Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2033323034.roa
File:                     323630353a336134303a3a2f33322d3438203d3e2033323034.roa (raw, json)
Hash identifier:          FAGNJm8qsdetd5aGlB178hLGOFzSumBnJErKgL6A5EE=
Subject key identifier:   CD:02:CC:D9:9A:A5:F4:BD:6C:23:C5:DD:A0:04:1D:B4:6D:A5:77:2F
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       7CEB9F1803539D43E1D66297A73146EB2F5DEB56
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2033323034.roa
Signing time:             Thu 02 Jul 2026 10:28:10 +0000
ROA not before:           Thu 02 Jul 2026 10:23:10 +0000
ROA not after:            Thu 01 Jul 2027 10:28:10 +0000
asID:                     3204
IP address blocks:        2605:3a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:9f:18:03:53:9d:43:e1:d6:62:97:a7:31:46:eb:2f:5d:eb:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jul  2 10:23:10 2026 GMT
            Not After : Jul  1 10:28:10 2027 GMT
        Subject: CN=CD02CCD99AA5F4BD6C23C5DDA0041DB46DA5772F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:ca:fc:2c:b8:25:28:d6:d4:ae:ca:cd:85:
                    8d:9c:da:c3:5e:6c:bc:2d:61:c9:85:4c:dd:05:17:
                    32:a7:1f:a1:e7:ab:2f:2a:f6:79:a3:fe:d1:8f:a2:
                    df:ca:81:62:15:1e:fd:33:c0:ad:07:a3:63:cd:20:
                    7b:33:cb:ae:97:1a:27:dd:21:68:97:8b:d4:9a:bc:
                    e2:3e:47:bd:f3:29:25:b9:57:30:0d:01:fc:24:77:
                    9e:8c:71:8e:11:e8:e6:ba:49:b5:f4:40:14:6d:fb:
                    c9:04:1a:94:73:73:e5:de:ee:83:3d:15:83:03:81:
                    7e:51:e6:2a:b3:bd:30:1a:b0:c1:62:4d:01:fa:d8:
                    d7:ff:6a:1f:79:9c:65:9f:7e:90:a3:8d:dc:59:e5:
                    44:ca:fa:e1:44:bd:36:86:b1:16:8c:c3:05:4f:d1:
                    10:7e:d9:62:b6:d9:25:14:ae:07:77:6a:31:ea:00:
                    10:a5:6f:f2:14:b1:e4:6f:7b:b9:b3:64:42:ec:65:
                    0a:14:5e:94:b3:41:0f:a6:96:d4:62:8c:1e:5b:ec:
                    62:4e:5e:20:20:7b:f7:a5:1c:2b:b0:37:5d:38:a1:
                    28:0c:e8:20:49:15:ab:4a:83:83:60:0a:21:2f:79:
                    65:c1:71:35:e8:d0:85:34:c5:60:ae:6f:3a:f5:67:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:02:CC:D9:9A:A5:F4:BD:6C:23:C5:DD:A0:04:1D:B4:6D:A5:77:2F
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2033323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:b8:22:84:5c:9b:fb:38:79:67:d0:f1:73:fa:f7:a1:2b:
         1c:0f:d9:69:2b:dd:63:9e:bc:df:07:d5:03:43:6b:bf:47:2a:
         77:a0:04:91:6f:14:55:6f:cd:40:1a:93:24:c6:47:ab:1a:92:
         0a:f3:42:2b:ba:90:e9:91:52:8e:23:89:0e:3f:cc:f2:56:7e:
         21:77:c5:e9:c0:98:f8:0d:3d:00:e5:77:9a:4d:83:e3:d2:17:
         4f:6d:65:c4:af:0f:c9:16:64:5f:2c:39:e0:a5:b2:a0:f5:d8:
         a1:33:df:fc:ed:f6:75:05:98:8a:1c:5e:86:d0:c9:12:d7:54:
         10:63:ec:1b:53:30:45:85:7f:8a:76:34:f8:99:da:96:03:e8:
         a4:c7:41:62:2d:50:77:11:cb:3e:83:09:38:b3:8d:69:ba:d2:
         fe:27:64:e7:88:b7:2c:a9:2f:c8:87:97:86:5b:e6:e8:1a:01:
         0a:1f:ac:39:a3:41:33:fe:4c:4d:01:c5:16:ba:cd:b3:d2:5e:
         f3:31:27:8b:3e:49:8b:6c:a2:7a:64:30:b1:69:c0:06:98:a8:
         2f:e0:cf:4c:02:b1:65:a6:df:f8:33:5f:be:a8:6a:02:44:88:
         ca:96:3f:cb:f8:36:90:db:6d:25:aa:85:ac:4b:7f:16:9c:97:
         80:9e:15:fa
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUfOufGANTnUPh1mKXpzFG6y9d61YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjYwNzAyMTAyMzEwWhcNMjcwNzAxMTAyODEw
WjAzMTEwLwYDVQQDEyhDRDAyQ0NEOTlBQTVGNEJENkMyM0M1RERBMDA0MURCNDZE
QTU3NzJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDjK/Cy4JSjW
1K7KzYWNnNrDXmy8LWHJhUzdBRcypx+h56svKvZ5o/7Rj6LfyoFiFR79M8CtB6Nj
zSB7M8uulxon3SFol4vUmrziPke98ykluVcwDQH8JHeejHGOEejmukm19EAUbfvJ
BBqUc3Pl3u6DPRWDA4F+UeYqs70wGrDBYk0B+tjX/2ofeZxln36Qo43cWeVEyvrh
RL02hrEWjMMFT9EQftlittklFK4Hd2ox6gAQpW/yFLHkb3u5s2RC7GUKFF6Us0EP
ppbUYoweW+xiTl4gIHv3pRwrsDddOKEoDOggSRWrSoODYAohL3llwXE16NCFNMVg
rm869WfRRwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFM0CzNmapfS9bCPF3aAEHbRt
pXcvMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez
YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBTpAMA0G
CSqGSIb3DQEBCwUAA4IBAQCsKLgihFyb+zh5Z9Dxc/r3oSscD9lpK91jnrzfB9UD
Q2u/Ryp3oASRbxRVb81AGpMkxkerGpIK80IrupDpkVKOI4kOP8zyVn4hd8XpwJj4
DT0A5XeaTYPj0hdPbWXErw/JFmRfLDngpbKg9dihM9/87fZ1BZiKHF6G0MkS11QQ
Y+wbUzBFhX+KdjT4mdqWA+ikx0FiLVB3Ecs+gwk4s41putL+J2TniLcsqS/Ih5eG
W+boGgEKH6w5o0Ez/kxNAcUWus2z0l7zMSeLPkmLbKJ6ZDCxacAGmKgv4M9MArFl
pt/4M1++qGoCRIjKlj/L+DaQ220lqoWsS38WnJeAnhX6
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:36 2026 by rpki-client