Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/32332e3134322e3232342e302f32342d3234203d3e2036323333.roa
File:                     32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          URjxs2pYXMgSsRubS4bTPCGcSFCNZx3JFBExBL8gEVU=
Subject key identifier:   9C:92:A6:AB:65:29:E8:23:DF:84:60:36:56:27:EB:24:56:32:9B:C1
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       7431082E66231B9F92C0A15ACD5B7353642DFACB
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/32332e3134322e3232342e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 18 Jul 2026 01:56:16 +0000
ROA not before:           Sat 18 Jul 2026 01:51:16 +0000
ROA not after:            Sat 17 Jul 2027 01:56:16 +0000
asID:                     6233
IP address blocks:        23.142.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:31:08:2e:66:23:1b:9f:92:c0:a1:5a:cd:5b:73:53:64:2d:fa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Jul 18 01:51:16 2026 GMT
            Not After : Jul 17 01:56:16 2027 GMT
        Subject: CN=9C92A6AB6529E823DF8460365627EB2456329BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:4f:c8:4c:50:cc:45:00:1f:21:4f:ef:f8:
                    ca:c0:bb:52:15:35:cb:f6:4b:68:3d:37:9d:50:47:
                    4b:6f:e9:1b:35:3b:15:e2:99:0a:0b:61:4b:c4:ff:
                    38:1d:fb:88:c5:fa:b6:3b:ae:5e:15:43:3a:19:26:
                    4c:d1:e0:34:57:49:5e:0c:19:18:8e:cc:0a:f0:d1:
                    b0:5e:aa:af:b9:95:5e:8c:ae:15:3f:45:8c:02:5c:
                    61:6f:b3:f6:bd:86:13:87:9a:ec:6e:58:ca:a2:a3:
                    67:1f:b1:f6:20:f4:59:5c:d2:c5:69:df:26:00:d6:
                    82:b9:e3:6e:44:3f:2a:f8:40:63:79:1f:5c:a7:f1:
                    30:e9:82:dc:c0:78:72:05:fa:51:1c:55:13:7f:52:
                    2f:f3:06:d3:ef:aa:6f:65:24:c6:db:3e:46:8b:f4:
                    4f:d8:28:b4:b6:12:3a:b4:5d:ce:b6:5c:56:2e:26:
                    6e:25:cb:6f:1c:ec:4a:6f:f8:21:44:1b:b2:20:4a:
                    3c:16:5d:4c:c5:dc:19:2b:4d:30:14:28:e4:fb:74:
                    ba:86:31:28:e5:44:fd:61:d0:ce:6e:14:e1:3b:1c:
                    9d:d3:62:77:25:2a:04:74:4e:6e:92:bd:02:5a:ff:
                    0a:61:34:c0:fb:05:f5:84:b2:b8:f0:e8:7a:71:a3:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:92:A6:AB:65:29:E8:23:DF:84:60:36:56:27:EB:24:56:32:9B:C1
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/32332e3134322e3232342e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:32:17:3e:15:f8:77:d2:a1:3f:6f:0d:6b:3d:7f:91:6c:
         21:32:42:b4:75:46:c0:c5:74:d1:ac:fd:8c:ce:89:50:53:a6:
         8b:58:ff:0c:85:a6:85:97:b1:08:84:80:79:06:89:c1:49:55:
         bd:9a:af:c0:06:88:03:13:28:b8:8c:76:c5:53:32:8b:00:51:
         cd:08:26:14:58:6d:6c:92:51:08:20:4a:8f:bf:2e:a7:e3:7c:
         aa:b3:a4:b3:ce:e6:97:07:83:34:33:2b:97:07:66:bf:2f:f9:
         05:92:12:38:98:d4:7f:0c:cb:02:da:0e:e8:bb:6b:3f:10:10:
         05:80:8b:28:8f:32:64:e3:f8:d5:a5:6c:0e:34:d2:ae:c3:47:
         8a:b3:4d:8e:1e:36:78:98:5d:ff:15:74:f6:8f:ad:48:34:d8:
         14:b0:e8:2a:ea:d3:f5:cc:d8:6d:ef:05:0c:cc:18:59:c8:88:
         d3:85:b8:53:7e:7d:11:a9:f2:7a:c9:ae:26:a1:be:b9:32:3b:
         fa:b4:49:1c:5c:ad:7a:fc:76:19:90:b0:ba:5e:a2:bc:8e:f9:
         a6:09:e2:54:55:02:0a:d8:06:ef:cb:47:7d:45:7f:f2:2a:af:
         b0:92:fd:75:3e:88:a7:b0:37:18:76:9e:aa:17:42:69:be:a7:
         5e:08:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:37:40 2026 by rpki-client