Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa
File:                     323630353a3963303a3a2f34382d3438203d3e203535313538.roa (raw, json)
Hash identifier:          NjftMZpBzY5fDdTGSGbQ9xqvq/YExJl6W0Kq8I67T7w=
Subject key identifier:   07:70:29:DD:DB:CD:CB:0A:89:E2:3B:14:91:A4:F4:05:FA:B9:C3:69
Certificate issuer:       /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial:       39452FFE76979CE64F1E59463B5A1C513DC22FB9
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa
Signing time:             Sat 16 Aug 2025 01:48:29 +0000
ROA not before:           Sat 16 Aug 2025 01:43:29 +0000
ROA not after:            Sat 15 Aug 2026 01:48:29 +0000
asID:                     55158
IP address blocks:        2605:9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
                          rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:45:2f:fe:76:97:9c:e6:4f:1e:59:46:3b:5a:1c:51:3d:c2:2f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
        Validity
            Not Before: Aug 16 01:43:29 2025 GMT
            Not After : Aug 15 01:48:29 2026 GMT
        Subject: CN=077029DDDBCDCB0A89E23B1491A4F405FAB9C369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:7e:79:ca:da:e6:36:07:94:d8:fb:b5:6f:
                    82:62:26:93:b5:24:9c:21:b0:83:45:46:03:85:ee:
                    c0:48:f5:24:96:e4:7c:2f:00:fb:4a:03:be:d3:c8:
                    90:24:f8:8d:a9:6b:26:b8:7e:e1:a9:0a:fd:d6:5e:
                    e0:bd:d7:2c:45:9f:e3:70:ce:96:1f:0b:28:84:03:
                    59:8f:72:a9:25:b9:ec:28:0c:e7:0f:13:35:fa:6c:
                    86:d3:4a:c1:6a:60:a1:d8:32:89:b2:7a:b2:df:94:
                    59:94:1d:23:19:14:67:49:17:16:a3:b8:e3:d4:2d:
                    45:45:a9:6a:a3:77:f2:9d:b9:00:3e:f6:93:0c:c1:
                    a3:52:ad:de:79:3a:87:86:73:7a:34:cd:10:eb:c5:
                    43:10:05:25:36:af:67:7e:f5:8c:00:56:ee:07:b7:
                    ea:e0:57:a7:7f:58:78:6d:93:43:b9:e2:1d:bb:67:
                    8e:97:69:0c:13:9e:3f:66:23:7f:68:25:57:0c:fe:
                    a5:57:81:71:9b:fe:c7:12:59:7e:b2:f2:73:12:21:
                    c0:12:4e:91:f8:80:ac:2d:7b:c5:ba:f5:87:94:3b:
                    c0:4c:9c:ad:e3:e4:6e:54:6c:da:05:61:58:ce:9d:
                    59:20:ae:7a:f9:a9:a1:01:63:69:ea:4d:24:bf:18:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:29:DD:DB:CD:CB:0A:89:E2:3B:14:91:A4:F4:05:FA:B9:C3:69
            X509v3 Authority Key Identifier:
                keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:01:60:c2:77:37:c9:da:5c:e9:82:39:49:59:30:47:6c:fd:
         3c:02:b3:c7:1d:5b:ef:4b:c3:00:c5:bf:81:84:44:f4:bd:59:
         f1:7e:4e:ad:4c:46:06:a8:3b:ff:e1:42:35:20:2a:77:42:46:
         09:c2:67:25:dd:58:b4:7b:5a:26:06:b0:b1:f1:9b:c6:c4:2b:
         81:f4:97:17:38:b5:c9:9f:04:1a:5a:43:e8:1e:3b:07:73:81:
         e4:a7:33:a8:e6:3a:76:30:17:8d:1e:18:7c:a1:cb:fb:ab:81:
         9f:28:a1:b1:e2:38:a1:77:6c:4e:e1:46:9c:6d:de:a4:e0:15:
         5e:6a:68:7a:e0:b0:50:fb:63:9d:b4:83:41:e7:9c:af:43:72:
         14:d3:26:24:c9:8b:7d:a3:a9:a2:01:1e:c8:a1:a3:a2:4d:05:
         ad:02:0a:cd:c1:02:7f:8a:10:f4:57:20:8a:85:74:1c:87:0c:
         78:2f:df:35:11:78:16:5d:f5:75:1f:65:50:4d:2e:a9:d9:7b:
         c5:ef:1f:4a:b9:3b:58:e2:fe:1d:b4:31:4a:1f:91:f4:b7:a3:
         3a:0b:d6:e9:6e:81:da:e4:c1:2c:39:c3:7f:1f:5c:7a:fa:04:
         b0:35:fc:e1:65:b2:cd:ef:3d:b6:b2:b9:d5:03:ea:1f:e2:89:
         6e:bc:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 12:19:56 2025 by rpki-client