Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31302e302f32342d3234203d3e203336333531.roa
File:                     3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier:          7nCqQP668t4K34dMB0liljZJ86P/g1etfgjoU9VqqEA=
Subject key identifier:   A4:A4:99:09:D0:FC:14:62:B3:AF:65:5F:9E:13:09:84:50:94:FB:4E
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       6C71A62DE072B46007018C525F489B9FB9649BE7
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31302e302f32342d3234203d3e203336333531.roa
Signing time:             Sat 18 Jul 2026 01:56:14 +0000
ROA not before:           Sat 18 Jul 2026 01:51:14 +0000
ROA not after:            Sat 17 Jul 2027 01:56:14 +0000
asID:                     36351
IP address blocks:        104.245.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:71:a6:2d:e0:72:b4:60:07:01:8c:52:5f:48:9b:9f:b9:64:9b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul 18 01:51:14 2026 GMT
            Not After : Jul 17 01:56:14 2027 GMT
        Subject: CN=A4A49909D0FC1462B3AF655F9E1309845094FB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:bd:43:8f:d1:73:c9:c2:b6:9a:28:21:5b:
                    6b:93:9d:ff:2b:31:27:9d:27:48:c6:34:32:18:73:
                    96:d6:fa:24:3d:b4:73:cf:d7:6f:a4:31:c0:ea:9b:
                    63:ce:34:b5:8a:31:56:7b:ea:ae:10:a8:20:84:15:
                    2a:a8:39:5e:2e:da:e2:c1:b9:08:e7:e3:d9:3a:3e:
                    24:d1:3a:f5:02:90:08:a3:53:2c:ea:ca:23:45:e8:
                    60:ce:c6:11:dc:45:1c:14:0b:1a:46:39:d9:58:93:
                    e1:17:2c:99:bc:a5:27:21:5d:f0:0e:de:28:26:c0:
                    2f:18:90:ee:a6:bc:5f:32:c1:35:14:89:f8:79:a4:
                    26:6e:ef:3c:54:03:ea:98:07:a1:6f:bf:6c:c5:ae:
                    b6:4f:2d:a3:1b:bc:4e:81:67:9c:1c:b4:f2:44:d0:
                    42:4e:17:be:b3:8b:66:c0:9c:79:8d:d2:52:64:5b:
                    e3:29:69:c5:5c:45:8a:3d:04:36:d7:81:72:30:d3:
                    d3:ea:ff:b0:33:76:32:93:5a:83:30:8e:31:5a:ef:
                    02:4e:86:cc:1a:7d:21:5d:0c:8f:e7:05:a0:f0:66:
                    1a:7a:9e:76:81:46:8c:96:3a:18:5c:67:76:e8:70:
                    7e:c1:55:93:a0:a1:25:28:31:1d:2f:42:30:50:fe:
                    71:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A4:99:09:D0:FC:14:62:B3:AF:65:5F:9E:13:09:84:50:94:FB:4E
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31302e302f32342d3234203d3e203336333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:57:69:83:3f:c2:bb:45:37:8b:b2:9c:15:40:39:20:9a:29:
         1a:c2:0d:a2:02:70:70:31:ca:58:31:6f:c9:18:15:a1:bd:22:
         c6:52:2c:39:f8:34:ac:56:06:c8:5b:a8:1e:db:c7:0c:b0:16:
         6d:e3:9a:7b:42:eb:d7:7e:da:00:9d:76:43:f3:c0:fa:c0:1a:
         b5:00:5e:a8:57:6f:8a:83:82:70:1c:d4:de:0c:1c:19:7b:f7:
         17:1d:21:71:5f:c2:88:21:02:7a:17:88:79:9b:23:60:ad:69:
         3b:2b:9e:fd:f8:9b:12:1f:b4:62:f1:93:00:e5:ae:c6:fd:4a:
         6b:2b:8e:d1:a2:11:17:93:6a:26:9a:e4:7e:9d:6c:33:36:ce:
         25:eb:47:1f:a3:0d:b1:0d:42:d4:94:91:4e:fb:dd:12:da:39:
         e4:79:d8:05:26:f2:03:e8:21:b8:f3:51:33:46:a3:b2:96:47:
         91:fb:88:72:d5:32:2f:7e:13:4e:97:91:94:df:ac:c9:09:ad:
         20:72:01:5d:ac:bf:5a:96:83:c4:8f:00:5c:b5:38:37:d8:56:
         1e:e7:64:5b:16:3a:1b:22:45:38:1c:c9:3f:09:f9:30:12:e2:
         14:22:1a:64:c1:c4:22:ae:c1:2c:df:85:d8:41:30:85:4a:41:
         38:49:58:0c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbHGmLeBytGAHAYxSX0ibn7lkm+cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzE4MDE1MTE0WhcNMjcwNzE3MDE1NjE0
WjAzMTEwLwYDVQQDEyhBNEE0OTkwOUQwRkMxNDYyQjNBRjY1NUY5RTEzMDk4NDUw
OTRGQjRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRq9Q4/Rc8nC
tpooIVtrk53/KzEnnSdIxjQyGHOW1vokPbRzz9dvpDHA6ptjzjS1ijFWe+quEKgg
hBUqqDleLtriwbkI5+PZOj4k0Tr1ApAIo1Ms6sojRehgzsYR3EUcFAsaRjnZWJPh
FyyZvKUnIV3wDt4oJsAvGJDuprxfMsE1FIn4eaQmbu88VAPqmAehb79sxa62Ty2j
G7xOgWecHLTyRNBCThe+s4tmwJx5jdJSZFvjKWnFXEWKPQQ214FyMNPT6v+wM3Yy
k1qDMI4xWu8CTobMGn0hXQyP5wWg8GYaep52gUaMljoYXGd26HB+wVWToKElKDEd
L0IwUP5xqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKSkmQnQ/BRis69lX54TCYRQ
lPtOMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTMxMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM2MzMzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPUK
MA0GCSqGSIb3DQEBCwUAA4IBAQBFV2mDP8K7RTeLspwVQDkgmikawg2iAnBwMcpY
MW/JGBWhvSLGUiw5+DSsVgbIW6ge28cMsBZt45p7QuvXftoAnXZD88D6wBq1AF6o
V2+Kg4JwHNTeDBwZe/cXHSFxX8KIIQJ6F4h5myNgrWk7K579+JsSH7Ri8ZMA5a7G
/UprK47RohEXk2ommuR+nWwzNs4l60cfow2xDULUlJFO+90S2jnkedgFJvID6CG4
81EzRqOylkeR+4hy1TIvfhNOl5GU36zJCa0gcgFdrL9aloPEjwBctTg32FYe52Rb
FjobIkU4HMk/CfkwEuIUIhpkwcQirsEs34XYQTCFSkE4SVgM
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:20 2026 by rpki-client