Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/32332e3134342e3136302e302f32342d3234203d3e203332373237.roa
File:                     32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (raw, json)
Hash identifier:          G0E1tckKT3wR7ducFJEbtmCC/l6pUZa6iMNu+MXfOMs=
Subject key identifier:   00:9F:88:97:83:94:CD:2A:80:A0:25:33:2C:83:EE:6E:F4:4F:59:92
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       46171605BE9EF297E075432B783AD7987EEB60D9
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/32332e3134342e3136302e302f32342d3234203d3e203332373237.roa
Signing time:             Sat 18 Jul 2026 01:56:14 +0000
ROA not before:           Sat 18 Jul 2026 01:51:14 +0000
ROA not after:            Sat 17 Jul 2027 01:56:14 +0000
asID:                     32727
IP address blocks:        23.144.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:17:16:05:be:9e:f2:97:e0:75:43:2b:78:3a:d7:98:7e:eb:60:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Jul 18 01:51:14 2026 GMT
            Not After : Jul 17 01:56:14 2027 GMT
        Subject: CN=009F88978394CD2A80A025332C83EE6EF44F5992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:c7:7b:3c:92:28:e2:31:7f:fc:9b:2a:59:
                    c2:05:98:10:aa:e2:0e:d9:ac:c2:05:c5:e0:f2:20:
                    1f:ab:d7:2f:86:bc:67:96:fa:88:d2:8a:cf:0e:0f:
                    61:1d:e4:f7:79:43:ba:42:c6:8a:7b:39:78:ec:6b:
                    96:59:c2:96:e3:4f:7a:ad:eb:77:ac:d9:f0:42:c7:
                    9c:aa:31:77:0e:e5:31:bc:b7:fc:78:98:0a:c4:af:
                    e2:13:38:38:94:9a:11:e4:0e:e6:64:18:9c:da:48:
                    2b:9b:42:22:e4:77:70:74:36:f7:21:02:da:85:d2:
                    ee:31:d9:51:82:31:64:8e:8b:66:ca:31:b1:a7:61:
                    f3:bd:bb:6b:5a:c0:90:ce:31:14:1f:1c:29:b5:50:
                    ab:98:3c:7a:3d:cd:f5:41:af:78:ca:76:90:94:de:
                    16:ac:2d:b5:cd:3a:d1:74:15:c5:8b:cd:53:0f:ae:
                    ec:a5:85:cb:55:17:34:6a:a4:ba:11:30:48:21:d1:
                    f8:82:28:ec:0a:58:73:bb:2a:22:c8:8d:c9:22:81:
                    09:26:52:da:83:9f:83:4c:ba:0b:a8:1c:e1:cc:21:
                    db:2d:75:d3:06:ca:b4:c5:47:da:6c:57:55:a0:7e:
                    85:14:af:49:7f:5d:2a:4d:df:e8:28:56:27:a0:3d:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9F:88:97:83:94:CD:2A:80:A0:25:33:2C:83:EE:6E:F4:4F:59:92
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/32332e3134342e3136302e302f32342d3234203d3e203332373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:e4:c5:4d:56:01:f8:31:2f:85:cb:d0:90:d7:c9:9c:0e:
         a1:a8:40:b4:a0:4a:ac:87:90:52:2f:f3:7a:89:c1:61:b2:58:
         7c:63:df:cc:be:75:7a:a9:a1:7c:ef:1d:48:f3:34:ea:79:4b:
         a9:ca:62:24:69:49:cc:8d:e4:06:ca:95:9a:b8:50:c9:b1:dd:
         75:67:a6:f6:2c:44:f5:e2:9a:65:39:b2:15:c0:07:78:42:35:
         3d:9d:e4:c2:70:7d:36:7d:4b:a3:31:39:df:23:47:51:e8:54:
         33:23:11:7d:24:2a:2c:07:9c:17:b1:74:e1:80:18:90:49:a0:
         26:b9:9d:be:50:42:7d:ed:d3:8f:bb:92:90:70:cd:e7:9b:d0:
         cf:e4:24:42:22:04:1d:49:cc:cf:2b:e6:11:32:25:10:8a:c0:
         27:6a:e5:ed:06:3d:01:5f:4b:d0:7e:5e:90:8a:35:4f:3b:ca:
         6a:15:78:f3:0a:b7:d5:02:f5:69:ff:6e:da:8d:08:32:1d:24:
         3c:f6:27:50:00:37:ce:69:47:6a:e8:35:bb:0c:98:74:ac:ca:
         f4:98:42:be:65:ea:81:60:5b:8f:62:f2:f4:78:9d:60:f8:a8:
         1b:6b:47:25:cc:88:05:2e:39:b8:79:bc:ea:8e:85:6e:d7:f8:
         0d:0d:61:7d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURhcWBb6e8pfgdUMreDrXmH7rYNkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3
NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzE4MDE1MTE0WhcNMjcwNzE3MDE1NjE0
WjAzMTEwLwYDVQQDEygwMDlGODg5NzgzOTRDRDJBODBBMDI1MzMyQzgzRUU2RUY0
NEY1OTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiHHezySKOIx
f/ybKlnCBZgQquIO2azCBcXg8iAfq9cvhrxnlvqI0orPDg9hHeT3eUO6QsaKezl4
7GuWWcKW4096ret3rNnwQsecqjF3DuUxvLf8eJgKxK/iEzg4lJoR5A7mZBic2kgr
m0Ii5HdwdDb3IQLahdLuMdlRgjFkjotmyjGxp2HzvbtrWsCQzjEUHxwptVCrmDx6
Pc31Qa94ynaQlN4WrC21zTrRdBXFi81TD67spYXLVRc0aqS6ETBIIdH4gijsClhz
uyoiyI3JIoEJJlLag5+DTLoLqBzhzCHbLXXTBsq0xUfabFdVoH6FFK9Jf10qTd/o
KFYnoD232wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFACfiJeDlM0qgKAlMyyD7m70
T1mSMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj
Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0
NTU4ZmRiZi5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzMzJlMzEzNDM0MmUzMTM2MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMyMzczMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5Cg
MA0GCSqGSIb3DQEBCwUAA4IBAQA0SuTFTVYB+DEvhcvQkNfJnA6hqEC0oEqsh5BS
L/N6icFhslh8Y9/MvnV6qaF87x1I8zTqeUupymIkaUnMjeQGypWauFDJsd11Z6b2
LET14pplObIVwAd4QjU9neTCcH02fUujMTnfI0dR6FQzIxF9JCosB5wXsXThgBiQ
SaAmuZ2+UEJ97dOPu5KQcM3nm9DP5CRCIgQdSczPK+YRMiUQisAnauXtBj0BX0vQ
fl6QijVPO8pqFXjzCrfVAvVp/27ajQgyHSQ89idQADfOaUdq6DW7DJh0rMr0mEK+
ZeqBYFuPYvL0eJ1g+Kgba0clzIgFLjm4ebzqjoVu1/gNDWF9
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:03:39 2026 by rpki-client