Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/0/3230342e31332e3135322e302f32322d3234203d3e203335393136.roa
File:                     3230342e31332e3135322e302f32322d3234203d3e203335393136.roa (raw, json)
Hash identifier:          wuOO0pl8i532nUPuzr7Pn7coau0kbQrBVRf/8D1BUd8=
Subject key identifier:   EB:9C:65:BC:6F:01:BD:59:66:B5:50:1E:05:E6:9E:BE:ED:22:85:A5
Certificate issuer:       /CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Certificate serial:       58D0CF6CA2DF432EB34CFB7D1403B428B41154C4
Authority key identifier: DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/0/3230342e31332e3135322e302f32322d3234203d3e203335393136.roa
Signing time:             Thu 16 Oct 2025 19:07:11 +0000
ROA not before:           Thu 16 Oct 2025 19:02:11 +0000
ROA not after:            Thu 15 Oct 2026 19:07:11 +0000
asID:                     35916
IP address blocks:        204.13.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d0:cf:6c:a2:df:43:2e:b3:4c:fb:7d:14:03:b4:28:b4:11:54:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
        Validity
            Not Before: Oct 16 19:02:11 2025 GMT
            Not After : Oct 15 19:07:11 2026 GMT
        Subject: CN=EB9C65BC6F01BD5966B5501E05E69EBEED2285A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:65:f1:47:12:95:ca:91:30:a1:a8:c0:8f:
                    5c:fe:e3:d9:ab:f7:54:3b:11:b5:aa:0d:c9:f0:5f:
                    03:88:86:03:d4:5f:05:1c:03:39:d1:18:60:9b:90:
                    55:c7:4c:8f:8f:c1:c3:09:3d:52:e0:45:f4:d2:d4:
                    47:72:8a:c8:dc:f8:f0:f7:c9:82:e9:b3:79:eb:82:
                    d2:bf:42:c7:4e:32:f9:82:cf:69:e0:a2:7d:2b:75:
                    cc:4b:75:82:df:4a:a0:9e:ed:6e:56:af:e8:a1:59:
                    c8:89:ca:ae:3d:ee:ee:7f:51:b3:2c:70:f3:40:9e:
                    a1:11:96:b8:b1:47:af:7b:94:da:6c:99:9f:05:d9:
                    2c:dc:43:8b:94:76:0d:36:f6:be:1d:c2:cf:5a:f5:
                    19:81:1b:be:95:a7:a9:93:ca:da:85:c9:83:fc:3a:
                    21:b5:23:29:fc:74:69:ac:3c:0a:2d:9a:3a:db:5d:
                    d1:26:05:50:fc:ae:4d:6c:36:c8:96:58:e0:12:e5:
                    d0:08:b0:d3:93:7a:1a:b4:e8:87:f4:bb:8c:c4:99:
                    79:d9:85:f3:95:a9:db:52:52:cd:bf:63:a3:86:51:
                    47:98:5a:4f:3f:92:ac:eb:1d:10:51:bc:5a:f1:d9:
                    a8:d0:43:a0:f0:aa:c4:c5:53:dc:93:6d:18:ff:26:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9C:65:BC:6F:01:BD:59:66:B5:50:1E:05:E6:9E:BE:ED:22:85:A5
            X509v3 Authority Key Identifier:
                keyid:DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/0/3230342e31332e3135322e302f32322d3234203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:83:27:5f:3c:6f:6c:5a:25:f3:2f:ca:99:42:f4:71:1a:b1:
         44:b7:ed:c8:8f:91:c0:62:dd:66:15:c0:f0:30:9b:5b:97:71:
         7e:e6:5d:22:15:31:7c:7a:45:ab:75:86:47:b7:11:be:f8:19:
         7a:09:71:2d:e1:d9:57:02:b0:db:36:a3:06:d6:74:b3:f8:9e:
         e6:29:d8:a2:6e:28:d4:65:92:a2:58:3c:57:00:b0:40:05:a4:
         f3:db:13:e1:0c:bf:1f:60:80:05:a2:b8:ff:c5:87:dd:49:38:
         51:37:74:9b:26:9a:a8:20:9a:65:29:ab:04:e4:1f:f8:fb:bc:
         35:ba:a1:9c:8a:62:90:ca:0d:81:d5:7f:30:c8:a3:91:4b:de:
         12:75:e9:b9:b5:ca:0a:be:5e:37:d6:8f:5d:98:c3:83:7c:67:
         fb:b7:69:e9:2e:b4:9c:c4:f1:3a:93:70:b7:f8:ea:58:85:c2:
         fc:fa:6f:d3:f7:e9:d9:72:34:ea:50:3d:88:9b:8b:8d:39:ef:
         56:9b:20:49:5a:93:b8:b1:24:65:d5:87:d4:ef:57:54:20:76:
         7c:7f:7a:ba:4e:6f:45:1c:f6:02:16:95:cf:c7:a4:26:31:aa:
         35:c3:03:6a:ed:28:d5:45:ef:95:c5:38:6e:20:cf:e6:18:8e:
         3c:b1:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:35:36 2025 by rpki-client