Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630373a3a2f33322d3438203d3e2033323134.roa
File:                     326130343a366630373a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier:          gCd84HhnCrXP5WV+36ml3aFQ4WlX5vazDdo9FnWswOE=
Subject key identifier:   6F:95:E3:EA:8D:08:C2:B3:30:CB:EE:B0:6E:F1:DF:D8:F0:33:1E:BA
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       7444102573A3FE36224E1A166068566857C9627B
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630373a3a2f33322d3438203d3e2033323134.roa
Signing time:             Sat 18 Jul 2026 01:56:16 +0000
ROA not before:           Sat 18 Jul 2026 01:51:16 +0000
ROA not after:            Sat 17 Jul 2027 01:56:16 +0000
asID:                     3214
IP address blocks:        2a04:6f07::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:44:10:25:73:a3:fe:36:22:4e:1a:16:60:68:56:68:57:c9:62:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jul 18 01:51:16 2026 GMT
            Not After : Jul 17 01:56:16 2027 GMT
        Subject: CN=6F95E3EA8D08C2B330CBEEB06EF1DFD8F0331EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:3a:ef:76:9c:dc:dd:58:57:b3:d2:96:33:
                    8a:8d:a0:f0:2d:33:b5:3e:89:ac:4a:1b:49:9c:a9:
                    21:4d:00:ce:b8:84:4e:ef:0e:50:73:22:63:c7:09:
                    d9:c7:5d:87:a8:b5:21:f8:b4:74:f7:51:9b:34:cb:
                    44:69:17:d0:91:0e:96:2a:a3:2f:8d:96:31:a3:53:
                    7e:60:36:f3:6b:57:d2:fd:27:27:a4:a1:1a:77:6e:
                    a6:6a:a5:cf:20:ee:6c:68:96:5f:05:db:69:d0:73:
                    4b:10:98:de:4f:d1:9f:0b:2f:de:7f:e2:2e:f6:8c:
                    cf:fe:25:1b:28:c5:a8:59:56:64:e9:bf:52:c1:3a:
                    45:bf:70:bd:ab:2d:8b:ef:55:22:6a:fa:85:d7:6c:
                    3c:48:c1:63:d3:e0:1f:e1:67:48:b5:81:38:91:07:
                    e0:c4:84:36:ca:8a:3c:82:70:55:05:78:58:8b:67:
                    36:aa:87:68:02:2d:98:7b:17:b4:b2:37:6d:bd:d2:
                    14:d7:65:8b:13:20:1d:17:fe:69:84:f2:c1:8a:52:
                    1e:e7:5b:42:f5:b3:31:a7:f6:91:3a:10:2e:ac:8f:
                    c1:16:16:6b:7f:96:ed:07:23:45:5e:70:c4:54:cb:
                    d4:bf:19:f2:df:25:26:0a:d0:cf:7a:d2:0e:e9:c6:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:E3:EA:8D:08:C2:B3:30:CB:EE:B0:6E:F1:DF:D8:F0:33:1E:BA
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630373a3a2f33322d3438203d3e2033323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:6f07::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:55:fe:d7:53:d8:7d:77:97:37:7d:0b:0a:53:38:c0:c8:8c:
         3c:9c:ea:80:7b:98:c2:0b:6d:ab:e1:96:80:b0:bd:85:31:00:
         d7:23:6f:74:97:7c:60:5a:09:19:f6:89:a4:f0:9f:5a:81:d4:
         d3:c6:9f:58:e8:ee:30:70:2d:de:73:56:36:79:4e:1b:4e:0a:
         25:68:2c:2f:42:d4:3f:fc:b0:bf:03:c5:8b:04:db:ba:1f:2d:
         de:bf:5e:13:79:84:99:04:ed:7e:9d:c6:f9:56:df:b4:32:df:
         7d:9e:f5:82:db:7f:50:2b:c3:74:18:67:52:bf:9a:48:fb:f9:
         02:2a:f0:10:71:69:67:8d:3b:3a:72:54:03:dc:0d:f1:34:2e:
         1b:72:cf:71:0d:41:d8:bd:73:71:0b:ac:2d:16:a7:60:1e:4d:
         55:a1:81:90:49:c9:75:0e:a3:04:82:bf:ad:3d:f1:1c:6f:cd:
         f9:77:95:62:a9:8b:e7:78:4a:83:7f:83:cd:49:50:41:9d:c1:
         9f:94:33:c5:fa:87:28:b1:45:4a:e2:36:1c:83:ff:42:31:59:
         7a:61:8e:0f:92:dd:13:da:08:20:9f:fa:5d:d6:e9:00:b4:dc:
         c8:31:53:08:11:bc:43:dc:e4:79:3b:36:0d:77:93:5c:be:b2:
         36:72:09:cb
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIUdEQQJXOj/jYiThoWYGhWaFfJYnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNjA3MTgwMTUxMTZaFw0yNzA3MTcwMTU2MTZaMDMxMTAvBgNV
BAMTKDZGOTVFM0VBOEQwOEMyQjMzMENCRUVCMDZFRjFERkQ4RjAzMzFFQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ijrvdpzc3VhXs9KWM4qNoPAt
M7U+iaxKG0mcqSFNAM64hE7vDlBzImPHCdnHXYeotSH4tHT3UZs0y0RpF9CRDpYq
oy+NljGjU35gNvNrV9L9JyekoRp3bqZqpc8g7mxoll8F22nQc0sQmN5P0Z8LL95/
4i72jM/+JRsoxahZVmTpv1LBOkW/cL2rLYvvVSJq+oXXbDxIwWPT4B/hZ0i1gTiR
B+DEhDbKijyCcFUFeFiLZzaqh2gCLZh7F7SyN2290hTXZYsTIB0X/mmE8sGKUh7n
W0L1szGn9pE6EC6sj8EWFmt/lu0HI0VecMRUy9S/GfLfJSYK0M960g7pxooXAgMB
AAGjggHNMIIByTAdBgNVHQ4EFgQUb5Xj6o0IwrMwy+6wbvHf2PAzHrowHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zMjYxMzAzNDNhMzY2NjMwMzczYTNhMmYzMzMyMmQz
NDM4MjAzZDNlMjAzMzMyMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoEbwcwDQYJKoZIhvcNAQEL
BQADggEBAChV/tdT2H13lzd9CwpTOMDIjDyc6oB7mMILbavhloCwvYUxANcjb3SX
fGBaCRn2iaTwn1qB1NPGn1jo7jBwLd5zVjZ5ThtOCiVoLC9C1D/8sL8DxYsE27of
Ld6/XhN5hJkE7X6dxvlW37Qy332e9YLbf1Arw3QYZ1K/mkj7+QIq8BBxaWeNOzpy
VAPcDfE0Lhtyz3ENQdi9c3ELrC0Wp2AeTVWhgZBJyXUOowSCv6098Rxvzfl3lWKp
i+d4SoN/g81JUEGdwZ+UM8X6hyixRUriNhyD/0IxWXphjg+S3RPaCCCf+l3W6QC0
3MgxUwgRvEPc5Hk7Ng13k1y+sjZyCcs=
-----END CERTIFICATE-----