Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa
File:                     323630343a653863303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          1L3r9dAb4ArTs+JwVFqTc6fBNWbhuqIUWzPbtIV0XLM=
Subject key identifier:   01:07:82:D9:AA:ED:A8:58:60:B5:57:EA:07:82:06:5C:98:4E:F7:37
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       0E1CA3855C92BB42227DADB385FCCBE860BA573A
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa
Signing time:             Sat 18 Jul 2026 01:56:16 +0000
ROA not before:           Sat 18 Jul 2026 01:51:16 +0000
ROA not after:            Sat 17 Jul 2027 01:56:16 +0000
asID:                     949
IP address blocks:        2604:e8c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1c:a3:85:5c:92:bb:42:22:7d:ad:b3:85:fc:cb:e8:60:ba:57:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Jul 18 01:51:16 2026 GMT
            Not After : Jul 17 01:56:16 2027 GMT
        Subject: CN=010782D9AAEDA85860B557EA0782065C984EF737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:04:1a:d5:a8:20:ad:1c:60:be:85:ba:c2:
                    33:e0:52:2b:8f:50:b2:87:17:69:99:2e:3b:46:fc:
                    62:0f:5d:73:8b:93:ec:6e:7b:a9:12:43:9e:83:91:
                    15:74:da:d2:e1:93:88:c1:3b:a4:21:72:c9:87:a1:
                    60:43:61:9c:74:04:81:f5:e6:1b:88:9c:19:ed:fb:
                    d1:4b:04:b8:e9:45:1b:0b:97:f0:d4:43:77:67:7e:
                    f0:d4:41:61:3b:5d:8e:43:2d:d2:b5:56:5c:0c:2e:
                    d1:06:d4:5f:d9:58:c0:64:02:87:02:d1:e3:da:ac:
                    bf:61:f9:8f:21:e3:bb:0e:da:26:32:10:87:e3:10:
                    d8:c0:36:76:2e:27:9c:68:c8:45:b7:d3:77:e4:51:
                    56:2e:ba:c8:f7:e3:df:ff:bb:23:bc:c3:26:cc:fa:
                    04:63:69:a9:03:5d:ce:9b:a5:08:6c:f2:9e:a4:b5:
                    30:04:d1:54:87:21:cb:34:9e:3e:51:a4:ef:36:b5:
                    34:3d:bb:20:85:11:f3:56:6c:1d:3e:00:ed:8c:b8:
                    90:a0:40:d7:ac:cb:c1:ef:fe:e8:d5:79:38:f6:96:
                    b2:c0:5d:f7:45:38:3b:44:6e:7e:ea:a3:ca:74:08:
                    73:88:58:24:18:6d:6e:58:f7:4f:26:94:36:ed:1b:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:07:82:D9:AA:ED:A8:58:60:B5:57:EA:07:82:06:5C:98:4E:F7:37
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:8e:da:bc:ee:f8:88:97:75:27:fc:78:f6:cd:72:59:c1:6c:
         b9:2f:a9:d7:31:bb:ad:39:5b:c0:3f:0f:5a:e9:0e:a4:35:fb:
         94:bb:f3:08:fb:78:0f:4e:66:95:85:0d:aa:09:86:83:9c:60:
         52:cf:cb:51:d7:bb:f2:96:2e:d4:c6:93:3c:94:17:a9:c7:84:
         99:28:f3:ad:a6:c9:b8:21:d2:c6:52:de:da:0a:bd:4c:24:fb:
         c8:97:bb:c7:33:37:f1:4a:f2:4f:30:f6:ff:d1:78:f8:35:f6:
         40:08:ee:e8:d3:92:fd:78:f6:f2:0a:c4:fe:e1:24:e2:51:13:
         19:2a:e9:37:57:8d:43:e6:ad:8a:8f:2b:06:02:ec:f4:ef:3b:
         06:7f:28:62:70:7c:68:dd:57:a0:e0:c7:4d:d8:cd:98:fb:fd:
         e9:a4:34:44:6d:f4:07:5c:80:11:fa:e2:55:f7:d6:51:ec:7c:
         f7:50:de:5b:f7:5a:02:12:76:b7:01:04:9c:74:52:3c:cd:fb:
         20:ef:f3:58:68:0a:9d:de:5d:f1:78:41:ac:8d:83:49:89:57:
         e4:fd:4c:14:35:8e:0e:9f:a8:e1:59:e6:42:71:08:e4:55:42:
         22:dd:84:d3:94:11:26:6f:46:79:6a:35:30:97:2e:36:3f:9e:
         4a:79:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:48 2026 by rpki-client