Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2036323333.roa
File:                     323630343a613834303a3a2f33322d3438203d3e2036323333.roa (raw, json)
Hash identifier:          3qeReokdltJBP528PtxG9n4FOYa0XDPf5/XZ2hf+O4o=
Subject key identifier:   D3:10:8B:CD:54:F8:61:50:2A:31:3D:86:1A:6D:4D:02:11:6D:AD:98
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       3D779E2CE9405F026E017D1FA5E39CAB97C04D80
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2036323333.roa
Signing time:             Sat 18 Jul 2026 01:56:14 +0000
ROA not before:           Sat 18 Jul 2026 01:51:14 +0000
ROA not after:            Sat 17 Jul 2027 01:56:14 +0000
asID:                     6233
IP address blocks:        2604:a840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:77:9e:2c:e9:40:5f:02:6e:01:7d:1f:a5:e3:9c:ab:97:c0:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul 18 01:51:14 2026 GMT
            Not After : Jul 17 01:56:14 2027 GMT
        Subject: CN=D3108BCD54F861502A313D861A6D4D02116DAD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:6e:72:f2:bc:4d:3d:15:c5:72:f4:c7:02:
                    35:16:77:e5:04:d2:6b:48:de:85:eb:d2:eb:5e:0d:
                    78:45:4b:ce:26:d6:cd:16:03:39:ce:81:6b:af:2e:
                    86:00:f6:18:ad:63:89:87:ef:77:5c:da:21:10:91:
                    8f:75:41:f4:5e:58:cc:98:0e:0c:42:40:ee:48:b4:
                    76:97:a5:b0:1c:df:0b:a5:a3:1a:a2:cc:f0:37:ca:
                    11:b8:36:85:18:15:40:c9:46:f4:11:95:99:4b:51:
                    ca:41:60:c8:7e:7c:24:9a:2a:76:66:97:90:c3:25:
                    a0:87:22:63:23:9e:b1:d9:72:a7:3b:05:4d:5e:4b:
                    ab:de:99:21:a9:0f:e7:70:1f:d7:90:fc:95:c7:3e:
                    f4:fc:e3:30:d6:ad:71:a5:b6:9a:66:96:ec:21:25:
                    b7:3c:36:57:d8:de:12:36:88:7b:66:e4:de:c2:77:
                    c1:f8:c9:74:93:80:f7:38:09:d0:b0:e9:ff:c3:95:
                    4d:1d:c5:1f:c8:cc:8b:cf:cf:43:10:ad:0b:31:4e:
                    9c:03:c2:e9:22:49:15:c8:b6:2a:ac:c2:c5:78:bb:
                    68:fd:3d:57:5d:7c:eb:a0:75:2e:0e:f1:6d:2f:31:
                    4c:c4:9f:a3:3f:66:66:4a:64:60:c8:76:15:99:00:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:8B:CD:54:F8:61:50:2A:31:3D:86:1A:6D:4D:02:11:6D:AD:98
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2036323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a840::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:b4:7a:c7:fb:72:e1:18:b3:cf:d0:da:e8:1a:30:96:35:f0:
         be:ef:28:76:d1:03:2e:9d:f7:fd:a8:45:b9:e3:e8:d7:c4:d8:
         65:fc:58:9a:b2:55:e4:09:f9:b0:59:27:f4:11:ad:41:72:e3:
         68:51:e6:68:2c:80:3e:04:2b:a8:cf:a5:4f:37:c6:39:d1:5c:
         75:5e:f2:e2:27:a0:21:2d:58:dd:8e:0b:82:cd:0e:6f:3d:27:
         81:5b:81:7d:8f:31:59:0d:4e:40:72:b0:ad:a8:7a:b8:cc:e9:
         ff:84:2b:7e:43:48:1c:62:70:46:3b:46:bb:14:17:8d:d0:9f:
         e9:64:21:6c:49:55:bc:1f:d8:61:32:2d:52:11:24:84:97:43:
         f1:47:1b:5a:6d:42:8b:d1:a2:e0:3b:2f:78:03:b7:d7:23:55:
         2f:98:74:25:5d:08:e7:1c:da:cf:b1:98:2e:fa:ed:9d:8f:bd:
         33:07:70:01:c5:a5:1c:b3:15:98:aa:db:23:e6:83:e1:b5:8b:
         79:20:9c:e9:82:f6:65:f8:24:a2:a6:c4:46:96:e2:4a:a7:91:
         ca:d1:6d:d3:b5:b5:9c:ea:6a:82:aa:da:62:d1:0a:3f:68:87:
         16:70:8c:9a:bd:e4:9e:78:ec:cb:7b:b4:80:3f:17:0c:9a:43:
         06:56:30:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:20 2026 by rpki-client