Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39312e302f32342d3234203d3e203632383035.roa
File:                     3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (raw, json)
Hash identifier:          P2oGoXE9s79xQs+izISwAhc+YwsVs9UuFxcGIqplUcs=
Subject key identifier:   CB:7F:68:42:B9:CD:9D:4C:6F:0A:7A:1D:04:13:5F:D5:C6:84:F7:05
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       7C8E999CA77B99A12B0335E99857A73C9F47CC3F
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39312e302f32342d3234203d3e203632383035.roa
Signing time:             Sat 16 Aug 2025 01:48:20 +0000
ROA not before:           Sat 16 Aug 2025 01:43:20 +0000
ROA not after:            Sat 15 Aug 2026 01:48:20 +0000
asID:                     62805
IP address blocks:        142.147.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 00:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8e:99:9c:a7:7b:99:a1:2b:03:35:e9:98:57:a7:3c:9f:47:cc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Aug 16 01:43:20 2025 GMT
            Not After : Aug 15 01:48:20 2026 GMT
        Subject: CN=CB7F6842B9CD9D4C6F0A7A1D04135FD5C684F705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:40:5f:a1:8b:7b:5c:03:c4:d5:c2:0d:27:
                    fb:93:fd:8d:e6:40:91:9c:72:ca:11:eb:82:93:aa:
                    36:7d:f8:57:c6:50:b2:6e:8a:fa:c7:12:a1:d1:34:
                    be:85:19:e7:34:3f:a1:c7:8b:cb:b8:97:fa:be:6c:
                    fd:dd:d9:83:85:6c:62:37:37:33:5e:cb:2a:27:d1:
                    fb:9f:f7:e5:fe:39:be:18:76:39:ba:d5:84:07:5b:
                    26:90:99:cb:91:4c:19:95:c6:61:76:e3:ff:ad:dc:
                    3e:f6:c7:39:43:55:b7:f2:be:e8:19:1d:c5:cd:fe:
                    58:a7:b6:c4:04:2c:24:f9:a6:0e:13:a8:e1:94:20:
                    90:ae:29:0b:a1:43:f1:9c:98:af:62:2f:a9:0f:5c:
                    57:52:c7:07:18:09:89:79:47:57:74:f1:54:c5:cc:
                    7f:34:4c:dd:40:03:b2:ed:d9:6b:aa:04:e4:4c:84:
                    aa:42:e6:e1:7b:7c:93:72:67:c6:ab:ad:e5:f6:52:
                    65:b5:af:b0:ce:6a:3c:fb:ad:48:32:90:15:87:87:
                    c0:09:84:6a:92:98:5e:de:de:0f:8e:df:46:9a:25:
                    c9:b9:4a:5d:2b:80:a1:6d:97:03:1f:5c:cb:7d:ad:
                    34:ed:6a:08:16:fc:00:19:57:08:e3:ff:51:62:6b:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:68:42:B9:CD:9D:4C:6F:0A:7A:1D:04:13:5F:D5:C6:84:F7:05
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39312e302f32342d3234203d3e203632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:70:12:86:53:62:b2:d9:83:0d:ef:27:e7:57:f2:31:64:
         6f:8b:31:79:56:3d:b4:9a:86:02:0b:64:4c:65:61:d9:0a:a5:
         70:22:3b:a7:28:48:1b:ee:c6:c4:a5:47:2f:ba:d5:e0:a1:71:
         b7:90:d1:e0:85:f1:6b:24:bd:a8:a4:ec:ab:68:82:29:b7:25:
         0c:5a:84:1a:66:42:6d:d6:7b:ec:4b:82:cf:73:64:e6:bf:a2:
         24:8d:6b:ea:cb:3c:55:b3:49:6e:c5:c8:c3:b7:8a:f3:34:aa:
         c4:b2:8f:85:77:24:1d:9d:42:a8:f0:46:f3:e8:65:d2:e7:aa:
         34:49:76:04:fb:e9:df:39:bd:ef:8c:8e:0b:b0:88:80:4f:7b:
         c5:df:00:3f:dd:09:08:cc:99:88:fa:16:71:a0:25:f7:94:00:
         42:e8:15:07:72:2e:b9:bd:3a:15:73:58:77:5e:f1:39:e2:0f:
         84:c8:25:ae:cb:d7:cf:67:ba:cb:38:93:e6:07:5c:0f:21:b9:
         b2:12:be:b6:86:8d:22:f9:54:58:5e:4e:54:db:ae:e7:03:d2:
         86:d6:af:37:68:c3:ca:34:74:5e:1c:51:94:be:9e:a0:f0:81:
         e1:89:ab:3e:c0:69:76:4f:e1:00:a5:19:cc:7a:14:f4:5b:b5:
         84:62:cb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:27:41 2025 by rpki-client