Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa
File:                     323630353a336134303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          W9XwHcfBYPV8koLi2PboWhQN7yR3mqruvnxcVuCVnCg=
Subject key identifier:   8B:16:2A:49:92:39:92:98:D8:07:CF:2B:BB:8E:A9:19:57:D5:F9:EF
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       766129658AB1D439645CFA1EFA27490B93EE897C
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa
Signing time:             Sat 18 Jul 2026 01:56:15 +0000
ROA not before:           Sat 18 Jul 2026 01:51:15 +0000
ROA not after:            Sat 17 Jul 2027 01:56:15 +0000
asID:                     949
IP address blocks:        2605:3a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:61:29:65:8a:b1:d4:39:64:5c:fa:1e:fa:27:49:0b:93:ee:89:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jul 18 01:51:15 2026 GMT
            Not After : Jul 17 01:56:15 2027 GMT
        Subject: CN=8B162A4992399298D807CF2BBB8EA91957D5F9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:d9:fc:c0:d1:98:17:3d:18:b8:be:45:59:
                    1f:54:38:79:93:93:a4:1a:f0:67:26:54:2c:fd:b8:
                    d7:8a:c0:15:a5:14:92:34:e7:14:c8:bf:93:ce:69:
                    2c:41:97:af:f5:4b:90:ff:1c:e7:3e:65:a5:39:7d:
                    48:09:39:c5:19:44:94:9a:d9:7d:f0:cb:bf:c9:89:
                    b2:87:ca:87:b1:15:32:9b:79:bd:fa:25:0d:42:4b:
                    02:dd:8c:bf:7f:b4:34:83:94:84:32:72:27:e9:7a:
                    9f:e3:33:4d:f2:df:35:2b:92:40:4a:06:01:02:df:
                    7c:87:a6:31:87:81:a5:5e:ac:39:4f:84:c3:36:0a:
                    21:4d:aa:7f:62:c2:70:c8:58:6a:79:39:df:42:c9:
                    a2:3d:7f:ae:47:22:d7:9d:8e:cf:72:3a:3d:ff:c2:
                    75:76:4d:18:82:2c:a4:64:24:29:6d:21:44:94:4f:
                    02:ca:14:f6:e0:38:80:49:58:2e:33:e3:23:67:7a:
                    31:07:ca:cd:3a:65:fe:cd:37:15:84:3c:96:cc:96:
                    a5:5b:89:de:4c:ab:43:b6:a9:0c:7b:ec:d2:a5:74:
                    45:47:dc:30:6a:88:26:32:e1:44:90:14:cc:a4:62:
                    86:11:3c:d9:cd:94:09:32:32:33:c1:6f:e3:e8:28:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:2A:49:92:39:92:98:D8:07:CF:2B:BB:8E:A9:19:57:D5:F9:EF
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:35:af:bd:32:eb:62:03:93:f2:a5:6b:e8:49:51:fa:ef:02:
         87:13:ed:fc:e0:56:16:11:8c:8e:12:82:24:ed:70:8e:40:7d:
         b4:07:18:24:12:b6:29:68:5a:5e:06:16:13:68:ce:aa:a5:47:
         14:6c:a9:5a:7e:37:fe:47:b0:17:ae:86:cd:5e:fc:d4:40:36:
         a7:25:fc:2f:56:3d:0f:a2:28:c5:dd:75:d4:19:6a:2f:46:f1:
         71:83:97:ff:d8:5a:2f:df:b6:eb:f6:dc:7b:de:4e:a4:75:ba:
         42:50:c0:a5:b4:b4:03:67:e8:5d:bf:a6:05:a7:93:69:62:4d:
         5e:1a:a5:3b:bd:d7:b8:ee:96:47:23:56:26:04:55:17:af:ca:
         99:9c:b5:2a:9f:0e:18:ec:89:9a:72:85:28:e8:49:1f:6a:05:
         05:3f:2f:d5:e1:31:dc:00:1a:e6:1a:19:38:f4:38:77:17:67:
         d2:33:aa:95:9b:fe:0c:cc:3c:08:e0:a6:ca:23:06:c1:48:e5:
         a5:68:26:f4:0e:df:38:27:7e:35:bf:d8:b7:1b:9f:8e:ac:dd:
         d3:d8:d9:cd:d2:80:66:a9:6e:2f:bf:bb:e3:fa:1c:85:ad:fd:
         31:3d:41:0b:33:88:db:bb:4e:54:91:a6:45:66:96:f7:5d:9e:
         dc:6c:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:06:05 2026 by rpki-client