Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630353a3a2f33322d3438203d3e2033323134.roa
File:                     326130343a366630353a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier:          oV/OhmkHVo0ZWFRe4t2sukNueLFNVxx4wrfcnTad8Jw=
Subject key identifier:   2A:A7:29:B6:2B:54:3D:19:EC:EC:EA:A8:C2:2E:6C:9A:BF:B1:EC:DF
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       4FF73E7F1C82E7384D024C077E4FA8776BFABBC0
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630353a3a2f33322d3438203d3e2033323134.roa
Signing time:             Sat 18 Jul 2026 01:56:16 +0000
ROA not before:           Sat 18 Jul 2026 01:51:16 +0000
ROA not after:            Sat 17 Jul 2027 01:56:16 +0000
asID:                     3214
IP address blocks:        2a04:6f05::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f7:3e:7f:1c:82:e7:38:4d:02:4c:07:7e:4f:a8:77:6b:fa:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jul 18 01:51:16 2026 GMT
            Not After : Jul 17 01:56:16 2027 GMT
        Subject: CN=2AA729B62B543D19ECECEAA8C22E6C9ABFB1ECDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:dc:9a:81:19:97:3e:9a:b5:6c:8f:f1:0a:
                    ab:06:96:97:0f:c1:c9:2f:2e:43:47:d0:d6:63:96:
                    9c:4c:52:8e:52:77:b5:2b:d2:9e:7e:dc:36:0b:ef:
                    38:85:e4:81:92:18:15:da:b9:e5:f4:97:d5:6c:64:
                    5f:0d:f5:ef:53:8d:91:3a:6f:87:c9:ae:a7:0c:a0:
                    a2:4a:4f:5a:5b:29:29:ac:3e:39:ba:66:fa:fb:30:
                    94:84:1a:40:d4:cd:e4:84:39:88:98:61:de:e5:a9:
                    5b:41:80:dc:8b:cb:84:4f:1c:07:88:30:07:02:e7:
                    38:22:bc:04:a1:90:d3:e2:fc:cf:d9:21:0c:b9:60:
                    87:ec:af:3c:88:6f:41:aa:e8:d1:bc:26:d2:d3:b0:
                    d4:28:58:8e:ad:8e:d4:b5:6d:99:e8:21:bb:bf:d9:
                    ec:16:6b:14:89:b3:50:df:17:f7:3a:14:b4:a3:e6:
                    01:7d:a9:4c:f7:1f:8a:a2:6d:7e:d8:62:fc:1f:9f:
                    eb:4f:6d:5e:4b:cd:7a:07:e0:dd:bf:ad:dd:90:5a:
                    2b:d7:09:a7:ea:95:a9:ee:03:03:c6:88:38:a7:0a:
                    51:b5:7d:1b:cb:e6:98:26:30:aa:bc:83:66:06:93:
                    ac:a1:7f:73:99:be:52:26:09:ab:b3:66:bf:cf:1f:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A7:29:B6:2B:54:3D:19:EC:EC:EA:A8:C2:2E:6C:9A:BF:B1:EC:DF
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630353a3a2f33322d3438203d3e2033323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:6f05::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:cf:13:ee:42:88:33:ea:14:d2:84:de:bb:23:c5:b4:e1:
         06:2a:a9:66:39:33:46:5f:8c:82:9f:55:94:d9:a4:cc:8f:5c:
         cd:7d:e2:72:b2:69:51:d5:35:d4:9f:b1:b7:4b:b8:20:15:ac:
         6b:31:48:4a:f8:de:ad:5c:22:cd:0b:e7:25:a3:e8:89:74:a2:
         ca:a0:df:ce:05:8e:bb:eb:f3:24:40:f3:4e:b2:de:bb:09:e6:
         0f:3d:3c:82:03:e6:1b:f4:2a:75:b6:29:3d:d9:cc:44:6d:06:
         b6:45:d1:ac:cf:37:5c:d7:a3:88:e4:2d:38:de:de:4c:f3:c2:
         58:5b:80:fa:ac:12:22:a5:ee:53:20:2b:9e:4a:03:8b:a9:ad:
         a3:f3:e6:4e:a4:4d:33:80:63:da:2e:68:67:2d:f1:a7:b0:da:
         0a:f7:62:f0:42:c2:6f:00:39:b9:1c:4e:3c:38:f2:26:64:87:
         cf:68:fb:55:dd:70:05:27:0f:f3:3e:38:f6:fd:7d:c2:1b:53:
         97:76:da:12:d1:1e:e3:9f:3a:53:dd:51:13:a8:59:e3:37:92:
         be:0e:e0:06:eb:f5:29:58:8b:f2:69:cd:70:65:3f:30:a8:a4:
         ba:55:b1:e0:77:d7:06:57:91:97:f7:87:f0:3f:8c:a4:cc:58:
         1e:b9:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----