Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/2/323630373a396130303a3a2f33322d3332203d3e203335393136.roa
File:                     323630373a396130303a3a2f33322d3332203d3e203335393136.roa (raw, json)
Hash identifier:          buISxW4x+TBfQozytAydI+8yqppgFUeHOGqpilKIizU=
Subject key identifier:   14:84:D2:E4:E0:8F:D4:35:FD:69:E6:E1:3A:E6:E0:AD:F6:C2:51:59
Certificate issuer:       /CN=cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d
Certificate serial:       7E24D9FEC82C652963EE5D7EA3422196C6E1AD74
Authority key identifier: 54:63:A0:40:A4:DF:40:E0:D6:FA:4C:F7:D7:9B:C3:85:4E:70:5A:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/2/323630373a396130303a3a2f33322d3332203d3e203335393136.roa
Signing time:             Thu 16 Oct 2025 19:07:12 +0000
ROA not before:           Thu 16 Oct 2025 19:02:12 +0000
ROA not after:            Thu 15 Oct 2026 19:07:12 +0000
asID:                     35916
IP address blocks:        2607:9a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/53f49dd6-d1b1-4de7-a156-d48977daeb43.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/53f49dd6-d1b1-4de7-a156-d48977daeb43.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:24:d9:fe:c8:2c:65:29:63:ee:5d:7e:a3:42:21:96:c6:e1:ad:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d
        Validity
            Not Before: Oct 16 19:02:12 2025 GMT
            Not After : Oct 15 19:07:12 2026 GMT
        Subject: CN=1484D2E4E08FD435FD69E6E13AE6E0ADF6C25159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:a6:51:11:c3:59:37:b4:1f:90:05:63:5f:
                    5a:68:d7:b1:74:7e:08:86:7b:da:f8:b6:03:50:65:
                    df:6e:34:87:3b:f8:6e:1d:3a:e5:fd:81:3e:29:ca:
                    b5:a1:f1:b4:34:ad:83:43:74:41:86:e9:90:10:06:
                    b5:ff:e8:66:4e:18:78:07:fd:9f:57:d4:b4:77:e9:
                    7f:b7:e8:dc:72:ff:f8:73:68:57:d9:94:e6:22:49:
                    36:2d:a3:4f:48:69:64:51:9a:4f:35:54:a6:a0:8e:
                    3d:d6:18:29:c8:1b:c7:90:e8:a4:38:a0:5d:95:6c:
                    17:e1:20:40:61:25:0a:36:f7:dc:ed:73:dc:64:05:
                    15:29:29:d0:4d:f9:04:0d:1a:69:38:35:42:5b:58:
                    8f:55:3d:95:43:76:d5:3a:ed:9a:60:d5:bf:83:de:
                    cf:12:d9:85:d8:26:9d:e6:1a:dc:c4:63:d7:97:21:
                    a8:63:dd:14:85:df:59:15:8d:e5:7a:4d:47:ba:01:
                    ca:0b:bf:8a:b8:c0:8c:a7:65:af:34:99:fb:bb:a0:
                    b5:10:74:32:c6:e4:b2:1f:56:6f:9b:8d:de:81:a6:
                    c8:08:91:cc:6d:fe:70:05:5a:0c:3e:1e:57:27:e6:
                    9e:15:6b:c1:88:ef:e8:c8:8a:bd:d5:52:8a:d0:b7:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:84:D2:E4:E0:8F:D4:35:FD:69:E6:E1:3A:E6:E0:AD:F6:C2:51:59
            X509v3 Authority Key Identifier:
                keyid:54:63:A0:40:A4:DF:40:E0:D6:FA:4C:F7:D7:9B:C3:85:4E:70:5A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/2/5463A040A4DF40E0D6FA4CF7D79BC3854E705ABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53f49dd6-d1b1-4de7-a156-d48977daeb43/cf392b3981b80473864cbb50f6c8bb88508f19a9ff8e4fbe8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/2/323630373a396130303a3a2f33322d3332203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:ae:16:45:84:3e:87:a6:53:cb:1d:90:35:68:39:3e:17:
         75:6e:33:64:98:64:93:04:47:1e:93:ef:e2:22:85:37:70:23:
         c6:95:bb:61:19:c1:10:55:d5:32:f5:be:99:26:c2:c5:96:57:
         28:9f:4e:86:db:a0:e1:13:40:c3:b6:fc:fe:8e:1a:e7:6d:e2:
         25:b8:06:37:23:f6:23:7d:cd:16:20:d4:a6:6d:19:da:11:f2:
         bd:54:1d:7a:c3:4d:e8:bf:f3:80:23:dd:3c:ad:c3:3e:a4:53:
         1b:7f:d5:57:31:e0:84:76:44:37:4e:ca:a4:d0:58:4e:34:09:
         b9:48:de:88:a7:82:fe:2f:c2:47:4c:08:8e:84:95:61:b9:db:
         96:a1:91:e5:71:6e:38:cc:6c:af:02:8c:b3:75:d7:5d:b6:9b:
         df:41:05:c4:cb:35:b7:c1:fa:3f:e1:cb:d8:b5:29:a9:c7:f0:
         4d:68:31:cd:c6:49:6e:58:7b:1d:2a:32:15:79:03:7a:78:f2:
         b5:18:1f:d2:03:0f:4b:7a:bf:5f:7e:c8:98:07:26:f7:1c:a3:
         f6:88:31:cd:b1:72:39:4e:e9:6d:e3:74:33:aa:11:e9:5f:80:
         97:03:15:f1:1a:03:f6:77:a3:2c:a5:7a:93:c8:d5:16:24:aa:
         8c:29:4b:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:50 2025 by rpki-client