Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa
File:                     36342e36392e33322e302f32302d3234203d3e203335393136.roa (raw, json)
Hash identifier:          rfAljoYpcOFjV2sIJbtZIYVhW+GVqeFQfsZDhTYyad8=
Subject key identifier:   01:B8:47:CE:F1:CF:9B:76:1F:F2:DD:CD:8C:18:48:75:9E:06:76:76
Certificate issuer:       /CN=e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583
Certificate serial:       7D6CA1C79F16ECB8EFA791A735B91A8A02C8DB4F
Authority key identifier: DD:B0:7F:4A:AD:2F:23:75:00:3F:B6:03:F8:B3:31:09:BC:65:B1:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa
Signing time:             Thu 16 Oct 2025 19:07:11 +0000
ROA not before:           Thu 16 Oct 2025 19:02:11 +0000
ROA not after:            Thu 15 Oct 2026 19:07:11 +0000
asID:                     35916
IP address blocks:        64.69.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6c:a1:c7:9f:16:ec:b8:ef:a7:91:a7:35:b9:1a:8a:02:c8:db:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583
        Validity
            Not Before: Oct 16 19:02:11 2025 GMT
            Not After : Oct 15 19:07:11 2026 GMT
        Subject: CN=01B847CEF1CF9B761FF2DDCD8C1848759E067676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:36:f9:ea:0a:7d:68:39:5a:89:b7:3f:fe:
                    93:90:cb:11:4c:9f:6a:de:f6:0c:b5:f6:b2:7a:c7:
                    52:89:c2:db:87:4f:46:2f:f3:a0:06:d7:7d:7d:ed:
                    0a:fd:8b:0a:cd:44:5c:5f:49:d3:0c:c6:44:44:51:
                    73:e9:c2:ec:ba:0e:c6:0f:c0:41:6f:84:d2:d5:35:
                    00:cb:d4:84:8b:be:d1:a4:48:0c:d5:96:84:c0:f5:
                    5f:3f:ac:8e:f2:8c:03:d3:70:7c:95:c0:7e:99:16:
                    35:8e:5a:c7:a0:5f:ab:98:2a:36:24:c2:c4:7b:2f:
                    62:97:d4:e8:21:b9:92:57:ec:52:cc:41:37:7a:12:
                    ea:99:e7:e0:aa:53:c2:5c:0f:87:fe:c0:11:07:24:
                    2b:4b:ff:b3:18:78:e9:0c:be:42:44:cb:3a:4a:49:
                    9f:03:57:fb:0c:8a:50:42:71:b6:f9:6b:7c:23:21:
                    68:c0:54:1c:16:2c:23:34:04:34:10:73:64:44:3a:
                    16:85:30:95:78:a5:9c:0e:9d:8c:98:61:17:f3:4f:
                    23:e8:a7:8d:e7:42:15:be:e9:b9:b4:ac:c5:7a:df:
                    45:fd:bc:e9:b7:d5:b8:e4:4a:77:dc:23:03:8f:28:
                    b3:39:51:09:3c:80:1a:65:d8:14:50:c3:3c:0b:30:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:47:CE:F1:CF:9B:76:1F:F2:DD:CD:8C:18:48:75:9E:06:76:76
            X509v3 Authority Key Identifier:
                keyid:DD:B0:7F:4A:AD:2F:23:75:00:3F:B6:03:F8:B3:31:09:BC:65:B1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/3/DDB07F4AAD2F2375003FB603F8B33109BC65B1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abbaf4a8-fe76-4c04-bd29-5708afe42a5d/e3dd7eaafd10dedc1b58e0f67ab384c13d3d7866ce97b1b583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/3/36342e36392e33322e302f32302d3234203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:61:18:31:c1:99:36:fe:df:cb:0e:b9:ee:2e:26:a1:52:23:
         72:b6:18:0e:77:79:ab:8b:37:8b:32:91:0b:ab:db:c4:89:af:
         be:50:f2:f4:45:a8:3a:35:fc:0d:fb:f7:66:53:ef:ee:9c:78:
         75:0a:ce:c9:47:18:74:de:aa:e2:f1:64:75:b2:b2:67:31:bb:
         74:4f:33:71:a7:ff:da:89:07:cf:b1:44:64:c0:b8:69:3a:c8:
         a1:e3:e9:5f:91:01:55:58:16:a7:7d:6f:c0:e6:a6:bf:b7:af:
         8a:75:95:af:78:bc:9c:ef:05:cf:c8:4f:be:0d:10:ac:2c:40:
         80:7d:3e:f2:48:96:13:ee:df:57:a6:60:45:60:ae:f2:d1:3b:
         af:c9:4d:b0:ae:06:9a:dc:ea:15:a7:0a:be:8d:de:17:32:e2:
         c7:d0:36:84:73:72:c8:8f:fa:ad:24:53:39:82:59:bc:e2:8a:
         ca:5c:6d:31:14:48:e9:0c:9a:70:a2:ea:be:77:4b:8d:04:2d:
         b2:ec:0c:67:52:5f:b3:d6:8a:70:10:21:29:09:6d:bc:ce:6a:
         8c:53:6c:d5:41:0c:73:37:d5:c4:46:80:5c:d3:7b:64:d6:df:
         7a:44:f2:97:8b:c2:39:20:a4:90:f9:52:2d:83:82:8a:a1:df:
         e5:c2:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:03 2025 by rpki-client