Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa
File:                     3130342e3234352e382e302f32312d3234203d3e20393439.roa (raw, json)
Hash identifier:          FBjmsrEQNUx20Ql3bABz09BAYu9+ruUhsGidIVlRPbM=
Subject key identifier:   26:3C:DA:2B:4D:1E:FD:42:1A:DA:2C:F8:A4:59:FC:ED:91:00:83:CC
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       4AE7AE80CBB3B6EB55894CCC04B464C3508B7F31
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa
Signing time:             Sat 18 Jul 2026 01:56:14 +0000
ROA not before:           Sat 18 Jul 2026 01:51:14 +0000
ROA not after:            Sat 17 Jul 2027 01:56:14 +0000
asID:                     949
IP address blocks:        104.245.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e7:ae:80:cb:b3:b6:eb:55:89:4c:cc:04:b4:64:c3:50:8b:7f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul 18 01:51:14 2026 GMT
            Not After : Jul 17 01:56:14 2027 GMT
        Subject: CN=263CDA2B4D1EFD421ADA2CF8A459FCED910083CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:16:96:6b:bf:56:76:0a:58:57:5e:04:48:
                    28:33:1f:87:f9:62:f9:25:29:40:43:2a:77:4f:99:
                    e2:6f:6b:2c:38:f7:62:79:0b:9f:ad:c5:94:7a:74:
                    82:a4:a3:f6:36:74:0b:1e:2c:ac:1c:e6:56:53:a4:
                    3e:94:54:20:85:2b:fa:66:0a:ec:7d:34:22:9b:5d:
                    1c:86:d8:29:8d:f8:ae:96:66:87:ec:33:09:4a:47:
                    68:25:68:97:d2:13:e5:30:2d:5e:68:5e:6d:7e:a3:
                    a0:b7:79:15:75:e8:d2:3f:69:41:69:70:27:02:cc:
                    be:6e:a4:82:a5:de:d8:6b:3e:70:c8:5b:a1:92:58:
                    47:28:13:4f:5d:7d:53:2c:e9:32:bf:e2:9d:b3:18:
                    c2:df:4a:9d:ce:25:a6:09:de:64:a3:22:78:10:67:
                    99:b8:92:6b:fa:59:bd:58:44:bc:a1:a5:b6:b0:75:
                    32:d7:64:3d:57:08:31:5b:e6:b4:f8:e7:1d:a2:9f:
                    78:cc:ce:98:40:fd:c9:5a:0d:29:1c:e8:c8:b5:b8:
                    1a:69:4b:28:d6:cf:fa:5f:04:a1:fc:b5:be:cb:2e:
                    a7:dc:87:6d:32:6b:28:64:2b:51:79:23:f0:70:fd:
                    4c:08:65:89:9e:62:61:37:4a:42:1e:b1:ce:2b:90:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3C:DA:2B:4D:1E:FD:42:1A:DA:2C:F8:A4:59:FC:ED:91:00:83:CC
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:6a:80:b5:11:56:d8:b2:f2:a0:ec:c5:8a:0c:d4:14:0f:54:
         47:39:be:00:aa:84:4c:e6:65:4b:ef:df:99:57:df:b7:9f:a8:
         9a:9d:31:1c:02:e1:ee:06:a8:75:d8:16:79:be:06:5b:59:e2:
         f7:f3:32:80:96:31:50:5c:85:ec:a4:0d:f1:45:d7:0e:d0:ec:
         f9:0b:90:ac:79:c4:29:46:06:1b:15:34:a6:e6:57:e8:9d:a4:
         11:41:81:8f:65:d0:5a:4c:cd:f4:9c:77:18:1e:af:c9:40:76:
         78:fd:9b:23:03:4e:39:31:44:86:d5:b8:6a:cc:6a:22:93:de:
         10:e1:f9:d3:ed:b4:c3:25:ca:fc:ca:f1:7d:31:14:5b:19:9e:
         aa:ab:4a:63:a7:15:b7:03:a3:75:1e:91:3e:e5:c4:29:e9:7d:
         40:43:60:19:ef:a7:0f:8c:43:b4:3c:97:e3:8d:16:4b:a8:a0:
         36:e1:7b:84:e8:ff:52:2e:06:f8:fa:1f:f3:31:5c:e5:05:9d:
         9b:03:d4:77:16:4c:66:99:3e:79:60:d2:a5:f3:72:ac:1f:8e:
         e7:ba:4f:f7:ee:ff:8f:41:1e:f1:7e:b8:b1:e5:59:00:b9:14:
         9a:e9:7e:ea:5d:08:d0:fe:79:14:6f:52:c0:13:62:0d:a9:31:
         c1:97:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:09 2026 by rpki-client