Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa
File:                     323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa (raw, json)
Hash identifier:          MFRzUf+b99Mn6VGzftNoO4J6XD8RKulkMHJhjz9O5S0=
Subject key identifier:   D1:03:55:90:5A:48:2D:4D:0F:E2:B7:A0:83:B8:CD:86:A9:CC:44:EA
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       22B3E5C3D547A389FE961CDD27C6F86FC3FB4BFA
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa
Signing time:             Sat 16 Aug 2025 01:48:18 +0000
ROA not before:           Sat 16 Aug 2025 01:43:18 +0000
ROA not after:            Sat 15 Aug 2026 01:48:18 +0000
asID:                     26548
IP address blocks:        2605:3a40:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b3:e5:c3:d5:47:a3:89:fe:96:1c:dd:27:c6:f8:6f:c3:fb:4b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Aug 16 01:43:18 2025 GMT
            Not After : Aug 15 01:48:18 2026 GMT
        Subject: CN=D10355905A482D4D0FE2B7A083B8CD86A9CC44EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:03:09:15:f4:8a:aa:f6:ba:3f:4c:65:af:
                    6f:6d:56:07:0a:c3:cf:87:ce:e6:ce:a6:82:33:57:
                    c2:77:c6:34:0b:30:9c:cd:b7:79:cc:88:29:07:e5:
                    5d:f0:da:f2:f2:33:15:22:39:2e:dd:94:ba:6e:86:
                    92:77:e5:bc:da:dc:c5:09:31:cc:25:73:d0:6f:50:
                    12:be:a4:a8:b5:40:69:80:13:a3:38:a0:80:a4:b8:
                    b0:f0:d9:f1:6c:2c:eb:00:f2:30:af:34:ae:b6:6c:
                    17:76:66:02:8d:fe:07:21:38:e4:3b:08:f8:fe:42:
                    cc:a4:6a:42:5d:d6:43:f6:36:99:9a:3b:0c:28:e0:
                    65:ac:6c:91:ab:77:81:5b:90:62:62:f9:95:66:52:
                    c7:b3:ca:cd:7a:46:80:a8:61:dd:24:38:a0:66:72:
                    79:6c:2d:5b:f3:43:7e:e9:1d:cc:ff:d5:be:05:0b:
                    59:09:ed:49:7f:97:1f:2a:bc:b9:9b:c1:3b:27:b3:
                    0c:31:36:b0:7f:bc:3a:49:4c:60:31:3b:82:d4:5f:
                    cd:ff:b7:03:a3:11:95:28:87:4e:b7:9a:8b:be:c5:
                    26:09:f8:ff:ed:26:65:a9:7e:1b:02:0b:9a:88:53:
                    1a:1f:11:5f:45:67:ed:79:df:66:8e:71:db:80:bf:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:03:55:90:5A:48:2D:4D:0F:E2:B7:A0:83:B8:CD:86:A9:CC:44:EA
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:32:89:7a:2c:28:bf:b9:81:d2:b3:ba:81:64:7c:04:e5:
         bf:9a:e7:2f:5e:15:ff:fc:ae:35:c5:e9:6b:7d:67:ce:5a:68:
         2d:fd:5f:c8:f9:35:16:11:ed:f4:b3:31:c3:ec:71:e3:50:2a:
         1b:ef:88:8a:0f:43:ef:d9:ec:04:44:cf:86:96:78:f2:f1:2b:
         39:32:62:92:26:d5:4f:08:8f:2b:c6:f6:39:73:0a:ea:6e:ce:
         65:0d:93:dd:f5:0d:63:2d:56:eb:4d:f0:c0:4c:2f:cd:f9:47:
         24:9a:03:e3:de:26:0a:e3:f3:42:4a:01:d4:56:b0:8f:b2:e9:
         6d:50:5f:19:74:52:e4:d7:d1:44:53:9c:a6:a8:1f:45:80:76:
         2f:35:7d:1f:f4:14:ac:12:fa:27:ab:15:84:09:d1:d3:d1:46:
         d5:86:d7:fe:07:d6:04:e0:cc:bf:a6:cb:98:83:71:41:1a:24:
         3d:ba:16:bf:ba:ec:45:fb:8d:3c:4f:63:7b:f0:66:b8:4e:c6:
         f8:0c:a8:fd:1e:9f:f9:63:5d:a9:82:9d:29:6c:00:a9:d0:d7:
         2b:b5:a2:43:d2:63:74:0d:4e:92:16:00:7e:41:55:40:99:2f:
         aa:33:99:58:15:50:53:11:e6:31:dd:a3:ad:6d:c0:00:a3:11:
         47:27:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:29:38 2025 by rpki-client