Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa
File:                     3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (raw, json)
Hash identifier:          1zCqb8sfDCaoKKz9GsCC3N/MhjxqVGXIkoWKbFXg8AU=
Subject key identifier:   D2:E1:A5:68:DA:9C:7D:2A:AB:1F:BC:C5:BA:EA:8E:A3:7A:C8:65:1C
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       640681F67B48219CBD651650F7C4AEEB92BF91CF
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa
Signing time:             Sat 18 Jul 2026 01:56:14 +0000
ROA not before:           Sat 18 Jul 2026 01:51:14 +0000
ROA not after:            Sat 17 Jul 2027 01:56:14 +0000
asID:                     32727
IP address blocks:        142.147.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:06:81:f6:7b:48:21:9c:bd:65:16:50:f7:c4:ae:eb:92:bf:91:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul 18 01:51:14 2026 GMT
            Not After : Jul 17 01:56:14 2027 GMT
        Subject: CN=D2E1A568DA9C7D2AAB1FBCC5BAEA8EA37AC8651C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:4d:87:eb:73:0e:c6:bf:cd:4c:5a:36:f1:
                    76:9e:4f:52:29:d4:46:5f:ba:78:64:0f:15:85:eb:
                    ff:03:5e:d2:c1:b7:42:85:03:bc:38:94:97:ca:b1:
                    0a:b7:59:93:4b:da:27:c5:26:84:06:06:e3:d9:ca:
                    73:29:e4:55:ec:ff:11:b8:ea:36:76:84:6c:4a:3d:
                    60:26:2a:dd:a3:87:46:23:ef:97:2b:3c:5a:c4:11:
                    a5:11:94:4e:2e:4b:d6:c5:04:18:4e:df:f6:7c:9d:
                    b3:1a:2c:d6:12:ec:98:77:ea:a5:43:0f:df:c3:5b:
                    04:3b:e1:d0:39:cf:4f:a3:38:98:51:69:3c:96:62:
                    ca:5f:4b:f3:b8:59:87:e7:f2:cf:74:50:79:a0:07:
                    98:c7:1d:77:fe:50:f1:d0:0a:10:d3:8a:52:ed:81:
                    1b:c9:a8:36:8f:cb:b4:d4:9a:60:88:7d:7b:31:ac:
                    f0:dc:fa:93:e4:d5:05:33:45:55:82:f4:b0:85:ac:
                    cb:63:70:4a:a2:14:74:08:1b:f4:d8:a6:cf:07:cb:
                    19:c0:42:45:b3:5c:a7:f5:53:fe:a4:74:14:92:81:
                    d0:7e:8e:43:f2:6b:eb:12:29:dd:91:64:0f:8c:4f:
                    dd:9e:f2:2e:db:eb:a4:10:08:eb:fb:7e:a6:54:d1:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:A5:68:DA:9C:7D:2A:AB:1F:BC:C5:BA:EA:8E:A3:7A:C8:65:1C
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39332e302f32342d3234203d3e203332373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:21:55:26:15:c8:5d:eb:53:86:d5:e6:03:38:74:b8:3c:a9:
         fb:2f:f6:fc:c4:ba:56:54:e3:00:dc:0f:46:ec:f2:2e:ba:be:
         da:db:84:26:9e:05:f0:ba:0b:1b:04:8b:61:ea:28:f0:60:f1:
         18:28:43:b5:37:20:d5:35:33:9d:8e:2e:14:3a:dd:dc:7d:5c:
         9b:c1:36:94:d5:84:c7:0d:3c:e4:f8:a6:e2:d8:05:6f:e7:d3:
         4e:7d:2f:50:50:46:28:46:1a:46:15:55:98:ed:44:6a:56:70:
         11:cf:15:df:40:50:b6:7c:76:5f:ec:3a:03:c6:c4:e3:bb:a7:
         70:08:21:c9:dc:45:39:16:de:13:73:1d:c5:a3:58:ad:e4:a7:
         e4:6d:8e:fd:2f:a0:cd:d8:f2:37:9d:91:b9:d3:55:eb:2e:7c:
         fa:9c:d3:a6:c0:0d:f3:2a:eb:df:11:60:f4:f4:29:84:7c:80:
         1b:2c:eb:79:78:b9:75:8e:9b:20:0b:77:1c:a9:a8:b1:24:69:
         d9:24:2b:2b:19:93:26:22:37:64:e0:8d:40:9e:95:d7:31:de:
         b2:d2:d4:73:19:c4:45:52:75:14:ef:ab:86:05:60:25:37:85:
         2b:ca:65:8b:36:96:75:8b:33:e1:fb:0c:b7:e5:d6:65:2f:34:
         58:22:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:06 2026 by rpki-client