Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa
File:                     3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier:          5KsMd5ZfiH7Deo2rQfQBddRTkihKB76jmeWXMinXHcY=
Subject key identifier:   E4:91:F0:60:C7:0D:5F:90:86:15:28:81:56:65:C8:43:C0:5E:22:42
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       418CD7BC09111F5B22B42657D1A7AE7DC405005D
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa
Signing time:             Sat 18 Jul 2026 01:56:15 +0000
ROA not before:           Sat 18 Jul 2026 01:51:15 +0000
ROA not after:            Sat 17 Jul 2027 01:56:15 +0000
asID:                     6233
IP address blocks:        104.245.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8c:d7:bc:09:11:1f:5b:22:b4:26:57:d1:a7:ae:7d:c4:05:00:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul 18 01:51:15 2026 GMT
            Not After : Jul 17 01:56:15 2027 GMT
        Subject: CN=E491F060C70D5F90861528815665C843C05E2242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:2e:b1:86:f7:0a:a2:79:24:c3:d5:5e:a3:
                    ca:44:35:a2:84:da:7e:09:0d:f5:2a:29:34:5e:fe:
                    2a:99:01:aa:5c:35:26:4c:ff:10:d1:1a:56:f3:e7:
                    06:f2:d6:ea:33:97:01:a9:ef:66:89:2a:63:81:d8:
                    dc:85:0c:14:56:3d:9f:d5:b4:c3:6a:c1:31:47:4f:
                    12:f4:d8:c1:05:c2:58:cc:df:b6:f5:e2:4f:7b:c9:
                    43:77:50:4c:a7:ad:a4:7a:a3:51:e6:53:08:df:1e:
                    9b:af:9c:f8:58:99:79:45:7a:27:d3:30:68:98:07:
                    4c:9b:03:44:a9:8f:bb:dc:bb:00:ef:de:e7:d6:73:
                    f3:87:4a:89:97:4c:d4:ad:33:3d:f4:37:16:26:8b:
                    bb:b4:ca:7d:40:27:e9:71:b8:fe:1b:0b:a8:8d:5d:
                    b8:fb:7b:31:5d:42:c3:06:71:44:a2:cd:9e:17:3d:
                    82:3f:45:fb:5f:a2:6e:f2:d9:58:17:b0:29:06:23:
                    2b:97:b0:ab:12:0d:9e:53:fb:d6:eb:66:2a:38:6f:
                    ff:e6:4f:f5:d6:d5:e6:b6:2d:66:88:c9:26:aa:5d:
                    36:92:24:ef:70:1c:17:4d:8b:ce:39:16:92:ce:7c:
                    d3:6e:1a:05:e4:1d:fe:fa:6d:ee:07:38:b8:1f:8b:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:91:F0:60:C7:0D:5F:90:86:15:28:81:56:65:C8:43:C0:5E:22:42
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:13:01:83:6c:4a:5b:c0:6f:da:9e:82:7b:1a:eb:85:d2:fd:
         42:5b:de:80:fa:be:f5:d0:ff:ea:3e:b2:4d:da:b8:f9:77:8f:
         1d:f8:6d:9d:dd:c5:83:c2:68:60:35:50:74:80:91:a7:e5:9b:
         70:3b:ff:10:13:f9:ed:a3:53:95:07:cb:89:df:be:c6:b6:53:
         02:ba:c7:56:2b:dd:b1:a5:fc:07:5f:7d:8e:40:04:db:a5:7a:
         31:70:b4:cb:0b:46:de:04:ab:7d:85:52:e6:d4:49:7d:22:58:
         de:54:f4:e0:cb:49:3e:11:65:a5:d5:5e:1a:18:95:72:98:b3:
         0e:b8:75:0f:8f:11:c0:a7:42:87:87:d2:36:00:fa:16:61:0e:
         3d:f7:e2:47:7d:1c:8e:58:48:da:0b:34:f8:76:b8:17:40:c6:
         91:09:f8:9d:74:82:16:0d:a2:e2:fe:f6:16:20:1b:67:41:1a:
         fb:84:06:7c:ca:31:ac:f1:57:34:e7:a6:71:e3:49:bc:4e:dd:
         b8:9e:ca:4c:31:d5:8f:5d:71:0b:79:25:29:9d:8a:12:2b:55:
         76:eb:2e:51:b8:cc:d2:0f:43:a1:ee:17:84:f1:67:f4:99:92:
         8b:06:5d:9b:f5:e0:7d:a9:c3:d6:89:86:89:3f:97:e2:03:af:
         ee:4d:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:20 2026 by rpki-client