4a:1f:11:54:70:c3:eb:2e:27:04:fe:
                    f4:0b:16:74:47:b8:74:db:86:23:bb:b8:93:93:fc:
                    ad:f1:8c:95:26:30:4a:b8:1f:ea:ea:79:bb:26:e7:
                    00:71:6b:4b:c0:1f:77:01:e1:28:65:aa:a3:62:f9:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3D:17:60:C6:80:0F:58:FB:AC:9B:DD:B2:25:B0:D6:78:E7:30:4A
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e040::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:15:0b:9a:41:e5:c4:4a:e3:ef:66:de:44:75:0f:c5:37:7e:
         79:ff:f9:02:c8:5e:12:34:4e:86:ae:a2:f5:4b:36:70:7f:00:
         8b:00:14:5b:88:5a:e3:9b:14:17:1b:22:37:6c:23:75:0c:45:
         df:0b:17:fc:a7:bd:72:27:45:77:64:ab:66:31:4a:9b:bd:bf:
         25:94:d0:df:dd:99:06:ea:aa:35:bb:78:83:2b:a3:d2:1c:fb:
         6a:16:30:0f:86:39:71:78:97:fd:49:6c:e4:c6:76:65:d1:94:
         d2:b1:e4:59:c8:76:dd:f2:e7:ab:89:f5:37:3a:0b:27:8c:45:
         d7:8f:71:99:cb:4e:86:e5:5a:73:7f:c0:fa:51:ad:43:de:3f:
         a3:e2:8a:68:9e:dd:03:f1:56:26:41:19:b1:d0:8a:7c:4a:46:
         62:a9:93:98:31:f6:de:aa:72:4c:18:3a:85:ba:da:b4:6e:f4:
         e2:45:ae:4c:a5:c3:83:76:2f:61:87:b8:44:e4:ce:59:ee:d9:
         7f:e0:04:11:e0:39:e4:50:90:c8:83:1d:f0:cb:ae:0c:ae:7e:
         01:3e:35:04:d2:76:e9:e3:30:2a:83:7f:5e:60:ce:49:8a:51:
         4f:08:05:fe:f5:7e:ce:66:b5:fc:48:bb:d9:df:13:45:e7:e2:
         50:a1:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:17:16 2024 by rpki-client on console-ams.rpki-client.org