Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e2036323333.roa
File:                     32332e3134352e34382e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          fLA+JcVyXFSRaGO62MbDN1QQ5Ejf2/aKb2NWSo/Lsq8=
Subject key identifier:   44:F2:1A:C5:B7:78:23:A3:39:03:BD:4C:DE:65:37:C0:10:76:C2:5A
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       736B624C8F48EC4B4E5CCB705900332B38AB94A2
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 18 Jul 2026 01:56:15 +0000
ROA not before:           Sat 18 Jul 2026 01:51:15 +0000
ROA not after:            Sat 17 Jul 2027 01:56:15 +0000
asID:                     6233
IP address blocks:        23.145.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6b:62:4c:8f:48:ec:4b:4e:5c:cb:70:59:00:33:2b:38:ab:94:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jul 18 01:51:15 2026 GMT
            Not After : Jul 17 01:56:15 2027 GMT
        Subject: CN=44F21AC5B77823A33903BD4CDE6537C01076C25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:8b:d0:d9:f5:cf:2a:a6:5c:99:e2:80:87:
                    3f:ec:82:46:a2:ea:6d:b0:6b:e3:9e:ce:bb:dd:23:
                    b7:b3:93:8f:58:2a:58:4a:d1:11:ec:9c:4e:60:a6:
                    1b:33:96:0c:b7:a6:74:73:f2:93:3c:46:c4:f4:a9:
                    6f:44:b3:14:90:33:8b:fb:91:eb:55:2a:29:a4:a0:
                    e3:32:a2:ec:09:10:8a:9c:32:17:4a:b2:16:88:f3:
                    5e:4f:83:db:03:02:72:cc:f6:ee:df:a8:1f:c9:37:
                    d7:46:98:fa:cd:15:c2:bb:8f:76:a5:63:2d:45:af:
                    19:46:60:8e:c2:0e:ab:0b:f4:a4:92:53:22:63:99:
                    44:9c:9c:7c:53:28:b0:c6:d4:85:2f:a6:ec:3b:f3:
                    f4:2a:aa:e5:d3:fd:0d:1f:02:f5:a3:c0:6d:53:f9:
                    b8:1c:c9:31:55:eb:43:59:fc:36:09:f9:45:aa:a0:
                    5b:bb:54:3c:7c:21:77:c8:75:f7:59:56:5b:a3:33:
                    b8:74:57:ea:5a:b3:99:4c:33:07:f1:5b:7e:67:d8:
                    7f:8d:78:91:8d:14:6d:88:40:2d:76:37:00:6f:48:
                    1f:f4:a1:08:dc:97:74:85:6f:5c:d9:8c:e6:95:09:
                    84:e4:8d:76:25:0b:14:1f:d9:4f:af:64:02:84:47:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F2:1A:C5:B7:78:23:A3:39:03:BD:4C:DE:65:37:C0:10:76:C2:5A
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:cf:e8:50:6e:2e:cd:c2:c6:d0:ce:32:ad:b5:6e:e7:7c:
         8d:06:0e:9e:fe:e3:e5:1a:41:cf:38:83:99:30:f1:20:5a:41:
         1c:bd:26:9b:c1:48:cb:98:e5:64:dc:fc:d3:d3:da:01:15:79:
         8e:72:96:58:73:9c:b9:90:6f:cd:32:bf:e3:f1:33:31:da:6c:
         2a:9a:f5:79:36:5a:f3:de:d7:1a:f6:ab:14:d8:3c:9c:af:da:
         a3:15:44:de:65:99:c7:70:c5:4c:0a:0a:be:21:28:98:86:f2:
         0c:f4:c4:28:d7:54:be:6c:b1:26:ba:ea:7f:b2:90:b6:7b:d9:
         32:7c:37:82:63:22:dd:26:60:46:53:dc:f0:14:08:88:ed:e4:
         1b:33:8a:09:fb:85:3e:05:6b:37:62:47:bd:33:0f:c8:00:1f:
         b1:e9:aa:6b:66:e0:9f:47:16:13:98:2c:f4:41:1c:70:5f:6d:
         5e:4a:87:0b:86:87:fe:07:16:6d:bf:ec:96:b8:82:a7:f4:85:
         56:58:18:03:1e:00:44:20:78:9e:e2:7d:db:77:9b:2e:84:8c:
         75:75:b4:67:62:75:bf:5c:94:84:7e:f9:c4:0b:af:2b:de:fb:
         d2:68:43:40:6e:2d:e6:84:b6:c0:a8:53:e2:4a:65:4f:39:c7:
         6e:8a:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:16:07 2026 by rpki-client