Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
File:                     3130342e3234352e382e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier:          ZLQ3W4hdQXbTX+1hp0+Zem+0zRboUSg2cjQnisu1kTA=
Subject key identifier:   B1:5D:6B:3E:C8:04:18:A8:1F:8C:B0:99:40:FC:99:5F:32:69:C3:76
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       273F87ABA0B34DA7504D90556E71639E6E6853D5
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
Signing time:             Sat 16 Aug 2025 01:48:20 +0000
ROA not before:           Sat 16 Aug 2025 01:43:20 +0000
ROA not after:            Sat 15 Aug 2026 01:48:20 +0000
asID:                     36351
IP address blocks:        104.245.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3f:87:ab:a0:b3:4d:a7:50:4d:90:55:6e:71:63:9e:6e:68:53:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Aug 16 01:43:20 2025 GMT
            Not After : Aug 15 01:48:20 2026 GMT
        Subject: CN=B15D6B3EC80418A81F8CB09940FC995F3269C376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:5a:05:2c:6b:bd:00:e0:00:52:09:30:2e:
                    60:a3:c6:7b:1a:60:0c:c7:de:64:de:eb:94:b6:42:
                    11:90:f2:29:02:50:cf:88:9a:ab:8b:10:bc:19:2b:
                    f8:17:22:50:50:c1:38:da:0f:a3:a2:1b:0e:fb:87:
                    a2:79:a7:f9:e7:70:ca:f5:e6:72:9e:16:05:4f:08:
                    ff:97:04:3e:70:de:0b:0d:aa:4e:bb:3d:1c:07:e1:
                    15:48:7c:42:37:fb:ba:79:5e:dc:ef:31:99:11:df:
                    fe:44:c5:56:ba:2a:82:6e:f0:28:b3:15:49:6c:a6:
                    49:b9:93:da:56:35:2e:c1:31:b7:cb:12:db:be:55:
                    9a:6e:dd:ae:0d:b3:82:8c:37:02:53:ff:9f:a6:f8:
                    3b:99:73:e1:27:c8:bd:64:ca:4c:fd:19:56:56:53:
                    31:a9:5f:ca:af:45:2d:59:32:a9:14:6d:1f:21:1f:
                    ec:76:54:d0:4a:2b:b3:0d:fb:ba:ed:9c:3f:6b:82:
                    b2:de:3a:3f:11:1b:d2:ec:4e:23:92:d4:96:62:09:
                    cf:0c:fa:73:8d:bb:22:f0:1a:2d:f7:a4:d2:3b:95:
                    a1:4c:76:ab:64:ba:d5:e1:0a:72:29:20:c9:c2:fb:
                    09:39:8c:f2:73:eb:ea:c6:1c:45:aa:f2:51:ff:84:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5D:6B:3E:C8:04:18:A8:1F:8C:B0:99:40:FC:99:5F:32:69:C3:76
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a5:b3:57:43:9b:76:3e:2a:13:c5:6d:e4:29:ab:c9:81:50:
         8f:22:e5:9a:7e:11:58:30:aa:c5:68:9b:92:27:19:19:13:ad:
         45:0e:fa:da:5f:e5:bb:3a:c6:e3:ed:4b:ae:92:c6:50:c6:1b:
         f5:6d:35:f2:d1:90:f4:63:95:8f:97:bd:14:6c:51:de:83:e6:
         8f:dd:5e:4a:11:89:80:18:ea:b7:8f:ae:b3:9e:0c:e3:9b:fc:
         68:77:67:d0:d6:11:b5:29:a5:db:24:a4:c8:31:74:b9:76:41:
         49:ce:92:21:02:96:0e:6b:fc:6b:46:8d:51:b4:4e:32:37:91:
         e5:ca:4a:25:c4:4e:c4:51:27:99:56:cf:28:ea:4b:93:2e:6b:
         1e:e9:6e:d6:bd:dd:a6:77:35:ad:b2:1f:d2:cf:e9:14:b1:db:
         3c:20:a1:c9:dc:5a:39:ad:21:de:93:b3:f2:e3:ba:63:5d:48:
         57:9c:33:ab:f7:70:c3:0e:2d:c6:6b:1e:c6:e4:75:e7:e5:66:
         20:bb:50:b8:f5:cf:bf:f1:e9:14:a2:13:65:fa:6b:bc:27:9a:
         b7:eb:a2:5c:49:17:7c:6b:f0:c1:dd:77:49:73:27:d4:ea:60:
         be:6b:08:6f:b6:14:1b:76:b7:ab:a4:c6:cd:d9:84:e9:00:cb:
         7a:b5:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:36 2025 by rpki-client