Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa
File:                     323630353a336134303a3a2f33322d3438203d3e2036323333.roa (raw, json)
Hash identifier:          VSZfIOZKTlHFlOUr7FKdVXfv9/MxH2S4EbdD3c3KTyg=
Subject key identifier:   74:69:C5:DC:92:87:DE:42:AA:FF:ED:9A:50:78:C1:7B:E0:64:9D:23
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       5695A9C456B877254D12A46EC81A059AA0A93710
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa
Signing time:             Sat 18 Jul 2026 01:56:15 +0000
ROA not before:           Sat 18 Jul 2026 01:51:15 +0000
ROA not after:            Sat 17 Jul 2027 01:56:15 +0000
asID:                     6233
IP address blocks:        2605:3a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:95:a9:c4:56:b8:77:25:4d:12:a4:6e:c8:1a:05:9a:a0:a9:37:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jul 18 01:51:15 2026 GMT
            Not After : Jul 17 01:56:15 2027 GMT
        Subject: CN=7469C5DC9287DE42AAFFED9A5078C17BE0649D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:c6:e2:a9:89:1f:01:c7:f2:12:cd:e0:52:
                    c9:49:58:fe:5d:9f:8f:e2:09:4a:3b:0b:db:40:7a:
                    24:ed:9b:29:0e:ae:f0:11:81:47:77:dd:f6:f0:7b:
                    76:66:62:f3:36:80:08:15:2f:06:08:0f:aa:e4:0e:
                    35:9f:c9:83:26:16:f3:13:9c:49:6c:8c:f0:09:4f:
                    a6:5a:d0:7f:e6:fb:38:0d:62:38:cc:bb:94:f4:f2:
                    7b:89:ae:47:b9:8b:34:7c:e0:d4:87:b7:13:a2:60:
                    b1:9c:a3:db:1e:48:a6:79:6b:19:76:c1:6a:c1:f8:
                    68:a3:4f:d4:26:42:30:de:e1:8c:a8:fa:9d:0d:1b:
                    8a:a2:9c:7d:ef:3d:2b:b7:79:fd:fd:e4:10:7b:0b:
                    eb:2c:4c:df:d2:a5:6d:81:92:86:68:fc:10:40:f5:
                    df:03:9b:08:8b:10:6e:8b:d5:74:d7:a9:83:d2:2e:
                    2d:1e:32:eb:d2:04:fa:54:9a:9d:e7:cc:b1:6e:8c:
                    47:e3:83:a8:ca:bc:30:18:3f:fb:d9:14:da:e2:a0:
                    36:85:64:35:f2:79:c6:2e:0b:9a:eb:85:9a:0d:ac:
                    92:3c:ac:cf:48:5d:76:82:23:8b:1c:39:53:fd:f7:
                    fe:9d:03:aa:4c:11:69:43:ad:31:d1:12:96:dc:3a:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:69:C5:DC:92:87:DE:42:AA:FF:ED:9A:50:78:C1:7B:E0:64:9D:23
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:0c:05:b2:b3:73:11:bb:24:e8:d1:7e:6e:7a:be:03:2b:a2:
         02:75:19:c3:6e:9b:00:34:e2:d9:35:c8:33:e2:e7:2e:dc:fc:
         97:fc:95:1b:f9:13:43:81:48:f8:4e:09:1d:cb:55:db:1c:c4:
         48:6d:1d:bd:48:29:1d:42:b8:3d:d3:fa:21:8e:f6:c0:a3:76:
         a3:eb:4f:7f:24:72:81:e5:87:15:aa:65:95:36:75:e5:4c:5d:
         9e:ce:9b:c6:27:01:3d:f2:29:ef:e8:10:5d:d1:0a:e4:1d:46:
         04:b2:0a:56:fc:41:e1:0c:94:6c:6f:9a:d2:67:9f:59:36:da:
         b6:3c:a2:76:57:72:7a:56:af:42:5c:a7:e2:c5:7e:70:8f:41:
         ec:91:0d:4c:16:e7:e3:37:15:19:4d:3e:c2:0f:b0:dc:8c:13:
         2d:5f:90:34:64:f4:78:90:0b:02:a3:aa:87:c2:c7:1b:9c:e4:
         d7:16:72:cb:6d:11:9f:0a:7d:14:b5:1e:40:a3:ba:36:09:6a:
         58:6a:e3:a7:59:1a:49:f6:65:eb:bb:9e:be:67:22:03:89:e6:
         22:43:59:76:06:93:6b:71:7d:ea:87:57:81:84:8a:0e:96:da:
         24:58:cc:14:79:d2:91:a8:54:20:b5:cc:e3:43:17:05:14:b4:
         51:16:ec:11
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUVpWpxFa4dyVNEqRuyBoFmqCpNxAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjYwNzE4MDE1MTE1WhcNMjcwNzE3MDE1NjE1
WjAzMTEwLwYDVQQDEyg3NDY5QzVEQzkyODdERTQyQUFGRkVEOUE1MDc4QzE3QkUw
NjQ5RDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQHG4qmJHwHH
8hLN4FLJSVj+XZ+P4glKOwvbQHok7ZspDq7wEYFHd9328Ht2ZmLzNoAIFS8GCA+q
5A41n8mDJhbzE5xJbIzwCU+mWtB/5vs4DWI4zLuU9PJ7ia5HuYs0fODUh7cTomCx
nKPbHkimeWsZdsFqwfhoo0/UJkIw3uGMqPqdDRuKopx97z0rt3n9/eQQewvrLEzf
0qVtgZKGaPwQQPXfA5sIixBui9V016mD0i4tHjLr0gT6VJqd58yxboxH44Ooyrww
GD/72RTa4qA2hWQ18nnGLgua64WaDaySPKzPSF12giOLHDlT/ff+nQOqTBFpQ60x
0RKW3DqWiwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFHRpxdySh95Cqv/tmlB4wXvg
ZJ0jMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez
YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBTpAMA0G
CSqGSIb3DQEBCwUAA4IBAQAcDAWys3MRuyTo0X5uer4DK6ICdRnDbpsANOLZNcgz
4ucu3PyX/JUb+RNDgUj4Tgkdy1XbHMRIbR29SCkdQrg90/ohjvbAo3aj609/JHKB
5YcVqmWVNnXlTF2ezpvGJwE98inv6BBd0QrkHUYEsgpW/EHhDJRsb5rSZ59ZNtq2
PKJ2V3J6Vq9CXKfixX5wj0HskQ1MFufjNxUZTT7CD7DcjBMtX5A0ZPR4kAsCo6qH
wscbnOTXFnLLbRGfCn0UtR5Ao7o2CWpYauOnWRpJ9mXru56+ZyIDieYiQ1l2BpNr
cX3qh1eBhIoOltokWMwUedKRqFQgtczjQxcFFLRRFuwR
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:06 2026 by rpki-client