Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa
File:                     3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (raw, json)
Hash identifier:          qeRPizmxClkzYRpDyNJ3BLWqEbPpP57CQXKfs5ThkQM=
Subject key identifier:   10:39:84:E8:0A:13:23:28:F4:EF:40:77:B0:72:09:19:75:8B:42:67
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       33207724EE27AF1D2159917E3197C6B2EAF65582
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa
Signing time:             Sat 18 Jul 2026 01:56:15 +0000
ROA not before:           Sat 18 Jul 2026 01:51:15 +0000
ROA not after:            Sat 17 Jul 2027 01:56:15 +0000
asID:                     62805
IP address blocks:        142.147.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:77:24:ee:27:af:1d:21:59:91:7e:31:97:c6:b2:ea:f6:55:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul 18 01:51:15 2026 GMT
            Not After : Jul 17 01:56:15 2027 GMT
        Subject: CN=103984E80A132328F4EF4077B0720919758B4267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:59:60:b0:0e:95:e4:fa:24:b5:ea:aa:69:
                    32:7b:65:d2:68:72:c3:81:1a:b0:1e:77:ca:22:60:
                    3e:f3:65:bd:5e:d7:16:a3:a1:2c:fa:fb:47:51:80:
                    e2:5a:a0:e4:2f:11:c7:7d:a2:37:c6:1f:3c:54:9a:
                    ec:08:a7:5d:5f:84:f2:2a:5d:9b:32:55:6d:05:0e:
                    6b:16:1c:69:99:bc:60:5a:d5:19:4c:70:af:32:25:
                    34:07:49:12:b5:8c:cb:51:8f:d7:7a:a8:98:61:63:
                    cb:58:29:71:96:43:8e:94:65:3b:37:db:07:67:03:
                    b0:9f:2f:b1:9f:7a:ef:1f:c6:69:cf:6e:57:b1:fd:
                    c7:09:6a:d4:34:b2:e0:40:47:90:8d:2e:19:a3:d8:
                    83:b5:63:47:38:3d:8d:2e:b1:b4:8c:f4:30:6e:00:
                    41:2b:12:a9:ad:5d:ea:eb:45:70:c9:6e:ac:ba:fc:
                    18:34:3c:8f:eb:bb:c0:81:52:54:58:0e:3f:7f:60:
                    ec:36:7a:1a:46:36:a6:fc:04:90:98:55:d2:4c:62:
                    ed:46:03:84:cd:b2:33:25:b6:19:0d:8c:53:50:3b:
                    a8:7c:be:60:a2:0a:04:7d:11:ba:6f:86:a9:84:4a:
                    23:fa:ff:14:e4:8b:fd:27:27:2a:b9:d0:79:ed:8b:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:39:84:E8:0A:13:23:28:F4:EF:40:77:B0:72:09:19:75:8B:42:67
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:79:a8:9c:71:1a:69:63:7d:d7:64:cc:12:f8:ca:53:83:ae:
         fb:53:7d:25:47:36:fe:37:9d:39:ab:4c:00:1c:d7:30:6a:4a:
         f7:b2:0d:95:61:f9:d9:cb:62:10:54:8b:83:13:43:e0:03:c9:
         88:35:07:c8:71:49:dc:cd:1a:9a:33:44:63:33:01:28:8d:bc:
         ef:95:10:d5:eb:02:d5:30:8e:4c:42:b7:86:35:4a:5d:b3:9f:
         11:e9:8f:e6:6a:3d:f2:8a:14:65:fa:f8:c6:9d:56:e6:73:72:
         31:da:0b:bc:ac:85:75:1a:e1:70:a9:b8:8e:77:0d:4d:cb:68:
         a7:25:5f:96:a9:de:7b:28:a1:90:75:70:8c:df:c6:34:1f:2b:
         26:cd:f7:7c:bd:fc:89:ab:23:a9:8c:c2:b0:c5:a5:be:8a:5c:
         ce:ba:45:24:17:ea:1f:fe:42:29:e5:60:6a:90:b8:e4:c5:40:
         73:4d:87:da:62:ae:56:7d:d4:94:bc:5c:b4:f8:5f:d9:80:4c:
         43:8f:d0:e2:64:ab:db:1c:5b:e9:f9:a2:91:47:e7:0a:a7:3e:
         c2:97:44:6c:42:12:94:9a:67:3f:1b:61:8b:25:d1:3d:ee:80:
         c9:55:4b:2c:2f:14:24:98:e9:a4:17:17:03:fe:97:3b:06:57:
         d5:88:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:02 2026 by rpki-client