Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e203632383035.roa
File:                     323630343a653863303a3a2f33322d3438203d3e203632383035.roa (raw, json)
Hash identifier:          yg655+vEjBZvJ1YAQeyCLcVgIGt+WM8B/TtsFhUkT+4=
Subject key identifier:   25:4C:15:59:ED:26:09:10:D5:74:A9:EC:39:B8:63:7C:A4:43:C3:DD
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       3C9A52FB277ACB3CEA771E8B7B491272023243CE
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e203632383035.roa
Signing time:             Sat 16 Aug 2025 01:48:29 +0000
ROA not before:           Sat 16 Aug 2025 01:43:29 +0000
ROA not after:            Sat 15 Aug 2026 01:48:29 +0000
asID:                     62805
IP address blocks:        2604:e8c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9a:52:fb:27:7a:cb:3c:ea:77:1e:8b:7b:49:12:72:02:32:43:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Aug 16 01:43:29 2025 GMT
            Not After : Aug 15 01:48:29 2026 GMT
        Subject: CN=254C1559ED260910D574A9EC39B8637CA443C3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:2e:74:93:f7:c1:d5:7b:2c:d4:ba:3c:76:
                    d6:ab:3c:8f:0f:60:ab:69:1e:dc:a2:65:3f:3b:28:
                    df:4c:27:2c:83:bc:1c:6f:18:f7:7c:14:e0:a3:29:
                    9d:3f:88:dc:d9:ea:30:6d:35:97:ba:60:2b:66:e2:
                    c8:a5:ab:ae:5e:c9:04:ea:16:ec:fe:ac:63:8e:21:
                    76:d2:cb:80:42:56:72:23:22:78:61:88:bd:4f:65:
                    df:e4:b0:86:79:4b:90:89:24:5c:e5:c9:f4:e9:99:
                    a5:f9:6a:54:7c:f3:b7:76:82:9d:f4:cb:12:80:08:
                    17:37:84:d6:49:78:98:ed:ca:a1:e4:31:00:b9:65:
                    85:6b:e0:95:a0:f6:bc:26:e2:e0:a9:c4:f5:03:a3:
                    9b:53:6c:fd:cf:f5:89:ef:63:8b:a7:40:10:f2:d8:
                    a1:79:52:9b:58:a3:36:79:b8:b6:38:d0:b3:0a:fc:
                    50:d8:5f:bc:7d:3e:6a:6c:63:3d:50:47:c0:f5:4f:
                    7c:88:42:6a:5d:79:73:9b:c3:ff:66:74:43:7c:bd:
                    90:9b:a2:27:c2:0f:16:e8:01:4b:99:d7:6e:85:f3:
                    9d:31:ce:72:53:84:c5:b7:66:11:1b:9f:65:99:52:
                    bd:ae:d9:1c:4e:a3:f8:9f:9c:e1:45:c3:6d:71:8f:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4C:15:59:ED:26:09:10:D5:74:A9:EC:39:B8:63:7C:A4:43:C3:DD
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e203632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:ce:9f:84:31:aa:2b:e5:2f:08:6f:f1:d4:93:c4:2a:28:be:
         14:65:f9:6f:19:0e:1a:1a:3f:d1:88:1f:3d:6f:ec:1a:ad:22:
         f2:2b:ec:7d:a3:9c:ae:ca:d9:a7:2f:35:31:7a:63:fe:b5:6d:
         ce:96:4f:ea:5c:89:a4:ea:46:c0:22:8a:3d:c5:29:51:5d:23:
         d3:b2:d4:86:38:97:9a:df:3c:99:d4:2f:c8:60:07:6f:88:18:
         a8:a8:9f:39:1b:cf:a1:88:c4:4f:10:61:92:e3:ee:7d:53:88:
         33:ba:c7:8a:d0:d5:5f:96:da:70:d8:38:71:d5:11:92:c2:04:
         f2:a8:ea:d8:e8:26:a8:dc:b4:b4:bd:de:2f:0f:1a:d3:0c:16:
         79:a0:e7:c4:a3:4d:46:35:d9:d0:26:dc:fd:eb:45:92:a3:ea:
         19:c1:05:57:c3:02:6c:a2:4c:56:97:72:35:44:f9:7e:57:3e:
         ed:55:9d:d0:15:0a:30:ba:a5:cc:67:34:fc:96:6e:aa:28:63:
         45:b9:83:7f:74:78:a0:ee:dd:07:3b:5f:6f:7e:1d:d6:66:07:
         8d:52:30:da:57:51:9e:5d:39:e6:3a:0d:64:4f:0a:d7:d2:b7:
         63:cb:80:a4:9d:31:f2:05:e5:b4:bf:3f:68:48:37:59:65:32:
         ce:b8:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:02:00 2025 by rpki-client