Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa
File:                     3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (raw, json)
Hash identifier:          /q/tG77q58e5oIzF7q9XU8pooNKLi3QmsH5l86pOXfE=
Subject key identifier:   26:69:15:22:A4:26:8C:40:F9:22:BE:C8:41:7D:0F:26:CA:92:26:5D
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       7D9CAE094B72DF1793F5CBE9ACACE9F0D3A55141
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa
Signing time:             Sat 18 Jul 2026 01:56:14 +0000
ROA not before:           Sat 18 Jul 2026 01:51:14 +0000
ROA not after:            Sat 17 Jul 2027 01:56:14 +0000
asID:                     6233
IP address blocks:        142.147.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9c:ae:09:4b:72:df:17:93:f5:cb:e9:ac:ac:e9:f0:d3:a5:51:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul 18 01:51:14 2026 GMT
            Not After : Jul 17 01:56:14 2027 GMT
        Subject: CN=26691522A4268C40F922BEC8417D0F26CA92265D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:15:e9:d3:67:27:b2:a2:2f:2a:82:d9:7f:1e:
                    f2:e4:0e:72:78:03:d7:f7:e1:8b:34:1b:bb:75:22:
                    71:01:32:6d:14:d5:65:9a:1a:20:2c:40:97:63:ff:
                    3d:05:0b:31:f2:fe:5f:67:cb:eb:df:a8:85:2e:00:
                    8c:27:f3:5b:1f:35:6e:f8:84:b3:cd:78:82:e7:aa:
                    d6:29:3a:70:a2:cf:60:1a:f8:8e:32:37:98:16:e7:
                    82:4d:16:90:8c:e9:6b:c0:25:35:15:91:87:81:e3:
                    db:1b:6b:6d:0a:5c:d5:00:77:10:b0:74:7c:bc:e8:
                    24:54:c2:4d:bf:87:e4:34:65:79:e4:49:91:10:ad:
                    5a:4e:8c:47:6a:30:34:7b:a3:48:6b:af:99:7d:3a:
                    d8:69:00:2b:e2:4a:33:05:e7:86:94:21:a7:74:1b:
                    1e:a7:e5:d5:32:1a:37:74:f8:51:1d:c2:bb:9d:94:
                    e1:65:58:1e:ed:c1:6e:30:51:f5:4c:e3:0f:a4:4d:
                    de:d6:df:ff:e9:6d:ed:d0:19:ad:47:fe:5a:b2:58:
                    a6:44:42:e3:ea:7d:6a:16:3c:84:df:97:37:4a:9b:
                    5c:94:d8:87:de:f7:ec:b0:00:fa:9c:63:ea:4e:ad:
                    7c:53:0a:6e:fc:26:04:71:df:46:b2:a0:5e:1a:26:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:69:15:22:A4:26:8C:40:F9:22:BE:C8:41:7D:0F:26:CA:92:26:5D
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:4c:33:b6:37:d8:76:80:94:54:ae:c1:39:22:cf:20:32:8b:
         80:03:b9:81:c3:47:c0:74:ff:02:08:cf:f8:de:fb:4a:78:f2:
         04:d8:cd:fc:c2:7e:3b:1c:4f:2a:4b:27:3c:e8:c8:bd:0f:13:
         4f:53:92:4e:f0:d9:63:f7:34:4c:17:ff:51:a9:9f:20:3b:68:
         f9:88:6b:bc:be:5e:67:14:5a:74:63:5c:bd:87:ba:7e:37:a9:
         10:44:31:46:c7:5e:75:80:3b:9a:9b:6c:88:50:6b:d9:84:b9:
         b8:09:c1:32:d0:cb:e5:6e:23:1e:1c:34:5b:5e:19:ab:0a:fa:
         81:eb:14:c9:cd:e8:5f:b4:66:ee:74:b5:61:bd:89:f0:92:3d:
         61:b1:02:e3:e8:8a:94:a2:28:eb:04:76:93:58:f0:c8:48:72:
         aa:f5:00:ef:46:30:86:22:3e:7d:a1:6d:b5:d7:e4:62:b3:46:
         6d:64:50:02:29:db:fb:e5:61:af:b7:82:d5:24:b8:ce:02:06:
         5b:21:13:ed:78:7a:1a:ff:6b:b8:7e:7a:d0:00:91:c2:94:13:
         cd:82:65:9b:92:93:51:51:58:63:32:96:b5:99:6a:60:58:85:
         3f:b3:d7:8b:37:bf:80:dc:cb:0c:d7:63:c3:81:61:de:6a:93:
         3d:73:5c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:00 2026 by rpki-client