Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e20393439.roa
File:                     323630353a3963303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          p4yM/1DXu4U5H83uKnUrycogdNVD9aqS1jeSQ67Qm/k=
Subject key identifier:   14:9B:E4:29:0F:9B:39:B6:04:A7:21:C5:69:A6:0A:FA:06:5C:C6:9B
Certificate issuer:       /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial:       4372F05857604B68AD57712D8A57BD9AF0A75F7A
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e20393439.roa
Signing time:             Sat 18 Jul 2026 01:56:15 +0000
ROA not before:           Sat 18 Jul 2026 01:51:15 +0000
ROA not after:            Sat 17 Jul 2027 01:56:15 +0000
asID:                     949
IP address blocks:        2605:9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
                          rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:72:f0:58:57:60:4b:68:ad:57:71:2d:8a:57:bd:9a:f0:a7:5f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
        Validity
            Not Before: Jul 18 01:51:15 2026 GMT
            Not After : Jul 17 01:56:15 2027 GMT
        Subject: CN=149BE4290F9B39B604A721C569A60AFA065CC69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:fc:23:ff:57:55:f0:88:74:05:4c:ac:54:
                    5e:c2:d3:b6:59:e2:ca:54:dc:bf:4e:6e:68:b7:e5:
                    39:2b:6e:c4:6e:9d:9e:62:67:56:b8:32:b1:56:8e:
                    25:41:04:55:2c:fd:ec:95:e4:cd:61:65:bc:b9:e0:
                    c4:fb:4b:f8:83:29:f4:dc:3a:0a:10:7c:7a:6e:d0:
                    03:de:56:f9:37:60:d2:2e:6d:77:86:6f:72:48:82:
                    fd:92:67:f9:65:2a:f5:28:a4:fd:cf:c5:d0:b6:57:
                    8d:b0:6a:98:6f:96:bd:66:4f:ed:1c:5a:2f:57:13:
                    bc:b6:e1:9e:e2:f2:d5:c8:89:ac:77:3c:39:23:ad:
                    b7:2e:7b:e5:f2:36:ab:55:df:26:f8:4b:49:a5:6a:
                    2d:c5:66:2f:c1:2a:8d:0b:82:eb:78:d0:b3:ac:3f:
                    fd:23:e1:5b:a9:c0:a4:ae:af:b1:3f:fb:d9:54:c1:
                    22:5e:e5:49:02:f3:fd:bf:29:91:05:82:37:4d:9b:
                    12:cf:c3:a4:80:51:3d:dd:1d:46:34:81:c0:93:8c:
                    29:19:6f:00:d2:7a:32:8a:b6:76:d8:12:57:d1:bb:
                    d9:cd:2b:e2:94:6e:23:28:f8:d7:9e:6a:ba:92:7a:
                    f4:66:8c:a3:01:d5:9f:7a:a5:45:ef:1c:d9:e8:03:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9B:E4:29:0F:9B:39:B6:04:A7:21:C5:69:A6:0A:FA:06:5C:C6:9B
            X509v3 Authority Key Identifier:
                keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:2c:97:61:11:68:78:bf:da:ad:34:0f:ae:2b:9e:8f:ba:f6:
         e1:c0:9a:00:bb:13:93:0a:f3:49:be:86:06:44:59:d6:57:92:
         c8:82:49:92:2a:f2:a6:7b:13:ed:ff:26:2c:66:53:6f:7b:91:
         45:0e:0c:c2:e5:00:d0:6c:d0:46:09:61:d5:aa:72:d8:82:8d:
         9f:03:31:f4:7b:dc:3a:25:be:81:e1:83:4b:71:56:9e:bb:f0:
         dd:d8:6c:cd:cb:fb:e6:fb:b5:01:ff:80:69:49:cd:de:ea:77:
         8b:14:f6:5d:64:79:0f:92:82:ce:21:59:40:85:83:91:9a:13:
         c0:b3:0d:f1:38:db:fd:23:05:38:f7:99:92:51:95:08:34:e2:
         51:05:c1:94:70:f6:6f:b3:66:0d:30:ae:d5:4c:c4:4c:39:a6:
         b2:e0:e3:d2:8a:6e:15:2d:f9:3c:91:ac:df:16:53:6d:e2:16:
         e7:0e:5b:44:bd:02:0e:85:2e:77:9e:dd:45:aa:fb:76:e4:c3:
         12:8c:63:fc:2f:0d:0c:ea:5b:a5:fe:21:87:ad:aa:81:90:37:
         4c:f6:a8:ee:ff:c1:2f:64:3c:d3:29:24:3b:51:d7:49:db:7a:
         5b:0a:35:67:74:85:86:b6:8c:26:8d:cb:75:37:38:da:39:88:
         19:71:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:22 2026 by rpki-client