Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e20393439.roa
File:                     323630343a653034303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          FeorOffA7nvhK0O5wuOdaGl7nFiRPsQXiTIBHI/9HDE=
Subject key identifier:   2C:1B:0C:57:7B:55:D6:4F:78:6F:C9:CC:7F:27:05:C9:87:CB:6E:90
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       36FD7B04C8CC443591213240444CC0AC62D33E3D
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e20393439.roa
Signing time:             Thu 12 Oct 2023 16:10:40 +0000
ROA not before:           Thu 12 Oct 2023 16:05:40 +0000
ROA not after:            Thu 10 Oct 2024 16:10:40 +0000
asID:                     949
IP address blocks:        2604:e040::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
                          rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fd:7b:04:c8:cc:44:35:91:21:32:40:44:4c:c0:ac:62:d3:3e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Oct 12 16:05:40 2023 GMT
            Not After : Oct 10 16:10:40 2024 GMT
        Subject: CN=2C1B0C577B55D64F786FC9CC7F2705C987CB6E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:f5:18:e3:8a:be:86:e0:b4:47:b0:6a:cf:
                    97:f1:ad:33:35:81:3c:72:bb:1c:c9:f5:ee:82:7a:
                    65:30:bc:c4:7d:4a:06:42:35:38:13:85:2b:03:41:
                    0b:5b:a2:09:97:29:da:6c:fd:05:88:f5:d7:95:65:
                    4a:92:02:6a:8c:07:85:7c:66:e5:1b:cd:4b:3e:a4:
                    02:4e:37:e2:5b:d4:f1:32:4f:ec:a0:1f:c2:8d:7b:
                    db:97:d2:0a:fd:47:72:22:a3:d7:e7:1d:33:fc:fd:
                    58:c1:5c:99:e9:70:22:ee:e3:f0:78:f8:cf:a7:81:
                    d5:56:6d:17:eb:6b:7d:86:61:e4:36:14:82:9f:9b:
                    46:84:3f:ef:33:fa:83:39:03:19:bc:31:59:4f:2e:
                    0a:36:fc:3d:75:ee:1b:22:83:7c:ac:e4:d1:7d:67:
                    2b:a7:0d:01:2f:d8:21:ef:02:cc:d2:3e:4d:f9:ba:
                    af:1d:ab:6e:5d:7a:da:2f:0a:15:4c:68:a7:ae:8b:
                    05:f4:87:bd:ef:68:c9:0a:37:0c:d0:7d:eb:bf:0e:
                    f9:18:b4:fe:f1:76:57:37:d0:30:4f:e3:1e:05:04:
                    40:7d:a6:4d:fe:87:dd:76:7a:c3:90:f8:0f:9a:ef:
                    75:97:69:47:e6:3f:7f:85:2f:2a:59:99:59:f8:9b:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:0C:57:7B:55:D6:4F:78:6F:C9:CC:7F:27:05:C9:87:CB:6E:90
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e040::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:24:83:d4:67:3c:0b:8f:da:ad:8b:55:2e:f5:e0:be:cd:
         69:7a:75:bd:28:44:6e:a0:b3:20:44:d2:bc:da:a9:ba:46:7c:
         cf:14:f7:37:a0:5a:95:92:f0:52:68:24:e5:a2:a9:d8:49:52:
         d9:17:1d:0b:1e:ae:a1:fc:14:60:de:2a:91:43:e1:84:df:07:
         a2:d9:09:04:a7:3d:a0:20:92:d4:2f:1f:49:3f:e5:1e:d2:db:
         fe:d2:82:a4:19:00:52:a6:2d:8a:18:0a:50:7e:8e:62:9c:66:
         42:17:8c:e5:7b:b4:18:85:86:1f:a2:5a:3d:0a:a8:54:22:55:
         6c:b7:a3:16:e4:14:c0:60:e0:dd:8a:9f:2b:3a:7b:5a:2e:67:
         a0:4a:13:45:a8:e5:f0:4d:36:83:5b:9b:e1:a4:74:19:ae:c4:
         95:58:53:f1:e9:a4:da:72:9e:e7:e5:ca:e6:c0:f8:6a:3a:c6:
         85:e3:38:fe:b9:33:80:7b:1a:6e:66:9c:5e:a4:99:af:4a:6e:
         0a:57:35:22:bd:19:a2:ce:49:b2:59:a9:1f:8c:78:de:fe:b9:
         db:a1:9f:c1:e9:c7:ea:a4:14:7d:62:e8:16:c1:dd:96:af:dc:
         35:ce:ca:f1:80:19:9f:8f:75:d0:ca:7c:57:37:55:88:af:80:
         1d:2f:32:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:17:16 2024 by rpki-client on console-ams.rpki-client.org