Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa
File:                     323630353a3963303a3a2f34382d3438203d3e203535313538.roa (raw, json)
Hash identifier:          P/SzfRSTtWIfSl9kKOppoG+ZTev987Ha1PDS+hIo4Pc=
Subject key identifier:   19:9A:62:A6:CC:D3:25:58:FA:79:D9:9D:20:EE:7D:E5:0E:1E:25:44
Certificate issuer:       /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial:       7B88D05426E4E39ED2F18722D9F37B4D74775C1B
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa
Signing time:             Sat 18 Jul 2026 01:56:15 +0000
ROA not before:           Sat 18 Jul 2026 01:51:15 +0000
ROA not after:            Sat 17 Jul 2027 01:56:15 +0000
asID:                     55158
IP address blocks:        2605:9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
                          rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:88:d0:54:26:e4:e3:9e:d2:f1:87:22:d9:f3:7b:4d:74:77:5c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
        Validity
            Not Before: Jul 18 01:51:15 2026 GMT
            Not After : Jul 17 01:56:15 2027 GMT
        Subject: CN=199A62A6CCD32558FA79D99D20EE7DE50E1E2544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:b0:84:0e:d0:8d:65:8a:df:67:80:ad:28:
                    d7:a3:09:c6:7d:c7:20:63:23:f8:40:d1:96:6b:17:
                    6c:d5:2c:19:79:4a:aa:25:c1:0f:6a:d2:83:97:bb:
                    74:56:50:a3:ad:be:02:87:50:9e:7d:8c:76:39:81:
                    98:e8:da:53:92:8c:f7:5e:3b:ad:7e:67:af:37:c3:
                    8d:e5:ea:c3:e4:e1:bf:a7:35:62:a5:89:1b:d4:78:
                    a6:5c:6d:de:f3:29:bc:c6:34:08:8f:24:0a:8b:5a:
                    36:2d:f2:23:2a:02:b3:2f:23:c3:e2:ca:53:1c:29:
                    16:45:6f:50:ae:8b:49:5b:9c:b5:45:1d:f6:e4:0b:
                    99:55:1d:46:5f:48:54:8e:59:fd:f6:bf:5b:82:35:
                    d4:f7:c3:5e:55:f1:dd:0f:ec:ac:cb:cb:0d:15:c5:
                    43:94:d1:32:c8:f8:7d:03:9e:45:ef:34:c8:e9:e2:
                    29:85:4f:fc:7b:5f:a3:4a:36:27:9b:63:50:50:56:
                    7f:cc:9f:e1:ef:02:49:43:4a:5a:f8:50:e7:08:bb:
                    32:2c:d3:32:bc:4b:04:5a:73:30:ca:e7:ca:86:e0:
                    b5:dd:c4:f7:91:24:76:be:82:61:f2:af:2d:71:7b:
                    73:43:c3:6a:3e:a8:3d:79:7f:f0:36:82:ff:e8:87:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9A:62:A6:CC:D3:25:58:FA:79:D9:9D:20:EE:7D:E5:0E:1E:25:44
            X509v3 Authority Key Identifier:
                keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:a8:ed:8b:bd:42:f6:48:87:7b:b4:06:19:ec:ee:58:ca:0c:
         34:cf:e4:d1:66:f0:86:b3:d4:f8:19:20:74:02:8c:0b:08:91:
         31:2b:ca:57:e6:9b:08:f5:ad:ae:a8:0b:1d:8c:fb:22:bd:55:
         7a:cd:94:1b:19:6f:4a:63:41:81:02:1d:7c:52:c4:34:48:07:
         33:86:90:f1:67:0c:0d:96:d0:2a:39:b1:39:d3:74:70:a3:f3:
         be:80:70:3e:3b:88:85:5a:16:6b:60:23:bc:b5:d5:b6:6f:34:
         99:32:5f:e8:5b:c0:ba:ef:b2:22:da:02:9b:5e:89:7b:d4:c4:
         79:bd:21:84:da:5d:79:3b:e5:c9:0e:98:6c:9d:56:2c:72:6a:
         9b:83:c7:d2:ff:5c:1f:74:35:c7:6a:1a:9e:83:14:38:59:f3:
         31:a8:91:84:66:af:0e:9a:6d:ca:bd:8f:f4:7e:85:25:2e:9c:
         16:cf:8c:e0:77:42:ab:ee:18:dc:2a:42:92:b1:89:8c:69:1c:
         76:de:01:63:b6:83:13:f8:b2:57:b6:48:b2:ec:04:a6:b0:b7:
         2f:31:b4:68:ac:0b:96:de:91:7e:69:69:b6:46:26:b7:ad:25:
         cc:ce:ec:7d:a0:72:e5:2f:79:9d:59:64:a6:4e:45:18:13:26:
         78:72:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:38 2026 by rpki-client