Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
File:                     3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (raw, json)
Hash identifier:          D0Ow1HD5dL19BD0PK2OSn7PrujexMNUo6oIuSOROZDY=
Subject key identifier:   3E:D1:6C:B8:FB:45:18:6D:BB:5F:D7:76:19:1D:AF:39:A3:9A:B4:CA
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       4EED6FEDCA3CB8E8C24A640DEF3E8513CE179779
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
Signing time:             Sat 16 Aug 2025 01:48:21 +0000
ROA not before:           Sat 16 Aug 2025 01:43:21 +0000
ROA not after:            Sat 15 Aug 2026 01:48:21 +0000
asID:                     55158
IP address blocks:        142.147.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 00:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ed:6f:ed:ca:3c:b8:e8:c2:4a:64:0d:ef:3e:85:13:ce:17:97:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Aug 16 01:43:21 2025 GMT
            Not After : Aug 15 01:48:21 2026 GMT
        Subject: CN=3ED16CB8FB45186DBB5FD776191DAF39A39AB4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:58:7d:44:7a:1a:7b:28:53:7d:4c:75:c5:
                    51:c0:d1:b3:40:67:3e:24:cf:1b:c7:7d:c2:83:47:
                    13:91:7e:18:f2:2c:1f:66:f4:85:db:65:75:86:a4:
                    4a:91:fd:dd:6b:0e:bd:bf:6a:e1:eb:5e:43:f3:96:
                    02:10:55:25:df:08:05:8d:d5:e6:f5:93:61:41:4f:
                    a1:69:f3:57:45:b5:24:5b:ea:8f:58:be:8e:3c:cb:
                    75:23:49:15:ec:25:5e:fc:f8:61:12:b9:2b:88:17:
                    6e:ba:ce:8a:37:58:c7:0b:6e:f7:ab:77:67:af:f3:
                    89:37:6a:bf:7b:b9:63:68:3d:8a:80:9c:55:80:2d:
                    35:3a:78:e0:95:bb:65:af:40:f9:54:49:ee:9b:78:
                    af:4c:30:05:b9:2c:34:83:ff:21:70:02:c2:db:1a:
                    35:a3:7e:9d:0f:ab:7c:56:84:7e:e2:17:4b:e7:fc:
                    f4:2f:11:9d:57:39:dc:0d:6b:47:b9:64:1b:8a:d6:
                    4b:04:13:68:4f:c2:a4:79:d1:55:1a:02:c7:c3:db:
                    96:4d:21:85:0e:5c:e0:3d:56:7c:63:37:96:05:ef:
                    49:15:dc:3d:6e:19:5d:3d:49:96:95:4a:67:92:5c:
                    eb:a0:1c:8f:b5:e7:71:0d:6d:3b:fe:79:22:dd:71:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D1:6C:B8:FB:45:18:6D:BB:5F:D7:76:19:1D:AF:39:A3:9A:B4:CA
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:22:d2:6a:dc:74:53:a7:e4:41:b6:c4:49:3f:fc:f9:c2:48:
         a6:10:67:12:db:44:1c:e3:14:61:a1:a8:4c:49:d7:87:be:f5:
         a5:fe:33:5e:53:a6:d6:25:6a:a7:ea:23:10:12:be:6c:8e:48:
         81:38:03:14:09:77:97:ab:58:65:48:35:57:34:c1:6f:bc:72:
         f6:c5:57:83:c9:7e:50:af:70:e0:cb:eb:b8:78:d9:91:17:b9:
         e3:f8:31:b7:c4:1c:82:4b:3a:39:f3:89:26:0d:8e:ea:64:11:
         a3:9f:de:53:e4:36:17:b4:f0:e0:93:39:02:53:ae:95:f3:a5:
         22:dc:3f:0a:32:d2:f1:fd:de:fe:3e:56:01:c7:f4:c7:7e:0e:
         ce:b9:ec:fd:d8:5d:e8:84:4e:23:f3:48:ba:d3:e0:c5:43:29:
         d6:08:12:fa:51:10:6d:75:69:1b:e5:a4:bf:fe:e4:73:85:0c:
         79:69:26:dc:ec:71:cf:f9:c9:93:63:e2:0b:7a:38:44:e0:ee:
         15:37:68:ef:28:77:d0:8a:c9:1f:e8:d7:59:ce:76:a8:74:4f:
         b7:26:3d:ee:14:86:ff:80:9c:63:23:48:4d:49:ca:9a:dc:07:
         a7:27:f2:a2:e4:f1:7d:03:12:51:64:e4:a2:68:1c:46:b9:f8:
         cc:4a:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:40:59 2025 by rpki-client