Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa
File:                     3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (raw, json)
Hash identifier:          8n+PAt2nTSgexhYzl45tiKTEPLRCJIy6tnkFSvykAhc=
Subject key identifier:   4F:85:F4:4D:8B:FF:38:40:D8:BC:F6:A6:56:69:E8:43:5E:BB:AB:63
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       559C9B722E02B4BF4D4DAAC83A2224D1614D0D5D
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa
Signing time:             Sat 16 Aug 2025 01:48:21 +0000
ROA not before:           Sat 16 Aug 2025 01:43:21 +0000
ROA not after:            Sat 15 Aug 2026 01:48:21 +0000
asID:                     62805
IP address blocks:        142.147.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 00:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9c:9b:72:2e:02:b4:bf:4d:4d:aa:c8:3a:22:24:d1:61:4d:0d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Aug 16 01:43:21 2025 GMT
            Not After : Aug 15 01:48:21 2026 GMT
        Subject: CN=4F85F44D8BFF3840D8BCF6A65669E8435EBBAB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:a2:ff:32:7d:ad:ec:84:5e:4a:4b:5c:c7:
                    63:93:8a:e9:88:22:90:eb:a1:21:37:91:ea:9a:80:
                    77:ca:f3:fd:38:05:2e:14:3b:66:4b:1d:cc:cd:21:
                    c7:ec:ab:d1:47:07:a0:26:c8:fe:34:e1:58:d7:0d:
                    6f:ef:f2:e8:a2:d3:e2:6c:de:74:1b:b8:6c:eb:9c:
                    27:eb:4b:74:61:a3:74:87:d5:0a:03:a3:5a:df:ae:
                    85:02:9a:11:e7:bc:c2:49:d8:7d:2f:84:03:b6:94:
                    68:08:a0:85:20:0f:5f:21:30:6c:46:dc:74:4e:1f:
                    be:96:53:6f:18:70:00:d0:91:4c:38:24:2a:5b:78:
                    07:22:15:34:d6:c5:80:6b:2d:a4:18:63:02:a2:6f:
                    27:6c:8c:88:b0:42:cf:97:b0:ed:cc:44:91:52:00:
                    33:37:d4:15:04:54:d9:ba:7d:59:73:f8:75:37:30:
                    61:db:18:c0:77:b6:29:be:9b:ce:2e:ac:46:15:a1:
                    53:7f:c1:75:e3:45:be:6c:79:39:48:e7:1a:92:f9:
                    a5:3c:f6:49:8c:73:9d:3c:9d:36:3e:26:9b:9e:0f:
                    5e:d7:e8:85:e2:b4:fe:91:8e:b6:cf:c2:fb:ab:26:
                    3c:c9:28:3f:7a:78:ee:28:01:7d:73:b0:0a:c6:a8:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:F4:4D:8B:FF:38:40:D8:BC:F6:A6:56:69:E8:43:5E:BB:AB:63
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39322e302f32342d3234203d3e203632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:7e:17:87:44:c6:97:54:8c:31:8e:3a:8a:6e:2b:83:b9:f6:
         b0:a6:97:38:b6:3e:99:99:21:a9:1a:98:99:bc:47:82:b4:44:
         f2:52:76:5a:7f:44:d7:df:cb:e5:06:2d:6b:8a:da:92:3f:17:
         86:11:8c:db:a5:cf:48:0f:d0:5d:3f:bb:8e:7a:21:ae:9d:51:
         d1:73:d7:46:cf:23:13:00:4b:5b:bd:8f:b7:e5:d8:62:89:3e:
         19:8d:f3:1b:80:fa:3f:b6:81:5b:42:3d:d2:b1:fc:00:9d:56:
         d4:21:4e:c2:63:32:95:c3:16:be:76:10:c6:80:5a:cc:68:8f:
         c0:b4:a0:d2:3b:cf:0b:3b:45:68:c1:0f:99:06:a2:2d:72:74:
         b5:93:b9:ad:56:07:ef:88:01:c0:a0:af:c7:ca:61:e2:cb:59:
         5c:c6:bc:40:23:a2:10:58:d9:40:bf:33:58:81:94:21:2c:78:
         3c:98:e2:69:89:26:67:8a:01:34:b4:92:7c:82:6c:ce:89:51:
         e9:f9:06:b3:c6:25:20:83:7b:45:c5:04:d6:ec:ff:03:39:17:
         4a:6d:64:b2:f4:0a:a5:7a:f3:bf:b8:16:17:b6:94:ee:bc:7f:
         c4:e1:26:f4:e3:39:48:07:c3:da:66:d1:30:e6:ed:91:0a:0c:
         8a:98:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:27:29 2025 by rpki-client